Passwords are handled differently in the MCB than in the default IdP code

Cantor, Scott cantor.2 at osu.edu
Thu Jul 16 15:17:59 EDT 2015


On 7/16/15, 3:11 PM, "users on behalf of Mark McCoy" <users-bounces at shibboleth.net on behalf of Mark.McCoy at utsa.edu> wrote:

>Ok, I just looked through the source for the IdP and it is also stripping the whitespace. Please disregard this issue.

V3 does not, as far as I can tell. We just had a go-round about this more generally with all the password processing and the consensus certainly was not to strip and we weren't stripping for at least the user login case.

(If V2 does, I would say that's a bug, but because of the timelines and such, I think it would a mistake to introduce a change like that at this point unless it were a regression, FWIW.)

-- Scott



More information about the users mailing list