802.1X PEAP fails when using special characters in login

I am using MS AD & NPS for 802.1X Enterprise authentication with PEAP (no client certificate - MS-CHAPv2 user credentials for login). This works fine for iOS devices on 8.1 (iPhone 5 and iPad mini) and 6.1.6 (iPhone 3GS) when the user has standard "English" ASCII characters in the username and password.
However, when I introduce Unicode special accented characters in the login name or password such as French é/ù or Spanish ñ then after accepting the server cert authentication fails with "Incorrect username or password for <WLAN name>". Windows 7 and CentOS 6.5 laptops have no problem authenticating to the same setup with either "English" credentials or ones with special accented characters. I also tried an old iPod touch on ancient software version and that fails, so its not something recently introduced.
I tried using a different access point (TP-Link instead of Ruckus) and had exactly the same issue, so highly unlikely this is an AP issue.
Then I setup FreeRadius with and see exactly the same issue, so its highly unlikely to be a MS AD/NPS issue.
When comparing a working/failed authentication Wireshark packet capture on the NPS server, I see the failed attempt is missing the last 4 packets in the authentication exchange. The last packet sent is an Access-Challenge from the NPS server and no response from the iOS device, so the NPS server never even sends an Access-Reject. The iOS device appears to have decided it can't resolve the special characters and terminates the authentication attempt.
To me this seems to be an Apple iOS software deficiency when using Unicode special characters in the username or password for 801.2X authentication?

Enterprise support:
Call enterprise support (866) 752-7753 to create a case ID number
Get an account at
http://developer.apple.com/ then submit a bug report to http://bugreporter.apple.com/
Once on the bugreporter page,
   -- click on New icon
   -- See if you need to attach a log file or log files, clicking on Show instructions for gathering logs. Scroll down to find the area or application that matches the problem.
   -- etc.
Developers:
"Submitting Bugs and Feedback
Your feedback goes a long way towards making our products even better. With Apple Bug Reporter, you can submit bug reports or request enhancements to APIs and developer tools."
https://developer.apple.com/bug-reporting/

Similar Messages

Webapp authentication failed when using chinese characters as login name

Hello,
I have tried webapp authentication on tomcat and oc4j, via BASIC and FORM auth-method. All failed when the login name contains non-English characters. It seems an encoding issue, therefore, I also tried to change the page encoding of the login form to utf-8. None of the above is successful. Is there any solution? I really appreciate any help!
Thanks in advance!!

Enterprise support:
Call enterprise support (866) 752-7753 to create a case ID number
Get an account at
http://developer.apple.com/ then submit a bug report to http://bugreporter.apple.com/
Once on the bugreporter page,
   -- click on New icon
   -- See if you need to attach a log file or log files, clicking on Show instructions for gathering logs. Scroll down to find the area or application that matches the problem.
   -- etc.
Developers:
"Submitting Bugs and Feedback
Your feedback goes a long way towards making our products even better. With Apple Bug Reporter, you can submit bug reports or request enhancements to APIs and developer tools."
https://developer.apple.com/bug-reporting/

SecurityError: Error #2048 when using special characters in request url

Hi all,
I'm facing a really strange problem with requesting address data from a in-house developed address webservice that can be accessed using a HTTPS connection.
The problem is that I get the following error when a request has been made with special characters in the url:
SecurityError: Error #2048: Security sandbox violation: http://www.foo.com/myapp.swf cannot load data from
https://www.bar.com/myservice.svc/Aleja LegionÃ³w ul., BYTOM.
The url is encoded using encodeURIComponent. Fiddler show's a correctly encoded url:
https://www.bar.com/myservice.svc/address/Aleja%20Legion%C3%B3w%20ul.%2C%20BYTOM
The server send a normal response back.
The weird thing is that this only happens on FireFox with special characters in the url. With normal characters, it works fine.
On IE everything works fine..
crossdomain.xml of the www.foo.com:
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
<allow-access-from domain="*" headers="*" secure="false"/>
</cross-domain-policy>
Any help is appreciated.
Best regards,
Sjoerd Brandsma

You could try downloading the Oracle 8.1.7 client and the latest
Oracle8 ODBC driver, install them on your machine, and verify
that the failure goes away. That's obviously the acid test.
I can tell you that when I worked in the ODBC driver group we
did identify and fix some bugs where our parser wasn't skipping
string literals. If this particular bug wasn't fixed earlier,
it almost certainly was then (I'm guessing that work was done 12-
18 months ago).
Justin

