Pound symbol as part of password not being accepted

[Peter Schober]

* Morris, Andi <amorris at cardiffmet.ac.uk> [2014-06-24 12:20]:
> Appreciated Peter, but other published sites here use the same login
> form via TMG and don't have the issue, it is only ever the
> Shibboleth server that does, which is why I kept coming back to this
> list as it was where I was receiving the most help with the issue.

Sorry, I have no idea what TMG is and how it works, and I understand
that your IDP deployment is affected by this.  But the Shibboleth
software does not perform authentication when using the RemoteUser
login handler. The same problem still occurs when you take Shibboleth
out of the equasion, e.g. with only running Apache httpd (which I
think you're doing, proying to the IDP with it). Unless httpd is able
to log the authenticated subject as REMOTE_USER to the access log it's
not a Shibboleth problem.
-peter