<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2658.2">
<TITLE>RE: [opencms-dev] Allowed chars for passwords?</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Hi Anatol,</FONT>
</P>
<P><FONT SIZE=2>I got that problem as well and ran OpenCms under debug to understand what was going on.</FONT>
</P>
<P><FONT SIZE=2>Basically, when you send "ab+cd" from the preferences what you actually send is "ab cd" because + is interpreted as a CGI placeholder for a white space. </FONT></P>
<P><FONT SIZE=2>Later when you log in you send "ab+cd" but what's encoded in the db is the digest for "ab cd". So you're thrown out...</FONT>
</P>
<P><FONT SIZE=2>When you log in with 6.0 rc1 and you've got your password wrong you apparently fall into a null pointer exception in method :</FONT></P>
<P><FONT SIZE=2>org.opencms.db.CmsUserSettings#init() </FONT>
</P>
<P><FONT SIZE=2>at line 473 because there are no preferences for a user who failed to log in.</FONT>
</P>
<P><FONT SIZE=2>I guess that's a kind of bug worth reporting but I have just downloaded OpenCms yesterday for the first time and subscribed this list when I ran into trouble. Surely some OpenCms guru can use this.</FONT></P>
<P><FONT SIZE=2>For now, I'll keep away from "+" (may be should send "ab%20cd" ;-)</FONT>
</P>
<P><FONT SIZE=2>Regards,</FONT>
</P>
<P><FONT SIZE=2>Alain Pannetier.</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Anatol [<A HREF="mailto:opencms@recordcaster.de">mailto:opencms@recordcaster.de</A>] </FONT>
<BR><FONT SIZE=2>Sent: 09 June 2005 10:59</FONT>
<BR><FONT SIZE=2>To: opencms-dev@opencms.org</FONT>
<BR><FONT SIZE=2>Subject: Re: [opencms-dev] Allowed chars for passwords?</FONT>
</P>
<P><FONT SIZE=2>A little addendum:</FONT>
</P>
<P><FONT SIZE=2>For a "normal" user a "+" char in the password is noproblem, but only </FONT>
<BR><FONT SIZE=2>for ADMINs!</FONT>
<BR><FONT SIZE=2>Is this intended?</FONT>
</P>
<P><FONT SIZE=2>Greetings</FONT>
<BR><FONT SIZE=2>Anatol</FONT>
</P>
<P><FONT SIZE=2>Anatol schrieb:</FONT>
</P>
<P><FONT SIZE=2>> Hi All!</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> Could it be, that some chars are not allowed for using in passwords? I </FONT>
<BR><FONT SIZE=2>> changed my password in opencms and one char was an "+". After relogin, </FONT>
<BR><FONT SIZE=2>> I got an error (Tomcat: nullpointer exception if I remember it right) </FONT>
<BR><FONT SIZE=2>> :-( Good to have an Admin-User ;-) I tested it again and again: If I </FONT>
<BR><FONT SIZE=2>> used a password without a "+" char, the login was correct, but if I </FONT>
<BR><FONT SIZE=2>> used a "+" i got the error.</FONT>
<BR><FONT SIZE=2>> Are some chars not for use in passwords or is it a bug?</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> Greetings</FONT>
<BR><FONT SIZE=2>> Anatol</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>> _______________________________________________</FONT>
<BR><FONT SIZE=2>> This mail is send to you from the opencms-dev mailing list</FONT>
<BR><FONT SIZE=2>> To change your list options, or to unsubscribe from the list, please </FONT>
<BR><FONT SIZE=2>> visit</FONT>
<BR><FONT SIZE=2>> <A HREF="http://mail.opencms.org/mailman/listinfo/opencms-dev" TARGET="_blank">http://mail.opencms.org/mailman/listinfo/opencms-dev</A></FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>></FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>_______________________________________________</FONT>
<BR><FONT SIZE=2>This mail is send to you from the opencms-dev mailing list</FONT>
<BR><FONT SIZE=2>To change your list options, or to unsubscribe from the list, please visit</FONT>
<BR><FONT SIZE=2><A HREF="http://mail.opencms.org/mailman/listinfo/opencms-dev" TARGET="_blank">http://mail.opencms.org/mailman/listinfo/opencms-dev</A></FONT>
</P>
</BODY>
</HTML>