Mailing-List: contact jetspeed-dev-help@portals.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jetspeed Developers List" <jetspeed-dev@portals.apache.org>
Message-ID: <13267514.1199902234042.JavaMail.jira@brutus>
Date: Wed, 9 Jan 2008 10:10:34 -0800 (PST)
From: "Martin Petras (JIRA)" <jetspeed-dev@portals.apache.org>
To: jetspeed-dev@portals.apache.org
Subject: [jira] Commented: (JS2-817) Cannot login with username with .
In-Reply-To: <8641079.1196419843012.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/JS2-817?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12557364#action_12557364 ] 

Martin Petras commented on JS2-817:
-----------------------------------

Sorry for responding so late. 

In my opinion is the best solution to add a property to Jetspeed.properties:
security.user.validating.regex=.*\\(.*|.*\\[.*|.*\\{.*|.*\\\\.*|.*\\^.*|.*\\$.*|.*\\|.*|.*\\).*|.*\\?.*|.*\\*.*|.*\\+.*|.*\\..*


and then change method org.apache.jetspeed.security.spi.impl.ldap.AbstractLdapDao.validateUid(String)
by replacing line
  String pattern = ".*\\(.*|.*\\[.*|.*\\{.*|.*\\\\.*|.*\\^.*|.*\\$.*|.*\\|.*|.*\\).*|.*\\?.*|.*\\*.*|.*\\+.*|.*\\..*"; 
with
  String pattern = Jetspeed.getConfiguration().getString("security.user.validating.regex", ".*\\(.*|.*\\[.*|.*\\{.*|.*\\\\.*|.*\\^.*|.*\\$.*|.*\\|.*|.*\\).*|.*\\?.*|.*\\*.*|.*\\+.*|.*\\..*");

I've checked it, it works well. Please apply this patch.

> Cannot login with username with .
> ---------------------------------
>
>                 Key: JS2-817
>                 URL: https://issues.apache.org/jira/browse/JS2-817
>             Project: Jetspeed 2
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.1.2, 2.1.3
>            Reporter: Martin Petras
>
> There is an validator for username in
> org.apache.jetspeed.security.spi.impl.ldap.AbstractLdapDao.validateUid(String)
> I need to login with username:  name.surname but in the method there is a pattern for validating which contains dot.
> String pattern = ".*\\(.*|.*\\[.*|.*\\{.*|.*\\\\.*|.*\\^.*|.*\\$.*|.*\\|.*|.*\\).*|.*\\?.*|.*\\*.*|.*\\+.*|.*\\..*";
> It is possible to externalize this string to a configuration file?

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org