You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2003/08/28 21:18:38 UTC

DO NOT REPLY [Bug 22801] New: - password characters restricted

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22801>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22801

password characters restricted

           Summary: password characters restricted
           Product: Tomcat 4
           Version: 4.1.27
          Platform: PC
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: jgreif@alumni.princeton.edu


In installing, if you enter a password for the administrator such as x&y, the 
ampersand is not escaped in conf/tomcat-users.xml, causing the naming context 
lookup to fail and prevent Tomcat from starting.

Either the installer should prohibit use of such characters, or should warn 
against it, or the proper escaping should occur.

The workaround is to change the password.