1 Topic by broth

  • broth
  • Member
  • Offline
  • Registered: 2012-04-22
  • Posts: 145

Topic: iRedAdmin: Password Generator use iPhone compatible charcaters

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.4
- Linux/BSD distribution name and version: Debian 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? yes
- Related log if you're reporting an issue:
====

Hello Zhang,

we are using your passwort generator feature in iRedAdmin-Pro (i dunno if this is present in iRedAdmin as well).
We have often problems when using these passwords on Apple devices.
For example the iPhone is uable to use passwords with the ^ character etc.
You can enter the password but then you will be unable to connect to the server due to a bad password.
Probably fail2ban will finally block you.
Removing the special characters and replacing it with e.g. hash-sign #, it works immediately.

Is there an option to select "allowed" characters for the password generator?
Like "0-9,a-z,A-Z,#,-,*,+" etc?

Best regards,

Bernhard

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,172

Re: iRedAdmin: Password Generator use iPhone compatible charcaters

broth wrote:

Is there an option to select "allowed" characters for the password generator?
Like "0-9,a-z,A-Z,#,-,*,+" etc?

Sure.

You can find default special characters in file 'libs/default_settings.py', like this:

PASSWORD_SPECIAL_CHARACTERS = """#$%&'"*+-,.:;!<=>?@[]/\(){}^_`~"""

If you want to remove some of them, please copy this setting to file 'settings.py' then modify it. DO NOT touch 'libs/default_settings.py'.

Note: restarting Apache or uwsgi (if you're runnnig Nginx) service is required.

3 Reply by broth

  • broth
  • Member
  • Offline
  • Registered: 2012-04-22
  • Posts: 145

Re: iRedAdmin: Password Generator use iPhone compatible charcaters

Perfect, thank you!
Have you other customers having the same issues with their Apple devices?
If yes, maybe it would be a good idea to show a message next to the password generator.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,172

Re: iRedAdmin: Password Generator use iPhone compatible charcaters

You're the first reporter.

I removed '^' in PASSWORD_SPECIAL_CHARACTERS directly, so next iRedAdmin-Pro release doesn't have it.

5 Reply by broth

  • broth
  • Member
  • Offline
  • Registered: 2012-04-22
  • Posts: 145

Re: iRedAdmin: Password Generator use iPhone compatible charcaters

I think removing only ^ will not have a positive effect. There are many other chars which are susceptible to be problematic.
We used to use only following chars in passwords when the account shall be used on an Apple device:

#
-
_
*
+

I have no idea why this is so sensitive, unfortunately we neither had enough time to do proper diagnostics.
Other devices like Android phones work fine with all kinds of passwords, as well as Outlook, Tunderburd etc..