X2Go Bug report logs - #716
python-x2gobroker web/plain module strips passwords breaking passwords that start or end with a space

version graph

Package: python-x2gobroker; Maintainer for python-x2gobroker is (unknown); Source for python-x2gobroker is src:x2gobroker.

Reported by: Jason Alavaliant <alavaliant@ra09.com>

Date: Mon, 5 Jan 2015 05:10:02 UTC

Severity: normal

Tags: patch, pending

Found in version 0.0.2.3

Fixed in version 0.0.3.0

Done: X2Go Release Manager <git-admin@x2go.org>

Bug is archived. No further changes may be made.

Full log

🔗 View this message in rfc822 format

X-Loop: owner@bugs.x2go.org
Subject: Bug#716: python-x2gobroker web/plain module strips passwords breaking passwords that start or end with a space
Reply-To: Jason Alavaliant <alavaliant@ra09.com>, 716@bugs.x2go.org
Resent-From: Jason Alavaliant <alavaliant@ra09.com>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Mon, 05 Jan 2015 05:10:02 +0000
Resent-Message-ID: <handler.716.B.142043450418334@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: report 716
X-X2Go-PR-Package: python-x2gobroker
X-X2Go-PR-Keywords: patch
Received: via spool by submit@bugs.x2go.org id=B.142043450418334
          (code B); Mon, 05 Jan 2015 05:10:02 +0000
Received: (at submit) by bugs.x2go.org; 5 Jan 2015 05:08:24 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,URIBL_BLOCKED
	autolearn=ham version=3.3.2
Received: from thetower.ra09.com (ra09.com [202.124.104.240])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 5DFF65DB48
	for <submit@bugs.x2go.org>; Mon,  5 Jan 2015 06:08:21 +0100 (CET)
Received: from localhost ([127.0.0.1] helo=private.ra09.com)
	by thetower.ra09.com with esmtp (Exim 4.80)
	(envelope-from <alavaliant@ra09.com>)
	id 1Y7zto-00045O-LA
	for submit@bugs.x2go.org; Mon, 05 Jan 2015 18:08:17 +1300
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="=_2eac67d1ac0e696a2eb101dac646ac37"
Date: Mon, 05 Jan 2015 18:08:16 +1300
From: Jason Alavaliant <alavaliant@ra09.com>
To: submit@bugs.x2go.org
Message-ID: <fc2873b0fe79914476c3f466ed9b05ff@private.ra09.com>
X-Sender: alavaliant@ra09.com
User-Agent: Roundcube Webmail/1.0.4

[Message part 1 (text/plain, inline)]
Package: python-x2gobroker
Version: 0.0.2.3
Tags: patch

One of my users was getting their authentication failing when connecting 
to an x2go broker using the http plain backend.     Testing revealed 
that their password ended with a space which the web/plain module 
default code was automatically stripping off before passing through to 
the authservice.    The attached patch disables stripping for the 
password argument so passwords starting/ending with spaces are no longer 
incorrectly rejected.

Thanks
Jason
[x2gobroker-web-plain.py-handle-spaces-at-start-and-end-of-passwords.patch (text/x-diff, attachment)]

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 20:41:28 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.