From e5ed2821cddd3ce177d0441aceaf1c166d485419 Mon Sep 17 00:00:00 2001
From: hagbard <vyosdev@derith.de>
Date: Thu, 5 Jul 2018 11:31:18 -0700
Subject: T720: filter is now the same like in useradd(8) including the debian
 restrictions for lenght

---
 interface-definitions/ssh.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/interface-definitions/ssh.xml b/interface-definitions/ssh.xml
index 9b3a2fddc..e8786d202 100644
--- a/interface-definitions/ssh.xml
+++ b/interface-definitions/ssh.xml
@@ -21,12 +21,20 @@
                   <leafNode name="group">
                     <properties>
                       <help>Allow members of a group to login</help>
+                        <constraint>
+                          <regex>^[a-z_][a-z0-9_-]{1,31}[$]?</regex>
+                        </constraint>
+                        <constraintErrorMessage>illegal characters or more than 32 characters</constraintErrorMessage>
                       <multi/>
                     </properties>
                   </leafNode>
                   <leafNode name="user">
                     <properties>
                       <help>Allow specific users to login</help>
+                      <constraint>
+                        <regex>^[a-z_][a-z0-9_-]{1,31}[$]?</regex>
+                      </constraint>
+                      <constraintErrorMessage>illegal characters or more than 32 characters</constraintErrorMessage>
                       <multi/>
                     </properties>
                   </leafNode>
@@ -37,12 +45,20 @@
                   <leafNode name="group">
                     <properties>
                       <help>Disallow members of a group to login</help>
+                      <constraint>
+                        <regex>^[a-z_][a-z0-9_-]{1,31}[$]?</regex>
+                      </constraint>
+                      <constraintErrorMessage>illegal characters or more than 32 characters</constraintErrorMessage>
                       <multi/>
                     </properties>
                   </leafNode>
                   <leafNode name="user">
                     <properties>
                       <help>Disallow specific users to login</help>
+                      <constraint>
+                        <regex>^[a-z_][a-z0-9_-]{1,31}[$]?</regex>
+                      </constraint>
+                      <constraintErrorMessage>illegal characters or more than 32 characters</constraintErrorMessage>
                       <multi/>
                     </properties>
                   </leafNode>
-- 
cgit v1.2.3