Bug 704488

Summary: pam_access: group names with brackets ()
Product: [Fedora] Fedora Reporter: Marcus Moeller <marcus.moeller>
Component: pamAssignee: Tomas Mraz <tmraz>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-05-13 11:14:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Marcus Moeller 2011-05-13 11:06:10 UTC 
Description of problem:
We are in the situation that some of our group names contain ( and ) signs, e.g.:

mygroup (mydepartment)

Since a recent update, a new feature has been added to pam_access described as follows in the sample configuration:

# The group file is searched only when a name does not match that of the
# logged-in user. Both the user's primary group is matched, as well as
# groups in which users are explicitly listed.
# To avoid problems with accounts, which have the same name as a group,
# you can use brackets around group names '(group)' to differentiate.
# In this case, you should also set the "nodefgroup" option.

which leads to the situation that groups with brackets are not recognised correctly, anymore.
Comment 1 Tomas Mraz 2011-05-13 11:14:55 UTC 
Please report the problem to the upstream request tracker:

https://fedorahosted.org/linux-pam/

Although I am very much skeptical of any reasonable resolution for this. I do not think () in group names are portable anyway.
Comment 2 Marcus Moeller 2011-05-13 11:22:49 UTC 
done:

https://fedorahosted.org/linux-pam/ticket/2