Page 1 of 1

Using Active Directory to login to XI -- Special Chars

Posted: Mon Oct 03, 2011 11:03 am
by cwscribner
Hi all.

I recently did a training session with a client whom had done some official training offered from Nagios. He brought up an interesting point that I feel requires addressing. His instructor noted that the plugin to use active directory to login doesn't allow special characters. This is a problem for them as special chars are part of their password scheme (and is a pretty common practice anyway). Is there a simple way to allow the ad_login plugin to use special chars or is this a feature that's in the works?

Re: Using Active Directory to login to XI -- Special Chars

Posted: Mon Oct 03, 2011 11:16 am
by agriffin
Active Directory integration was developed for a single client of ours who required it and had relatively simple requirements. It is not currently a very robust component. We have plans to address this in the future, however I don't know when we'll get to it as we have a lot of things on our plate at the moment.

Re: Using Active Directory to login to XI -- Special Chars

Posted: Thu Oct 06, 2011 11:44 am
by rseiwert
Yet another Samba limitation....

Re: Using Active Directory to login to XI -- Special Chars

Posted: Fri Jan 04, 2013 4:55 pm
by hockad
We also are having this issue. Is there anything that we could do to help move this along?

Re: Using Active Directory to login to XI -- Special Chars

Posted: Mon Jan 07, 2013 11:17 am
by yancy
hockad,

Can you be more specific about the issue your facing? The ad component which allows users to authenticate against active directory has no limit for special characters in the password currently.


Regards,

-Yancy

Re: Using Active Directory to login to XI -- Special Chars

Posted: Tue Jan 08, 2013 2:22 pm
by hockad
Yancy,
We had a user with the '@' symbol in there password. They were not able to login to the system. We added the following line of code to active_directory.inc.php and was able to get around the problem.

utf8_decode($password);

Here is the diff.

337,338d336
< //AJH added to deal with special characters in password
< utf8_decode($password);

Re: Using Active Directory to login to XI -- Special Chars

Posted: Tue Jan 08, 2013 3:51 pm
by yancy
hockad,

The stage environment i'm has usernames with an apetail "@" symbol and it doesn't cause issues with AD authentication. This is a big isssue if special characters do cause problems because of most password complexity requirements.

I'm not sure why the post variables would need to be decoded like in your example, but i'll do some testing.

Thanks for posting your solution to this.

-Yancy

Re: Using Active Directory to login to XI -- Special Chars

Posted: Wed Jan 09, 2013 9:46 am
by hockad
Yancy,
I believe the users had the '@' at the end of the password.

Adam