You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-dev@portals.apache.org by "Thorsten Berger (JIRA)" <je...@portals.apache.org> on 2006/07/13 11:38:29 UTC

[jira] Created: (JS2-555) Unable to use Unicode (UTF-8) in user names and passwords

Unable to use Unicode (UTF-8) in user names and passwords
---------------------------------------------------------

         Key: JS2-555
         URL: http://issues.apache.org/jira/browse/JS2-555
     Project: Jetspeed 2
        Type: Bug

  Components: Security  
    Versions: 2.1-dev    
    Reporter: Thorsten Berger


Currently, it's not possible to use utf-8 characters in usernames and passwords.
In my case, some of our users reported problems with their passwords as they used some very common german characters.

I will attach a patch for Jetspeed2 on Tomcat 5.0 and 5.5. However, I could not verify the behaviour with Tomcat 5.0. The patch is working fine with Tomcat 5.5.
The patch solves the problem by:
- setting UTF-8 as character encoding in LoginProxyServlet (let me know if you'd prefer looking up the character encoding in the MediaType of the Agent's CapabilityMap)
- setting UTF-8 as character encoding in tomcat's FormAuthenticator valve (configured in jetspeed's context.xml)


It would be great if this patch could find its way into the next 2.1 release ;)

Regards, Thorsten

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Assigned: (JS2-555) Unable to use Unicode (UTF-8) in user names and passwords

Posted by "David Sean Taylor (JIRA)" <je...@portals.apache.org>.
     [ http://issues.apache.org/jira/browse/JS2-555?page=all ]

David Sean Taylor reassigned JS2-555:
-------------------------------------

    Assignee: David Sean Taylor

> Unable to use Unicode (UTF-8) in user names and passwords
> ---------------------------------------------------------
>
>                 Key: JS2-555
>                 URL: http://issues.apache.org/jira/browse/JS2-555
>             Project: Jetspeed 2
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.1-dev
>            Reporter: Thorsten Berger
>         Assigned To: David Sean Taylor
>         Attachments: 2nd_patch-utf8-in-username-password(js2-555)--Tomcat55.txt, patch-utf8-in-username-password(js2-555).txt
>
>
> Currently, it's not possible to use utf-8 characters in usernames and passwords.
> In my case, some of our users reported problems with their passwords as they used some very common german characters.
> I will attach a patch for Jetspeed2 on Tomcat 5.0 and 5.5. However, I could not verify the behaviour with Tomcat 5.0. The patch is working fine with Tomcat 5.5.
> The patch solves the problem by:
> - setting UTF-8 as character encoding in LoginProxyServlet (let me know if you'd prefer looking up the character encoding in the MediaType of the Agent's CapabilityMap)
> - setting UTF-8 as character encoding in tomcat's FormAuthenticator valve (configured in jetspeed's context.xml)
> It would be great if this patch could find its way into the next 2.1 release ;)
> Regards, Thorsten

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Updated: (JS2-555) Unable to use Unicode (UTF-8) in user names and passwords

Posted by "Thorsten Berger (JIRA)" <je...@portals.apache.org>.
     [ http://issues.apache.org/jira/browse/JS2-555?page=all ]

Thorsten Berger updated JS2-555:
--------------------------------

    Attachment: 2nd_patch-utf8-in-username-password(js2-555)--Tomcat55.txt

Unfortunately, Tomcat 5.0 doesn't support setting the character encoding in the FormAuthenticator Valve. So please forget the first patch. The 2nd now only supports Tomcat 5.5.
Fixing tomcat 5.x would require decoding the username/password Strings in the corresponding callback handlers.