Use special characters in a DTD

Hello,
I created a DTD amd want to use some special characters in this DTD. E.G. I want to define:
<!ATTLIST element value (val1|val 2|<val3>|%val4) #REQUIRED>
I tried the following but the parser does not accept without errors:
<!ATTLIST element value (val1|val&#xxx;2|&#yyy;val3&#zzz;....
Of course I replaced the xxx, yyy and zzz with the unicode number of the special sign.
So what do I do wrong? Or is it in general not possible to use special characters ?
Thank you very much,
Findus

Hi,
one thing I did which does not work is:
<!ATTLIST element values (&|<|val1) #REQUIRED>
The XML parser (XMLSpy) alway requires me for entering a '%' which is as far as I know only used for parameter entities. But & and the rest are general entities, aren't they ??
I played arround a little bit and found a solution which still does not completly solve my problem: In order to use special characters I declare parameter entities:
<!ENTITY percent "%">
<!ENTITY lower "<">
<!ATTLIST element values (%lower;|val1|%percent;) #REQUIRED>
This works so far so good but if I want to embed the special characters (which is what I need to do!) the parser still gives me errors:
<!ATTLIST element values (text%lower;moreText|val1|%percent;) #REQUIRED>
I would be really glad if anybody could test this on his own and post me about the results. For any other kind of avice I'm very thankful, too.
Thank you very much,
Findus

[svn:bz-4.x] 16147: Fix a few more regression tests on the 4. x branch that were failing when using Spring integration.

Revision: 16147
Revision: 16147
Author:   [email protected]
Date:     2010-05-17 06:18:38 -0700 (Mon, 17 May 2010)
Log Message:
Fix a few more regression tests on the 4.x branch that were failing when using Spring integration.
Modified Paths:
    blazeds/branches/4.x/qa/apps/qa-regress/WEB-INF/src/runtimeconfig/remoteobjects/ROMessage Destination.java
    blazeds/branches/4.x/qa/apps/qa-regress/WEB-INF/src/runtimeconfig/remoteobjects/RuntimeCo nfigurator.java
    blazeds/branches/4.x/qa/resources/webtier/flex_sdk_4/flex-config.xml

Well heres my story. I tried kde4 from extra the last 3 weeks and I like it. I have used xfce for the past 3 years, previous to that gnome. Tried kde but never really liked it. Now I am only using workspace, base, mutimedia and graphics.
Here is what I like.
1- Dolphin, awesome I have used thunar a while and it is great but I love splitview, and fish for ssh (which has been around a while I know), and the ability to mount other partitions on my hdd with a click no fstab entry or nothin'.
2-Pretty, I've used xfce with built in compositor an love the snappiness. But I like desktop grid with kde4 and flipswitch. Compiz-fusion is cool but I prefer not to use I'll take what the DE gives. Plasmoid are cool too.
3- Gwenview is nice too. Use to use gqview, but thumnails are nice.
Looking forward to or lacking
1- Keyboard shortcuts, Yes xbindkeys is there but if I have a DE I want it to do it. They just don't work now.
2- kde4 has windows specific settings, but I can't set the opacity for particular windows , doesn't work.
3- Ram of course is much higher in kde4, but maybe I'm getting old I just don't care as much.

Using special characters (Spanish characters) in Activities name

Hi everyone,
?:| Does anyone knows if I need to do any extra configuration in my Operating System/Data Base if I'm using special characters (accents) in activities/transitions name. Is there any problem using these type of characters?
Thanks a lot.
Edited by varriaga at 01/04/2007 2:17 PM

in ALBPM 5.7 you don't need any specific setup to use spanish characters, since we store all information as NVARCHARS.
In Studio, we store projects files in UTF-8, so no problem either.
MAriano
PS: you are just asking or you do have a problem? if you do, contact support and describe your problem.
MAriano Benitez
AquaLogic BPM 5.7 SP1 is now available!

IFCORE-1565: The Dgraph could fail when using a relevance ranking strategy.

Hi,
I just saw the release notes for Endeca 6.2.2 and read this bug:
IFCORE-1565: The Dgraph could fail when using a relevance ranking strategy.
Is there someone who could provide some more information on this bug? What is it and when does it occur? Reading the word 'could' would suggest a kind of unpredictability?
Thanks,
Maarten

The known trigger for the bug was doing relrank on a query that contained multiple text searches.

