[ User ] Login

Bug 221: OPEN

tazpanel does not accept special characters in passwords

Date: 2019-04-16 - Creator: hgt - Priority standard - 3 messages 

With
# passwd
a password for root containing special
characters can be set.

But authentification in tazpanel for user
root with this password fails:
the authentication box is output time and again.

It needs not to be emphasised how important
the use of strong passwords is for the
security of systems.
This behaviour of tazpanel may mislead
administrators to utilise simple passwords.

Affected package(s): tazweb tazpanel

Messages

By: bellard on 2019-11-23 09:46 

Which tazpanel page(s) and special characters are concerned ?

By: hgt on 2019-11-25 08:24 

It happens when changing the user in tazpanel (to root).
System language is set to de_DE@euro and the special characters that lead to 
rejection of password are mostly german Umlauts:
äöüÄÖÜ
+-#/? in the password work properly.
Other special characters were not tried.

By: bellard on 2020-09-18 15:45 

Look like a busybox bug...
# echo -n tux:topsecret | chpasswd
# login tux
... works
# echo -n tux:äöüÄÖÜ | chpasswd
# login tux
... impossible