Pound symbol as part of password not being accepted

[Cantor, Scott]

On 9/26/13 8:48 AM, "Morris, Andi" <amorris at cardiffmet.ac.uk> wrote:

>We¹ve just come across an odd problem here where a user could log into
>all our remote resources apart from the shibboleth authenticated ones.
>Upon investigation I could see in the Apache ssl_443_error_log file that
>the user was being denied
> access with an ³unknown user name or bad password² error. I could see
>that the username being typed was correct from the same log file, and
>just on a hunch I decided to change the password of the user from
>something that contained the £ symbol to something
> that didn¹t, and suddenly access was granted.
> 
>Does anybody know the reason for this, and how I can resolve it?

Not really, but seems like some kind of encoding issue between the browser
and the web server most likely. You'd have to make sure everything is in
sync on that, including IIRC some settings on the Tomcat connector to
control how it handles data coming in.

-- Scott