Page MenuHomePhabricator

Password file should normalize username
Closed, ResolvedPublic

Description

With

user-config.py

family = 'wikipedia'
mylang = 'en'
usernames['wikipedia']['en'] = u'valhallasw'
password_file = 'password'

password

(u'valhallasw', 'topsecretpassword')

The password is not used, as the username is u'Valhallasw' once LoginManager checks the password file.

LoginManager should normalize the usernames in the password file.

Workaround:
Use (u'Valhallasw', 'topsecretpassword') in the password file.


Version: core-(2.0)
Severity: normal
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=55201

Details

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:46 AM
bzimport set Reference to bz72974.
bzimport added a subscriber: Unknown Object (????).

Note that there is a MediaWiki bug to allow case in-sensitive usernames T64396 , and one for case-insensitive titles T2453 , and background on title casing at
https://meta.wikimedia.org/wiki/Case_sensitivity_of_page_names
https://meta.wikimedia.org/wiki/Case_insensitivity_of_page_names

gerritbot subscribed.

Change 190638 had a related patch set uploaded (by VcamX):
Normalize usernames in password file

https://gerrit.wikimedia.org/r/190638

Patch-For-Review

matmarex set Security to None.

Change 190638 merged by jenkins-bot:
Normalize usernames in password file

https://gerrit.wikimedia.org/r/190638