special characters in passwords + FR + ldap

Natalia Escalera nescalera at gmail.com
Wed Mar 8 04:04:48 CET 2006


Hello Mr. Turtiainen:

Thank you for your response.

> We have made a small fix to the ldap-module (as seen in the link to the
> mailing list archive). I don't know if this has been fixed in 1.1.0. I
> once had a quick look at the ldap-module of 1.1.0, it should be quite
> easy to test if it still fails.

The password issue is also in FR 1.1.0. I will try the patch suggested on
http://bugs.freeradius.org/show_bug.cgi?id=261 and see if it works for
our implementation.

Thank you,
Natalia.

On 3/7/06, Turtiainen, Tero <tero.turtiainen at capgemini.com> wrote:
>
> Hi,
>
> > -----Original Message-----
> > Date: Sat, 4 Mar 2006 15:19:32 -0600
> > From: "Natalia Escalera" <nescalera at gmail.com>
> >
> > Hello,
> >
> > What is needed is that Freeradius accepts passwors even if special
> > charaters are part of them. This is what is happening:
> >
> >
> >             pass$word -> FR -> LDAP -> FR (Answer: wrong password)
> >
> > Any ideas of how to solve it?
>
> This looks very much like the feature we have seen with FR 0.9.3.
> Passwords with a "special character" are truncated, resulting in
> password check failing.
>
> http://lists.freeradius.org/mailman/htdig/freeradius-users/2005-July/045
> 560.html
>
> This may be related to this bug, which is still open (I don't agree
> with the severity=minor :)
> http://bugs.freeradius.org/show_bug.cgi?id=261
>
> We have made a small fix to the ldap-module (as seen in the link to the
> mailing list archive). I don't know if this has been fixed in 1.1.0. I
> once had a quick look at the ldap-module of 1.1.0, it should be quite
> easy to test if it still fails.
> --
> Tero Turtiainen
> Technology Services
> Capgemini
> tero.turtiainen at capgemini.com
>
> This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient,  you are not authorized to read, print, retain, copy, disseminate,  distribute, or use this message or any part thereof. If you receive this  message in error, please notify the sender immediately and delete all  copies of this message.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>




More information about the Freeradius-Users mailing list