[X2Go-Dev] Bug#706: x2gobroker authservice fails to handle passwords with spaces in them

Jason Alavaliant alavaliant at ra09.com
Thu Dec 18 03:09:16 CET 2014


Package: x2gobroker-authservice
Version: 0.0.2.3
Tags: patch


Some of my users were getting authentication failed errors trying to 
login via our x2go broker setup (configured with http backend),     
further investigation revealed that the common factor was that they all 
had spaces in their passwords.

Digging through the code I found that the socket connection used by the 
x2gobroker authservice used spaces to separate the fields when passing 
user data to be validated which meant any password with a space was 
effectively truncated by the code when it was send to the authservice.   
     The two attached patches contain my proposed fix of changing the 
separation character to be \r instead which seems to fix the problem 
fine in my testing.

Thanks
Jason
-------------- next part --------------
A non-text attachment was scrubbed...
Name: x2gobroker-authservice-handle-spaces-in-passwords.patch
Type: text/x-diff
Size: 452 bytes
Desc: not available
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20141218/11d71ad9/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: authservice.py-handle-spaces-in-passwords.patch
Type: text/x-diff
Size: 780 bytes
Desc: not available
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20141218/11d71ad9/attachment-0001.patch>


More information about the x2go-dev mailing list