Pound symbol as part of password not being accepted

Mon Jun 23 11:42:01 EDT 2014

Pretty much as easy as any other reverse proxy rule, although we do have two separate rules, one for the /idp/Authn/RemoteUser  and the other for the /* path.

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Dave Perry
Sent: 23 June 2014 16:40
To: Shib Users
Subject: RE: Pound symbol as part of password not being accepted

Andi, on a different note / out of interest - how hard was it to get Shibboleth published via TMG? We mooted the idea last year.

Thanks,
Dave
_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG Extension 2230 / Direct Dial 01482 381930

Please rate our service in the annual Libraries & eLearning User survey.
You could win a £15 Amazon voucher!
For staff - http://library.hull-college.ac.uk/staffsurvey
For students - http://library.hull-college.ac.uk/survey 

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Morris, Andi
Sent: 23 June 2014 15:32
To: 'Shib Users'
Subject: RE: Pound symbol as part of password not being accepted

To further muddy the waters, this only seems to be happening for external users. The Shibboleth server is published via TMG providing forms authentication to our backend AD server. 

However, the same web listener is being used for other internal resources which are allowing the test user through with the £ symbol in the password.

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Morris, Andi
Sent: 23 June 2014 13:47
To: 'Shib Users'
Subject: RE: Pound symbol as part of password not being accepted

Hi,
I've finally had a chance to give this a try and I've edited all the jsp files within C:\Program Files (x86)\Apache Software Foundation\Tomcat 6.0\webapps\idp as per the suggestions below and restarted tomcat, but I still see the issue.

Also I've had a go at the other suggestions put forward:

"You haven't said how you are authenticating to the backend password store (ldap, kerb)   or what theat store is (Active directory, Novell etc)"

 - Apologies, we are authenticating with Active Driectory using LDAP.

" Then you're using tomcat managed authentication. There is some encoding problem with the FormAuthenticator. A simple fix would be to force the character encoding, as explained here :
http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Form_Authenticator_Valve"

 - Thanks, that's helpful. Unfortunately it doesn't appear that my Tomcat is set to use forms authentication. Certainly there is no reference to it within my web.xml where I would expect it to be. 

I'm at a total loss here.

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Manuel Haim
Sent: 14 April 2014 08:32
To: users at shibboleth.net
Subject: Re: Pound symbol as part of password not being accepted

Hi,

initially we had some problems with German umlauts... Here are just three points you could try:

1. Make sure your jsp files are stored as UTF-8.

2. Within each jsp file, add the following line at the top:

<%@ page contentType="text/html; charset=UTF-8" %>

3. Within the html <head> element of your jsp files, add the line

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

Kind regards,
Manuel
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net