DO NOT REPLY [Bug 31198] - Non-ASCII Passwords Converted to UTF-8

2005-01-07 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=31198.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31198


[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED




--- Additional Comments From [EMAIL PROTECTED]  2005-01-07 11:08 ---
FORM and DIGEST required a few small fixes - these have been applied to CVS for
TC4 and TC5.

Remember that for editing of these to work correctly via the admin app, the
SetCharacterEncodingFilter must be configured.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 31198] - Non-ASCII Passwords Converted to UTF-8

2005-01-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=31198.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31198


[EMAIL PROTECTED] changed:

   What|Removed |Added

 OS/Version||All
Version|4.0.6 Final |4.1.31




--- Additional Comments From [EMAIL PROTECTED]  2005-01-05 22:58 ---
Quick update:

The fix (using the filter) described in 29091 appears to resolve the issues with
the admin app (passwords are saved correctly in UTF-8) but a much trickier
problem has emerged in testing.

For BASIC auth the password is converted to bytes and base 64 encoded. The
problem appears to be the different browsers (at least IE and FireFox) make
different encoding assumptions (and neither seem to assume UTF-8) at this point
because the same username and password results in different Authorization
headers. It is looking like another i18n grey area but I will do some more work
to see if there is anything that can be done to work around this fun and games.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 31198] - Non-ASCII Passwords Converted to UTF-8

2005-01-05 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=31198.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31198





--- Additional Comments From [EMAIL PROTECTED]  2005-01-05 23:50 ---
Yep. BASIC auth and non-ASCII passwords is a mess before it even gets to Tomcat.
Mozilla definitely (and I suspect IE as well) does a lossy conversion of
non-ASCII usernames and passwords before base64 encoding. There is no way I can
see of Tomcat supporting BASIC auth for non-ASCII usernames and passwords as
things currently stand.

On to FORM auth...

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug, or are watching the assignee.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 31198] - Non-ASCII Passwords Converted to UTF-8

2004-09-13 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=31198.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31198

Non-ASCII Passwords Converted to UTF-8

[EMAIL PROTECTED] changed:

   What|Removed |Added

  Component|Unknown |Webapps:Administration



--- Additional Comments From [EMAIL PROTECTED]  2004-09-13 19:18 ---
As bug 29091 states, this is not an easy fix.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]