Unicode Username unable to authentice (Chinese)

By: Adam Westall user 10 Mar 2017 at 8:47 a.m. CST

8 Responses
Adam Westall gravatar
I have a situation where certain characters in a username cause the username to become malformed and unable to authenticate. For example the following Chinese username `user雨涵` becomes `user??`. If attempting auth via oauth api the following is shown in logs: ``` [xdi.oxauth.token.ws.rs.TokenRestWebServiceImpl] Invalid user java.lang.RuntimeException: User is empty ``` If attempting to login via gui the following is shown in logs and causes a redirect loop: ``` Session validation successful. User is logged in user uid:user?? Authenticating user 'user??' Person 'user??' not found in LDAP ``` The above loops forever. I haven't been able to find anything similar anywhere else.
CentOS72
closed

Answers

By Michael Schwartz Account Admin 10 Mar 2017 at 3:39 p.m. CST

Copy
Michael Schwartz gravatar
Thank you for reporting this issue. It's very timely, as we are working on localization right now. I created this [issue on github](https://github.com/GluuFederation/oxAuth/issues/491)

By Adam Westall user 15 Mar 2017 at 6:47 a.m. CDT

Copy
Adam Westall gravatar
Thanks, Do we have a ETA for CE 3.1.0 and is there any known workaround I could use for now? I tested for unicode compatibility before deployment and it was working correctly, however I obviously could not test every character :(

By Mohib Zico staff 15 Mar 2017 at 8:07 a.m. CDT

Copy
Mohib Zico gravatar
Adam, [Here](https://www.gluu.org/ce-roadmap/) is the roadmap you can check for community releases.

By Michael Schwartz Account Admin 15 Mar 2017 at 10:55 a.m. CDT

Copy
Michael Schwartz gravatar
I think we'll have a beta 3.1 release that addresses this issue in around two weeks.

By Yuriy Movchan staff 15 Mar 2017 at 11:05 a.m. CDT

Copy
Yuriy Movchan gravatar
Can you try to add to log4j.xml to each `appender` ``` <param name="encoding" value="UTF-8" /> ``

By Yuriy Movchan staff 15 Mar 2017 at 11:06 a.m. CDT

Copy
Yuriy Movchan gravatar
In 3.0.1 we uses log4j v2. Eugen, can you check if we need to add same options to [log4j2.xml](https://github.com/GluuFederation/oxAuth/blob/master/Server/src/main/resources/log4j2.xml) too?

By Adam Westall user 15 Mar 2017 at 11:06 a.m. CDT

Copy
Adam Westall gravatar
Excellent, I'm trying to fix myself at the moment as this install is being used in production.

By Adam Westall user 15 Mar 2017 at 11:42 a.m. CDT

Copy
Adam Westall gravatar
It looks like it's only an issue with LDAP as it's trying to find the user like this: `uid=user\E9\9B\A8\E6\B6\B5`

Post an answer