Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:45 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Mon Aug 13, 2012 8:14 pm 
Offline

Joined: Wed Jul 25, 2012 8:34 pm
Posts: 14
I'm making a top-level post about this, because the question seems to have gone unanswered. Thanks to Neal and the others in the thread "YubiRadius 3.5 - problems authenticating users" for the work they did on this.

Neal wrote:
I'm having issues with special chars in passwords. If any of these symbols are in a password then authentication always fails via the YubiRadius virtual appliance: ¬ £ % & + \

However all others I have tried work fine: ` ! " $ ^ * ( ) _ - = | { } [ ] : @ ~ ; ' # < > ? , . /

I get the failure via the troubleshooting page in the YubiRadius server which checks the password via LDAP on my SBS 2003 domain controller. Windows logins and webmail logins work fine with any of these chars so I believe it is something within the YubiRadius that is not handling these chars properly, not something in the LDAP/SBS end.

Has anyone else seen this problem or can anyone else report that these special chars are working for them?

Cheers, Neal.


I am having a similar problem with 3.5.1, although in my case, it appeared that the - was also not working. I haven't gone back and tested once I got a password that works.

This was confusing, because from the Troubleshooting tab in the YubiRadius GUI, the + and - characters that I was using worked fine, and those have to be HTTP encoded, don't they? At least submitting to the GUI uses HTTP. But as soon as I tried the same password from a Juniper box over Radius, the passwords were not accepted (and showed up as incorrect password errors in the YubiRadius log).

Can there be a fix for this? Is there anything else I can help provide to debug the problem?

Thanks,

Kevin


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Fri Aug 17, 2012 1:15 pm 
Offline
Yubico Team
Yubico Team

Joined: Mon Feb 22, 2010 9:49 am
Posts: 183
Hello,

All known special characters issues are resolved in the latest release YubiRADIUS Virtual Appliance version 3.5.3 (to the extent those special characters are supported by various dependent modules e.g. FreeRADIUS does not support \ in RADIUS shared secret)

Please refer the following link for the latest version of YubiRADIUS Virtual Appliance:

http://yubico.com/yubiradius

Hope this helps!

Thanks and best regards,
Samir.


Top
 Profile  
Reply with quote  
PostPosted: Fri Aug 17, 2012 4:36 pm 
Offline

Joined: Wed Jul 25, 2012 8:34 pm
Posts: 14
Great! I didn't realize the new version was out.

Thanks,

Kevin


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group