Hello,
Issue was opened 5 years back with following description: It is possible to put junk into the shell attribute of an user entry. We should reuse the existing code that is in use when allowed_shells/vetoed_shells are present, check if the shell exists and at least give a warning.
More on ticket: The ticket was about checking the LDAP attribute that contains the user's shell against either /etc/shells or more preferably also against the logic that is in sss_resp_get_shell_override and issue a warning.
But There is a lot of code that is responder-specific and moving all this to providers only in order to provide a warning seems like busywork.
Can this ticket be closed?
-- Thanks Amit Kumar !!If you stumble, get back up. What happened yesterday, no longer matters. Today is another day to move closer to your GOAL!!