Description

Describe the bug...

Steps to reproduce

1. Trying to reset my password.
2. Note: I had been using moin under apache on windows and had autogenerated my account using mod_auth_sspi previously so had 'auto' logged in
3. Had to change to moin standalone

4. Didn't know what my password was so tried HelpOnUserHandling?action=recoverpass

5. when I tried the emailed url i got the attached traceback: TypeError: character mapping must return integer, None or unicode

see: errorpage.html

Example

Component selection

• general

Details

Workaround

Discussion

This is probably not a bug because you have used an own auth scheme. moin can't recover a password for other schemes. The autocreated account does create a user profile without a password entry. This profile is used for settings like language, timezone etc. It should not show the traceback rather a message that you need to reset the password by your own auth tools. That's a different bug.

Note: The account was autocreated without a password entry, but when I tried to logon without a password the u.i. wouldn't let me log in with a blank password. So again a bit of a u.i. issue. --jn

Problem is that if we would allow empty passwords to log in into accounts without a password stored, that would rather easily open up all accounts on the wiki in case there is some misconfiguration (e.g. ldapauth is remove and moinlogin is added) or other malfunction.

Plan

• Priority:
• Assigned to:

• Status: fixed by http://hg.moinmo.in/moin/1.8/rev/eb377776ca34 ? Please just try 1.8.2 or later release.

CategoryMoinMoinBugFixed