[gnutls-devel] GnuTLS | tpmtool --register fails if username contains a backslash (#1753)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Sun Oct 19 19:51:46 CEST 2025



Jeremy Jackson created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1753



## Description of problem:

On a Samba AD Domain Controller, usernames take the format DOMAIN\username and this seems to confuse tpmtool.  It never tries to load user.data from ~/.trousers but instead tries various system locations in /run/ /var/run /usr/lib /usr/local/lib etc.

There is a workaround by setting an environment variable:

export TSS_USER_PS_FILE="/path/to/my/custom_user.data"

## Version of gnutls used:

3.8.9

## Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL)

Debian

## How reproducible:

Consistent.

Steps to Reproduce:

 * login as a user with DOMAIN\ in username
 * use commands like --list that need to search user.data
 * only outputs then quits: gnutls_tpm_get_registered: TPM error.


## Actual results:

gnutls_tpm_get_registered: TPM error.

## Expected results:

Command completion, key listing, etc.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1753
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20251019/1dbeb208/attachment-0001.html>


More information about the Gnutls-devel mailing list