Pound symbol as part of password not being accepted

[Morris, Andi]

Appreciated Peter, but other published sites here use the same login form via TMG and don't have the issue, it is only ever the Shibboleth server that does, which is why I kept coming back to this list as it was where I was receiving the most help with the issue.

However, I am leaning towards this being something to do with link translation on the Shibboleth publishing rule in TMG, so I will investigate this further off list.

Thanks for the advice everyone has given so far, apologies if it turns out that it is not actually a Shibboleth issue at all.

Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: 23 June 2014 18:35
To: users at shibboleth.net
Subject: Re: Pound symbol as part of password not being accepted

* Morris, Andi <amorris at cardiffmet.ac.uk> [2014-06-23 14:47]:
> I've finally had a chance to give this a try and I've edited all the 
> jsp files within C:\Program Files (x86)\Apache Software 
> Foundation\Tomcat 6.0\webapps\idp as per the suggestions below and 
> restarted tomcat, but I still see the issue.

You said you're using the RemoteUser login handler, so ignore all suggestions about changing JSP files, you're not using them (as others have alrady stated).

> " Then you're using tomcat managed authentication. There is some encoding problem with the FormAuthenticator. A simple fix would be to force the character encoding, as explained here :
> http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Form_Authenticator_Valve"
> 
>  - Thanks, that's helpful. Unfortunately it doesn't appear that my  
> Tomcat is set to use forms authentication. Certainly there is no  
> reference to it within my web.xml where I would expect it to be.

When I try to access https://idp.uwic.ac.uk/idp/Authn/RemoteUser I'm being sent to
https://idp.uwic.ac.uk/CookieAuth.dll?GetLogon?curl=Z2FidpZ2FAuthnZ2FRemoteUser&reason=0&formdir=2
so whatever that code is, that's where it seems authentication is happening. Which is not Shibboleth. So it's not something this list can help you with.
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net