Using Active Directory to login to XI -- Special Chars

[cwscribner]

Hi all.

I recently did a training session with a client whom had done some official training offered from Nagios. He brought up an interesting point that I feel requires addressing. His instructor noted that the plugin to use active directory to login doesn't allow special characters. This is a problem for them as special chars are part of their password scheme (and is a pretty common practice anyway). Is there a simple way to allow the ad_login plugin to use special chars or is this a feature that's in the works?

[agriffin]

Active Directory integration was developed for a single client of ours who required it and had relatively simple requirements. It is not currently a very robust component. We have plans to address this in the future, however I don't know when we'll get to it as we have a lot of things on our plate at the moment.

[rseiwert]

Yet another Samba limitation....

[hockad]

We also are having this issue. Is there anything that we could do to help move this along?

[yancy]

hockad,

Can you be more specific about the issue your facing? The ad component which allows users to authenticate against active directory has no limit for special characters in the password currently.


Regards,

-Yancy

[hockad]

Yancy,
We had a user with the '@' symbol in there password. They were not able to login to the system. We added the following line of code to active_directory.inc.php and was able to get around the problem.

utf8_decode($password);

Here is the diff.

337,338d336
< //AJH added to deal with special characters in password
< utf8_decode($password);

[yancy]

hockad,

The stage environment i'm has usernames with an apetail "@" symbol and it doesn't cause issues with AD authentication. This is a big isssue if special characters do cause problems because of most password complexity requirements.

I'm not sure why the post variables would need to be decoded like in your example, but i'll do some testing.

Thanks for posting your solution to this.

-Yancy

[hockad]

Yancy,
I believe the users had the '@' at the end of the password.

Adam