Tags:
create new tag
, view all tags

Bug: Login name not converted to WikiName

Special escape characters are interpreted in Access.pm regexp => for mod_ntlm authentication: 1)warnings are got (in Apache error.log) for each user (Main.domain\username) access verification 2)"Main.domain\username" format is not recognized for access control settings

The good fix is described in LoginNameAndNtlm on the bottom (Access.pm:surround username with \Q \E -> 3 occurences)

Test case

Set mod_ntlm auth for TWiki 1)Launch a TWiki script which needs authentication as a non registered user => warnings like "view: Unrecognized escape \m passed through in regex; marked by <-- HERE in m/^Users.YNET\m <-- HERE hwilkie$/ at ../lib/TWiki/Access.pm line 187., " 2) Restrict a web access rights for a non-registred user using Main.domain\username format -> this doesn't work

Environment

TWiki version: TWikiRelease02Sep2004
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS: MS Windows 2K, service pack 4
Web server: Apache 1.3.33
Perl version: 5.8.6
Client OS: MS Windows 2K, service pack 4
Web Browser: IE 6.0

-- CostinCerchez - 26 Aug 2005

Impact and Available Solutions

Follow up

 

Fix record

Access.pm:

if( @denyList ) { if( grep { /^\Q$theUserName\E$/ } @denyList )

if( @allowList ) { if( grep { /^\Q$theUserName\E$/ } @allowList ) {

my $isInGroup = grep { /^\Q$usrTopic\E$/ } @grpMembers;

Discussion

 
Topic revision: r2 - 29 Aug 2005 - 16:02:43 - CostinCerchez
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback