2 Commits

Include renames

Author	SHA1	Message	Date
James Tucker	5cb033d61e	ssh/tailssh: initialize username hint exclusions ... Allocate the exclusion set before adding client-supplied usernames. A true Exclude entry otherwise panics when SSH is enabled. Exercise the c2n handler with true, false, absent, and unknown exclusions, and cover the result cap and disabled-SSH behavior. Updates tailscale/corp#50380 Signed-off-by: James Tucker <james@tailscale.com> Change-Id: I1d9faf36e5809ccff888fc402329652e8b7d88c8	2026-10-26 10:00:23 -07:00
James Tucker	17c90d88c1	ssh/tailssh: fix off-by-one and clamp c2n SSH username hint cap ... The add closure used len(res.Usernames) > max, letting one extra username through the client's Max, and the client-supplied Max was used unclamped. Honor Max exactly and clamp it to a 100-username ceiling; the list is only a login hint. Updates tailscale/corp#50380 Signed-off-by: James Tucker <james@tailscale.com>	2026-10-24 14:10:24 -07:00