Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 12 replies
  • Subscribers 0 subscribers
  • Views 5460 views
  • Users 0 members are here
Options
Suggested

[7.270] AD LDAP Authentication fails w/ special chars in password [PENDING]

Alex76
if you set authentication over Active Directory and you have special characters in the password, the authentication failed. The Password from user2 has a # in his password. the user1 has only normal characters and numbers in this password and works. 
 
2008:08:08-11:02:44 (none) aua[7975]: id="3004" severity="info" sys="System" sub="auth" name="Authentication successful" srcip="132.148.8.160" user="user1" caller="portal" engine="local" 
2008:08:08-11:03:48 (none) aua[8237]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="132.148.8.160" user="user2" caller="portal" reason="DENIED" 
2008:08:08-11:04:06 (none) aua[8356]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="132.148.8.160" user="user2" caller="portal" reason="DENIED"

 
if i test this settings in the Test Field on the Active Directory Tab, the user1 workds and user2 not.
 
user1:

[FONT=monospace]2008:08:08-11:13:15 (none) aua[22293]: id="3006" severity="info" sys="System" sub="auth" name="Authentication test request: m:adirectory, f:none, u:user1, ip:0.0.0.0" [/FONT]
[FONT=monospace]2008:08:08-11:13:15 (none) aua[22293]: id="3006" severity="info" sys="System" sub="auth" name="Testing method adirectory" [/FONT]
[FONT=monospace]2008:08:08-11:13:15 (none) aua[22293]: id="3006" severity="info" sys="System" sub="auth" name="Authentication test successfull" [/FONT]

user2:

[FONT=monospace]2008:08:08-11:08:24 (none) aua[22293]: id="3006" severity="info" sys="System" sub="auth" name="Authentication test request: m:adirectory, f:none, u:user2, ip:0.0.0.0" [/FONT]
[FONT=monospace]2008:08:08-11:08:24 (none) aua[22293]: id="3006" severity="info" sys="System" sub="auth" name="Testing method adirectory" [/FONT]
[FONT=monospace]2008:08:08-11:08:24 (none) aua[22293]: id="3006" severity="info" sys="System" sub="auth" name="Authentication test failed: User could not be authenticated" [/FONT]

 
user1: Password: abc123
user2: Password: abc123#
 
Bug2:
If you use the Testfield, the ip will be shown in the log as 0.0.0.0