SSO fails - userPassword having special characters

Hi,
This is a tricky situation i'm handling. I did a insert of around 1000 users into Sun DS whose userPassword contained special characters accepted by DS. mainly + and ;.
For seeing if authentication will work, i just created a user through AM Console having userid and password both containing special characters. IT WORKED!! Hooray upto now.
Here comes the problem. The backend insert was done through creating an LDIF file with all user attributes and using ldapadd to insert them. From what i've read, userPassword gets encrypted using SSHA. Fine with me!! Now, when i login using one of the uid's i inserted through the LDIF file, it says Authentication Failed. Okey dokey! I went n changed the same user's (who was born from the LDIF file) password through AM Console and voila!! Now am able to login using the same uid which was not able to login before.
This is something very strange.. Can somebody throw some light on how I'm supposed to inserting user's password in the LDIF the same way AM Console seems to be doing it? You're help will be much appreciated.
My LDIF has the following attributes which concern uid and pwd
dn: uid=test\+,ou=People,o=test,dc=sample,dc=com
sn: test
givenname: guy
uid: test\+
uid: test+
userPassword: test+
I even tried with test\+ in the password. Still doesnt work!! HELP!!!

thanks for the replies.
iAMTheGuy,
I am using AM 7.1(which came along with Sun Portal server 7.1) installed in legacy mode.
Eric,
I use ldapmodify to add users. I noticed encryption happens automatically, so i dont know pwdhash is needed. I have to note one thing. The authentication works if I add the user from AMCONSOLE and that user has special characters. This is A OK..
All,
But i still have problems with adding user in LDIF file with special character in userPassword. I use only the ldapmodify -a command with the user attributes that are needed to insert a simple user.. stuff like cn,sn,givenname and the likes. I am able to add users & configure them for JDBC authentication to MySQL. This works fine.. LDIF users + JDBC authentication is great. But I might have to accomodate a scenario where LDAP authentication will be used in the near future. So, password havin special characters is needed considering the users in MySQL are allowed such passwords & may be migrated in the future .
Any workarounds? Or should i give up using passwords with special characters.
I had a suggestion, not sure if it'll work. Some1 please shed light on this. In case, I store the password with special characters in some other attribute, say title or some custom attribute not shown in AMCONSOLE, can i change LDAP authentication to use that attribute instead of userPassword? is userPassword the constant attribute for authentication?
Edited by: envious1 on Nov 12, 2007 2:35 AM

How to use special characters in Report Builder

Hi everyone,
I wonder if you guys can help me. I'm trying to change our Invoice hearders from English to Portuguese. Eg, I've changed this English heading
("FOR ACCOUNT QUERIES CONTACT") to this Portuguese heading ("PARA CONSULTAS DE CONTA CONTACTE"). So when I'm done, my entire invoice will be in Portuguese. This works fine, until I get special characters in some of the Portuguese translations. I can copy and paste the translations with special characters into Report Builder. But when I print the invoice in Oracle Apps (with a PDF output), the special characters get replaced with a "?".
Here's an example:
< "Line No" should read "Linha nº" but it prints out as "Linha n?" > Does anybother know how I can resolve this? I'm using Report Builder: 10.1.2.3.0 on Oracle Apps: 11.5.10.2 and RDBMS : 10.2.0.4.0
Thank you in advance

Hi,
You need to have Portuguese font installed on your machine, if you are running the report from your machine or else if you are running the same from report server then the font has to be there on the server font dir.

Prevent using special characters in file and folder names?

I've recently begun adding windows clients to my network. In doing so, I've found that on my file shares from OS X server, the windows clients are unable to see files and folders which have names containing special characters such as / ? < > \ : * | ”
Unfortunately my accounting department has been creating files with these characters in their names for several years. I would like to find if there is a way to prevent them from using a defined set of characters in the file and folder names to prevent them from "accidentally" doing so in the future.
I've found that by turning off streams support on SMB in OS X server, that my windows clients can at least see that a file or folder should exist, albeit with a corrupted file name. Removing the special characters from these names allows the proper name to become visible and the file accessible.
Any info would be greatly appreciated.

