pam - long username mapping

[Aksoy]

Continues from previous issue "username length limitation" http://forums.itrc.hp.com/cm/QuestionAnswer/1,11866,0x70b8cf38d6bdd5118ff10090279cd0f9,00.html


After users insist, overwhelmingly, to keep their long names, and without giving out security checks, can there be a solution like this one:

users would authenticate through pam using their long names, but pam would map these long names to shorter ones (coming from another LDAP attribute). So all unix commands and applications will only see the short login name?

Does it sound reasonable?

What would this involve in terms of pam configuration & development?

Hmmm not so easy one...
Regards, SA