<div dir="ltr">FYI we have included an option in sunstone-server.conf (one-4.4) for this:<div><a href="https://github.com/OpenNebula/one/blob/one-4.4/src/sunstone/etc/sunstone-server.conf#L74">https://github.com/OpenNebula/one/blob/one-4.4/src/sunstone/etc/sunstone-server.conf#L74</a><br>
</div><div><br></div><div>Cheers</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 21 November 2013 09:19, Alvaro Simon <span dir="ltr"><<a href="mailto:asimon@cesga.es" target="_blank">asimon@cesga.es</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi<div class="im"><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
We do not use ldap but we have seen a similar issue with opennebula<br>
authentication with X.509 certificates. OpenNebula compresses all the<br>
white space out of the Distinguished Name of the certificate.. I would<br>
not be surprised if it did the same for ldap. As far as I know it is meant to be a feature. If you are changing the passwd manually with the oneuser command you have to strip all the whitespace out on your own.<br>
</blockquote></div>
Yes, that's true white spaces are removed from users DNs but we were not sure if this feature also affects to users passwords.. probably yes based on OpenNebula LDAP doc:<br>
<br>
<a href="http://opennebula.org/documentation:rel4.2:ldap#dn_s_with_special_characters" target="_blank">http://opennebula.org/<u></u>documentation:rel4.2:ldap#dn_<u></u>s_with_special_characters</a><br>
<br>
$ oneuser encode 'cn=First Name,dc=institution,dc=<u></u>country' 'pass word'<br>
cn=First%20Name,dc=<u></u>institution,dc=country:pass%<u></u>20word<br>
<br>
It seems that you should replace white spaces by URL %20 character...<br>
<br>
<br>
Cheers<span class="HOEnZb"><font color="#888888"><br>
Alvaro</font></span><div class="HOEnZb"><div class="h5"><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Steve Timm<br>
<br>
<br>
On Wed, 20 Nov 2013, Alvaro Simon wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Dear ON community<br>
<br>
We don't know if this is a known issue or not, we are using ON 4.2 and Sunstone with LDAP support. We have notice that special characters like white spaces are not working from Sunstone using LDAP auth, we got these errors:<br>
<br>
Wed Nov 20 09:49:10 2013 [E]: User carlosf could not be authenticated<br>
Wed Nov 20 09:49:10 2013 [E]: execution expired<br>
Wed Nov 20 09:49:10 2013 [I]: Unauthorized login attempt<br>
<br>
<br>
If we change the user pass (without white spaces), sunstone is able to authenticate the user again.<br>
<br>
Have you experienced the same issue? any workaround available?<br>
<br>
Thanks in advance!<br>
Alvaro<br>
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/<u></u>listinfo.cgi/users-opennebula.<u></u>org</a><br>
<br>
</blockquote>
<br>
------------------------------<u></u>------------------------------<u></u>------<br>
Steven C. Timm, Ph.D (630) 840-8525<br>
<a href="mailto:timm@fnal.gov" target="_blank">timm@fnal.gov</a> <a href="http://home.fnal.gov/~timm/" target="_blank">http://home.fnal.gov/~timm/</a><br>
Fermilab Scientific Computing Division, Scientific Computing Services Quad.<br>
Grid and Cloud Services Dept., Group leader of Grid and Cloud Services Operations. Lead of FermiCloud Project.<br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/<u></u>listinfo.cgi/users-opennebula.<u></u>org</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>--<br></div>Daniel Molina<br>Project Engineer<br>OpenNebula - Flexible Enterprise Cloud Made Simple<br><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a> | @OpenNebula</div>
</div>