(_seb_) wrote:
> Gary White wrote:
>> On Sun, 19 Nov 2006 19:15:04 +0100, "(_seb_)"
<[email protected]> wrote:
>>
>>> "ça alors: it's a déjà-vu"
>>>
>>> How can I encode this so it's valid as a
directory name, yet can be
>>> displayed as intended when the name is output to
the page.
>>> urlencode() does not do the job, neither does
htmlentities()...
>>
>>
>> What's wrong with:
>>
>> $l="ça alors: it's a déjà-vu";
>> print urlencode($l)."<br>\n";
>> print htmlspecialchars($l);
>>
>> Gary
>
>
> I know that, but what is the name of the directory? It
has to be a real
> directory name, not a string stored somewhere.
>
> What's a valid encoding for a directory named "ça
alors: it's a
> déjà-vu"? I can call a folder like this on my
Mac, but it won't work on
> any server...
>
>
>
PS: basically it's not a url encoding issue.
I can url encode "ça alors: it's a déjà-vu",
and pass it in a url query string. But my issue is not
with an url query string, it's with an actual URL, that is,
the actual name of the directory. It
can't be "ça alors: it's a déjà-vu". But I
want to allow the user to name their directory like that
if they want. So I need a way to encode this into characters
that can be used for an actual
directory on the server.
seb ( [email protected])
http://webtrans1.com | high-end web
design
Downloads: Slide Show, Directory Browser, Mailing List

HowTo: Using special characters in SQL passthrough stored procedure parameters?

Hi all,
I am creating a Visual FoxPro 5.0a application, where I am trying to call a stored procedure in my Oracle database with the following SQLEXEC command (SQLEXEC is the Foxpro function to send sql statements to the ODBC driver):
lcSQL = "{Call Insert_FRB.NewItemPage('KABO)n$i,30000000000', '184927', '184927', 'MAIR2001011216151314', 'MAIR')}"
/* Sorry the above command should of course not break accross pages*/
lnSuccess = sqlexec(1,lcSQL)
With the parameters given, I get the ODBC error: "Connectivity error: [Oracle][ODBC Oracle Driver]Syntax Error."
I get the same error, when using the Oracle ODBC 32bit Test utility.
The call works just fine, if I replace the "$" in the first parameter 'KABO)n$i,30000000000' with a "normal" character, e.g. 'KABO)nAi,30000000000'. Oracle handles the $-character just fine, the stored procedure is working properly when called directly in SQLPLUS8.
I am using the Oracle ODBC driver sqo32_73.dll Version2.00.03.01.
Questions:
How do I have to submit the "$" to the ODBC driver, in order to be passed through to Oracle unchallenged?
Does anybody know of other special characters, which are not accepted by the ODBC-drivers for Oracle?
Thanks to any hints,
Peter

You could try downloading the Oracle 8.1.7 client and the latest
Oracle8 ODBC driver, install them on your machine, and verify
that the failure goes away. That's obviously the acid test.
I can tell you that when I worked in the ODBC driver group we
did identify and fix some bugs where our parser wasn't skipping
string literals. If this particular bug wasn't fixed earlier,
it almost certainly was then (I'm guessing that work was done 12-
18 months ago).
Justin

ENS for Calendar Server strange issue when handling special characters

The problem is basically that the ENS message isn't fully flushed to the stream when the generated event (an appointment creation for example) has special characters such as "ñ", "á","é". Maybe are encoded in more than one byte but it flushes the buffer using characters * character_size and character_size is not always 1.
If I make a second appointment the buffer is flushed and I get the rest of the first notification and the new one.
Perhaps it is a configuration case and I should configure ENS to support more languages.
Could you help me?
Thank you,
Best regards.

Thank you Shane.
I've run the sample and it works fine.
Perhaps it's not a bug but it's very strange the behaviour ens has with events with special characters. This is what I do step by step:
1. I subscribe for all events and all the users
2. I create and appointment with special characters
3. I receive the event notification
GAP/1.0 1b 3 1915 enp:///ics/caleventcreate?calid=[email protected]&uid=000000000000000000000000000000000b2c934cc04e0000140000001f130000&rid=0|ntfy|00000000
The number 1915 should be the message length so I try to read 1915 bytes. However I can only read 1903 bytes. In this 1903 I have the full xml with the vcalendar.
4. I create a second appointment
5. The message I received is something like "\0\0\0\0\0\0\0\0\0\0\0\0" which is 1915-1903
6. I have to discard this message because it's invalid
7. I receive the event notification
I can fix my custom client and discard this "\0\0\0..." messages but It's a strange behaviour. Perhaps the protocol is as is but I thought it was a bug.
Thank you Shane.

