T720: restrict usernames to the format useradd will accept.

This reintroduces hagbard's change that has somehow gone missing.
vyos · Oct 28, 2018 · 6daba1e · 6daba1e
1 parent 35a3b84
commit 6daba1e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/templates/system/login/user/node.def b/templates/system/login/user/node.def
@@ -3,6 +3,7 @@ type: txt
 help: User account information
 
 syntax:expression: exec "/opt/vyatta/sbin/vyatta_check_username.pl $VAR(@)"
+syntax:expression: exec "${vyos_libexec_dir}/validate-value.py --regex \'^[a-zA-Z0-9\-_]{1,100}\'  --value \'$VAR(@)\'"; "illegal characters in username or longer than 100 chars"
 
 commit:expression: $VAR(@) == "" ||
 		   $VAR(authentication/plaintext-password) != "" ||