Tags:
create new tag
, view all tags

Bug: Login name not converted to WikiName

Special escape characters are interpreted in Access.pm regexp => for mod_ntlm authentication: 1)warnings are got (in Apache error.log) for each user (Main.domain\username) access verification 2)"Main.domain\username" format is not recognized for access control settings

The good fix is described in LoginNameAndNtlm on the bottom (Access.pm:surround username with \Q \E -> 3 occurences)

Test case

Set mod_ntlm auth for TWiki 1)Launch a TWiki script which needs authentication as a non registered user => warnings like "view: Unrecognized escape \m passed through in regex; marked by <-- HERE in m/^Users.YNET\m <-- HERE hwilkie$/ at ../lib/TWiki/Access.pm line 187., " 2) Restrict a web access rights for a non-registred user using Main.domain\username format -> this doesn't work

Environment

TWiki version: TWikiRelease02Sep2004
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS: MS Windows 2K, service pack 4
Web server: Apache 1.3.33
Perl version: 5.8.6
Client OS: MS Windows 2K, service pack 4
Web Browser: IE 6.0

-- CostinCerchez - 26 Aug 2005

Impact and Available Solutions

Follow up

Fix record

Access.pm:

if( @denyList ) { if( grep { /^\Q$theUserName\E$/ } @denyList )

if( @allowList ) { if( grep { /^\Q$theUserName\E$/ } @allowList ) {

my $isInGroup = grep { /^\Q$usrTopic\E$/ } @grpMembers;

Discussion

Edit | Attach | Watch | Print version | History: r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r2 - 2005-08-29 - CostinCerchez
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2017 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.