Crash/lock when use special symbol palette in iDVD 6

I tried to use the special symbol palette to try to insert special language characters in the comments on a picture in a slide show. On choosing special symbols from the menu line (Edit) all seemed to be fine until I tried to choose another category of symbol from the palette.
At that point the symbol palette goes blank or only part of the information is visible and I can not close or move it. Often iDVD also locks and I have to force the application to quit.
After that, the blank symbol palette keeps popping open (then closing) when working with other applications. Cold restarts do not cure the problem. Only solution I have found to stop the annoying pop up of the palette is to delete the file in user preference (com.apple.CharPaletteServer.plist)
I try to do the same operation again with the same results. Do not know if this is a new problem or long standing since I had never used the palette before with iDVD. I can clear the created problem with the hanging palette, but the palette is esentially unusable. Character palette seems to be ok when using it from the international keyboard menu.
(The reason to try to use the palette was I could not paste names in a language that do not use Mac's standard diacriticals. Why is there no font menu choice or ability to paste a name from another application that has font menus?)

Wow-totally missed that-sorry. I guess i assumed that you didn't do that because that is about the only thing that I know of to fix it.
I guess you could try Validating fonts
http://docs.info.apple.com/article.html?path=FontBook/2.0/en/fb1003.html
I'm out of ideas...but, I am certain that others will show up that have other ideas though.
Sue

BK Precision device works in VISA test panel but fails when using driver

I am trying to control a BK Precision XLN power supply. I have set it up as a TCPIP VISA instrument using sockets (port 5025). It validates fine in NI MAX, and when using the VISA test panels I can write to and read from it (although I get a timeout error on the read if I specify too many bytes). When I use the supplied instrument driver blocks in LV, VISA read commands always timeout and fail to return anything, regardless of how many bytes are specified.

I don't think it is a VXI-11/LXI instrument, it did not autodetect and I had to use the 'Manual Entry of Raw Socket' option to set up the device. I am sending a termination on the write (\n), if I don't send a termination on the read it captures the read but then gives a timeout error if waiting for more bytes, if I use a termination cahracter on the read it functions as you would expect, except that it returns multiple termination characters (line or carriage feeds) in some messages so you would have to perform multiple reads to get the whole message. (this is all in the test panels, I haven't gotten anything back using the VISA blocks in a VI)
Given that behaviour it seems more like what you would get using a telnet terminal interface but even given that I still am confused why I can talk to it with the test panel and not using the VISA blocks in a VI.
Thanks,
Stearns

How to use Special Characters in CONCAT function or another form with Xquer

Hello everyone
I'm using PS3 OEPE within message flow (proxy)and I'm using Xquery.
I'm using the CONCAT function, but this does not allow me to concatenate special characters not allowed, for example:
I want to concatenate these strings:
String1 = “&lt;get-person&gt;&lt;id-person&;gt;”
String2 = “123”
String3 = “&lt;/id-person&;gt; &lt;/get-person&gt;”
I want to represent characters regex. It means no XML characters
Someone knows some way, any function that allows me to concatenate in OSB these values with Xquery?
Edited by: chromosoma on Sep 5, 2012 5:59 PM

Hi,
It seems to me you're doing things in the most complicated way possible...
Firstly, you should use codepoints-to-string not the reverse... Secondly, the function work with decimals, not hexa
http://www.xqueryfunctions.com/xq/fn_codepoints-to-string.html
http://www.xqueryfunctions.com/xq/fn_string-to-codepoints.html
This works...
concat(codepoints-to-string(38),'lt',codepoints-to-string(59),'get-person')But this also works... Note that I've inserted a space between the & and the lt so the forum formatting can show it...
let
$String1 := "& lt;get-person& gt;& lt;id-person& gt;",
$String2 := "123",
$String3 := "& lt;/id-person& gt;& lt;/get-person& gt;"
return
concat($String1,$String2,$String3)And, finally this also works... So what's the reason for escaping < and > with &lt and &gt; and why codepoints?
let
$String1 := "<get-person><id-person>",
$String2 := "123",
$String3 := "</id-person></get-person>"
return
concat($String1,$String2,$String3)Cheers,
Vlad

802.1X PEAP fails when using special characters in login

Similar Messages

Maybe you are looking for