https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
Felix Schumacher changed:
What|Removed |Added
Status|NEW |NEEDINFO
--- Comment #1 from Felix
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #2 from Satya ---
username in the ldap is Testing+Username.
'Testing\+username' is authenticated successfully in 8.565 but failed in 8.5.66
please find the attached screen shot
--
You are receiving this mail because:
You are the
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #3 from Satya ---
Created attachment 37895
--> https://bz.apache.org/bugzilla/attachment.cgi?id=37895&action=edit
attachement for LDAP users
--
You are receiving this mail because:
You are the assignee for the bug.
-
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #4 from Felix Schumacher ---
If the username is 'Testing+Username', try to use it in the authentication
process. Tomcat will add the backslash for you. Currently there is no switch to
bring back the old behaviour.
Are there any rea
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #5 from Satya ---
i will test and post the results soon.
This new change is broken the backward compatibility.
As per the above description, 8.6.55 has the faulty code and fixed in 8.5.66.
is my understanding correct?
--
You ar
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #6 from Mark Thomas ---
See bug 65224 for details
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscribe, e-mail: dev-unsubscr
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #7 from Satya ---
one more case i have tested and below are results.
Below user exists in LDAP
UserName:<>+="#;,rrr
Password:<>+="#;,rrr
8.5.65 : our Application sends below credentials and authentication successful
UserN
https://bz.apache.org/bugzilla/show_bug.cgi?id=65373
--- Comment #8 from Felix Schumacher ---
You may try to escape the hash sign '#' and the equals sign '='.
Tomcat will only escape it, if it is the first char of a value. We tried to
model out escaping after RFC 4514. There the '#' and '=' sign