Pound symbol as part of password not being accepted

[Morris, Andi]

Hi all,
We've just come across an odd problem here where a user could log into all our remote resources apart from the shibboleth authenticated ones. Upon investigation I could see in the Apache ssl_443_error_log file that the user was being denied access with an "unknown user name or bad password" error. I could see that the username being typed was correct from the same log file, and just on a hunch I decided to change the password of the user from something that contained the £ symbol to something that didn't, and suddenly access was granted.

Does anybody know the reason for this, and how I can resolve it?

Cheers,
Andi


-------------------------------------
Andi Morris
IT Security Officer
Cardiff Metropolitan University
T: 02920 205720
E: amorris at cardiffmet.ac.uk<mailto:amorris at cardiffmet.ac.uk>
--------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130926/2aac1081/attachment.html