[389-users] Problem with passwords and spanish characters

[Rich Megginson]

On 05/08/2012 01:20 AM, Juan Carlos Camargo wrote:
> Hi there,
>
> I'm facing a problem with windows users whose password contains the 
> spanish accented "n" (ñ). Neither the ldap directory or the password 
> sync service complain at all , but the user is unable to auth in 389ds 
> (latest version both 389-ds and windows pass sync). I've browsed the 
> forums and disabled the 7bit-check plugin, but that does not seem to 
> work either.  Here's what I've found in the audit logs (please note 
> the unhashed password entry):
>
> Windows user password: funci0nA
> time: 20120508080147
> dn: uid=*******************
> changetype: modify
> replace: userPassword
> userPassword: {SSHA}z8Ns6yOIY5N8JiZA7N53DWUCm6QCdBV083dXbA==
> -
> replace: modifiersName
> modifiersName: cn=directory manager
> -
> replace: modifyTimestamp
> modifyTimestamp: 20120508060323Z
> -
> replace: unhashed#user#password
> unhashed#user#password: funci0nA
> -
> replace: entryusn
> entryusn: 203032
>
>
> However, with accented "n":
>
>
> Windows user password: cañadelomo
> time: 20120508080345
> dn: uid=*****************
> changetype: modify
> replace: userPassword
> userPassword: {SSHA}gD/DhJXnFiRsXl2KIooVPaSwG+1K9VjU8yxZ5Q==
> -
> replace: modifiersName
> modifiersName: cn=directory manager
> -
> replace: modifyTimestamp
> modifyTimestamp: 20120508060521Z
> -
> replace: unhashed#user#password
> unhashed#user#password:: Y2HxYWRlbG9tbw==
> -
> replace: entryusn
> entryusn: 203037
> -
>
> Why the difference when the spanish char is used, does it trigger 
> something else in the sync process?

Possibly.  Please file a ticket at https://fedorahosted.org/389
Note that
unhashed#user#password:: Y2HxYWRlbG9tbw==
is ca\xf1adelomo - I'm assuming \xf1 is ñ in utf-8 encoding


> Regards!
>
>
> -- 
>
> ------------------------------------------------------------------------
>
> Juan Carlos Camargo Carrillo
>
> 957-211157 <callto:957-211157> , 650932877 <callto:650932877>
>
>
>
>
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120508/b6cf58d0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 3538 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120508/b6cf58d0/attachment.jpe>