Pound symbol as part of password not being accepted

[Morris, Andi]

I should have stated that I'm running Shibboleth IDP 2.3.8 on a Windows 2008R2 box. Shibboleth is running through Tomcat 6.0 on Apache 2.2.17.

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Morris, Andi
Sent: 26 September 2013 13:49
To: users at shibboleth.net
Subject: Pound symbol as part of password not being accepted

Hi all,
We've just come across an odd problem here where a user could log into all our remote resources apart from the shibboleth authenticated ones. Upon investigation I could see in the Apache ssl_443_error_log file that the user was being denied access with an "unknown user name or bad password" error. I could see that the username being typed was correct from the same log file, and just on a hunch I decided to change the password of the user from something that contained the £ symbol to something that didn't, and suddenly access was granted.

Does anybody know the reason for this, and how I can resolve it?

Cheers,
Andi


-------------------------------------
Andi Morris
IT Security Officer
Cardiff Metropolitan University
T: 02920 205720
E: amorris at cardiffmet.ac.uk<mailto:amorris at cardiffmet.ac.uk>
--------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130926/081df619/attachment-0001.html