> Unable to use Unicode (UTF-8) in user names and passwords
> ---------------------------------------------------------
>
>          Key: JS2-555
>          URL: http://issues.apache.org/jira/browse/JS2-555
>      Project: Jetspeed 2
>         Type: Bug

>   Components: Security
>     Versions: 2.1-dev
>     Reporter: Thorsten Berger
>  Attachments: 2nd_patch-utf8-in-username-password(js2-555)--Tomcat55.txt, patch-utf8-in-username-password(js2-555).txt
>
> Currently, it's not possible to use utf-8 characters in usernames and passwords.
> In my case, some of our users reported problems with their passwords as they used some very common german characters.
> I will attach a patch for Jetspeed2 on Tomcat 5.0 and 5.5. However, I could not verify the behaviour with Tomcat 5.0. The patch is working fine with Tomcat 5.5.
> The patch solves the problem by:
> - setting UTF-8 as character encoding in LoginProxyServlet (let me know if you'd prefer looking up the character encoding in the MediaType of the Agent's CapabilityMap)
> - setting UTF-8 as character encoding in tomcat's FormAuthenticator valve (configured in jetspeed's context.xml)
> It would be great if this patch could find its way into the next 2.1 release ;)
> Regards, Thorsten

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Updated: (JS2-555) Unable to use Unicode (UTF-8) in user names and passwords

Posted by "Thorsten Berger (JIRA)" <je...@portals.apache.org>.
     [ http://issues.apache.org/jira/browse/JS2-555?page=all ]

Thorsten Berger updated JS2-555:
--------------------------------

    Attachment: patch-utf8-in-username-password(js2-555).txt

> Unable to use Unicode (UTF-8) in user names and passwords
> ---------------------------------------------------------
>
>          Key: JS2-555
>          URL: http://issues.apache.org/jira/browse/JS2-555
>      Project: Jetspeed 2
>         Type: Bug

>   Components: Security
>     Versions: 2.1-dev
>     Reporter: Thorsten Berger
>  Attachments: patch-utf8-in-username-password(js2-555).txt
>
> Currently, it's not possible to use utf-8 characters in usernames and passwords.
> In my case, some of our users reported problems with their passwords as they used some very common german characters.
> I will attach a patch for Jetspeed2 on Tomcat 5.0 and 5.5. However, I could not verify the behaviour with Tomcat 5.0. The patch is working fine with Tomcat 5.5.
> The patch solves the problem by:
> - setting UTF-8 as character encoding in LoginProxyServlet (let me know if you'd prefer looking up the character encoding in the MediaType of the Agent's CapabilityMap)
> - setting UTF-8 as character encoding in tomcat's FormAuthenticator valve (configured in jetspeed's context.xml)
> It would be great if this patch could find its way into the next 2.1 release ;)
> Regards, Thorsten

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


[jira] Resolved: (JS2-555) Unable to use Unicode (UTF-8) in user names and passwords

Posted by "David Sean Taylor (JIRA)" <je...@portals.apache.org>.
     [ http://issues.apache.org/jira/browse/JS2-555?page=all ]

David Sean Taylor resolved JS2-555.
-----------------------------------

    Resolution: Fixed

patched applied and tested with 5.5 and 5.0.30

> Unable to use Unicode (UTF-8) in user names and passwords
> ---------------------------------------------------------
>
>                 Key: JS2-555
>                 URL: http://issues.apache.org/jira/browse/JS2-555
>             Project: Jetspeed 2
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.1-dev
>            Reporter: Thorsten Berger
>         Assigned To: David Sean Taylor
>         Attachments: 2nd_patch-utf8-in-username-password(js2-555)--Tomcat55.txt, patch-utf8-in-username-password(js2-555).txt
>
>
> Currently, it's not possible to use utf-8 characters in usernames and passwords.
> In my case, some of our users reported problems with their passwords as they used some very common german characters.
> I will attach a patch for Jetspeed2 on Tomcat 5.0 and 5.5. However, I could not verify the behaviour with Tomcat 5.0. The patch is working fine with Tomcat 5.5.
> The patch solves the problem by:
> - setting UTF-8 as character encoding in LoginProxyServlet (let me know if you'd prefer looking up the character encoding in the MediaType of the Agent's CapabilityMap)
> - setting UTF-8 as character encoding in tomcat's FormAuthenticator valve (configured in jetspeed's context.xml)
> It would be great if this patch could find its way into the next 2.1 release ;)
> Regards, Thorsten

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org