UserIDs may be uppercase - breaks fine-grained authorization

[tno@…]

My site is authenticating against a Novell E-directory LDAP server. When authenticating, E-dir does not distinguish between lower- and uppercase userID's. As a result, userIDs are passed along from the browser to trac in whatever case the user wrote it when logging in.

Instructions for the authz_policy file says that user and group names must be lowercased and that upper-case names are reserved for permissions.

If you log in using an upper-cased userID it seems to me that you are just treated as an authenticated user and that matching against other policy rules simply does not happen. I have not been able to really verify this.

This forces me to tell my (rather IT-naive) users to always use lower-case userIDs. Not so nice.

My client platform is windows/IE7, Ubuntu/Firefox. Same behaviour exhibited. Trac server platform = Ubuntu (Gutsy)

[ebray]

Set the ignore_case option under the [trac] section in your trac.ini. That will force login names to lower case.

[t_norup <tno@…>]

Replying to ebray:

Set the ignore_case option under the [trac] section in your trac.ini. That will force login names to lower case.

Brilliant, thanks a lot. I never got the idea to look there… ignore_case might be a reasonable default in future releases.

[Jennifer Drummond <jenn@…>]

Thanks; this was giving me problems too.