Account pairing not case sensitive

franz - November 5, 2009 - 20:54
Project:Drupal.org infrastructure
Component:Database
Category:bug report
Priority:normal
Assigned:Unassigned
Status:active
Description

When registering at localize, I got a message saying that my username was already registered, and I couldn't login.

I had to create a new account (franz.glauber) to access it. Could you please help syncing both so I can use only 'franz' ?

#1

Gábor Hojtsy - November 6, 2009 - 06:37
Status:active» postponed (maintainer needs more info)

Oh, wait, you have been able to register a new account on localize.drupal.org only?!?

#2

franz - November 6, 2009 - 10:28
Status:postponed (maintainer needs more info)» active

I haven't been able to register my default user 'franz' both at localize and groups. Because of it, I had to register 'franz.glauber'. I did so at localize, but the login also works now with groups.

#3

kiamlaluno - November 6, 2009 - 12:51

Because of it, I had to register 'franz.glauber'. I did so at localize, but the login also works now with groups.

I thought l.d.o would share the d.o account thanks to the Bakery module. If somebody is able to register a new account on l.d.o, then something is wrong, IMO.

#4

Gábor Hojtsy - November 6, 2009 - 13:09

Trying to register at http://localize.drupal.org/user/register got me redirected to http://drupal.org/user/login. @franz, how did you manage to register directly on l.d.o? Are you sure you did not mistake a new drupal.org login with registering at l.d.o? Franz.glauber seems to exist on drupal.org for the past 9 weeks: http://drupal.org/user/586634

#5

kiamlaluno - November 6, 2009 - 13:37

The full names reported in both the accounts (franz, and franz.glauber) are the same. It seems that franz created the other account one week after he created the account he is currently using.

#6

franz - November 6, 2009 - 13:40

Sorry, that's right, when I created franz.glauber, it was at d.org, but I only noticed it later.

#7

franz - November 9, 2009 - 12:15

The overall status is:

franz: drupal.org
NO localize
NO groups
get that message I told early

franz.glauber: drupal.org
OK localize
OK groups

#8

Gábor Hojtsy - November 9, 2009 - 12:30
Project:Drupal.org infrastructure» Bakery Single Sign-On System
Version:<none>» 6.x-0.x-dev
Component:localize.drupal.org» Code
Category:support request» bug report

Both "Franz" and "franz" exist on drupal.org and looks like our single sign-on does not distinguish between usernames with different cases. The two users are at http://drupal.org/user/25375 and http://drupal.org/user/581844 and localize.drupal.org already has a copy of Franz (http://localize.drupal.org/user/296), so you get a duplicate account error on "franz". Same with groups.drupal.org. http://groups.drupal.org/user/372

Moving to Bakery issue queue.

#9

Gábor Hojtsy - November 9, 2009 - 12:42
Title:Account name already taken» Account pairing not case sensitive

Retitling for better understandability.

#10

killes@www.drop.org - November 9, 2009 - 12:55
Project:Bakery Single Sign-On System» Drupal.org infrastructure
Version:6.x-0.x-dev» <none>
Component:Code» Database

Moving this back to infra.

This is not a bakery issue as such. The problem is that the users.name column on d.o was converted to binary some time ago because there were problems with accented usernames.

As a result, usernames on d.o are now case sensitive. Unfortunately, this also allows accounts like "Franz" and "franz"...

Possible solutions:

1) Make sure that the duplication check in user module also catches upper/lowercase changes

2) Make all subsites case sensitive.

3) ?

#11

franz - November 25, 2009 - 14:10

I vote for solution number 2!

#12

kiamlaluno - November 25, 2009 - 19:48

Solution #2 is the correct one, IMO.
If the column user.name has been made binary on d.o, then it should be made binary on sub-domains as well. I don't think it is possible to change back the column definition as it was before, with all the users who would probably have a name containing an accent.

 
 

Drupal is a registered trademark of Dries Buytaert.