[#CONF-2238] Unable to log in with mixed-case username

Confluence

Unable to log in with mixed-case username

Created: 25/Nov/04 01:49 AM Updated: 11/Sep/08 08:47 PM

Component/s:

Users & Groups

Affects Version/s:

1.2.3

Fix Version/s:

None

Time Tracking:

Not Specified

Issue Links:

Part

This issue is incorporated by:

CONF-7603 Audit username case issues

Reference

This issue relates to:

~~CONF-2283~~ spacepermissions forcing lower case for username <-> object relation

This issue is related to:

~~CONF-2283~~ spacepermissions forcing lower case for username <-> object relation

Participants:	Charles Miller [old account, do not assign issues], Jens Schumacher [Atlassian] and Nick Faiz
Since last comment:	3 years, 13 weeks ago
Labels:

Description

« Hide

Armond (username Armond with an upper-case A) can't log on to c.a.c, despite having reset his password several times.

When I set the password to be identical to mine in the database, I couldn't log on either.

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Nick Faiz added a comment - 26/Nov/04 12:39 AM

This was an evil bug - someone had placed a username.toLowerCase() in ConfluenceAuthenticator before trying to authenticate.

[ Permlink | « Hide ]

Nick Faiz added a comment - 28/Nov/04 10:09 PM

Unfortunately, this must be backed out (see, also, ~~CONF-2283~~ and CONF-2284), due to the risk of making so many small changes - the lower casing issue will have to wait for a point release after Murrimbidgee, due to the low impact it has for users.

I'm assigning this to me as I'm interested in fixing the problem when a window appears.

[ Permlink | « Hide ]

Jens Schumacher [Atlassian] added a comment - 15/Jul/05 02:40 AM

We added back the username.toLowerCase() in ConfluenceAuthenticator, since it was introducing new problems.
If a user registered with a mixed case name, which will be lower cased during the sign-up without notifying the user, the user won't no longer be able to log in with that username.

We will provide a JSP which will force existing usernames in the database into lower case. It will also detect whether a username is used twice with different case characters. This should only affect a very little percentage of the existing users.