Description

Logging in using caps in username and logging in with all lower case username map to different accounts which is a subtle differentiation that will confuse most users when the accounts dont require passwords because the system is ussing HTTP auth.

Recommend that:

Either usernames should not be case sensitive, or there should be an option to do case insensitive matching when matching the username.

Steps to reproduce

  1. turn on HTTP authentication
  2. using IIS, restrict access to the website to basic authentication
  3. go to the website and login using uppercase in the name
  4. click on the username and add content to the users homepage
  5. Close the web browser
  6. go to the website and login with all lowercase in the username
  7. click on the username and notice the homepage is different

Example

Details

MoinMoin Version

1.5.1

OS and Version

Windows 2003 Server

Python Version

2.4.2 (#67, Sep 28 2005, 12:41:11) [MSC v.1310 32 bit (Intel)]

Server Setup

Server Details

Workaround

Discussion

This is not a bug.

Windows users please accept, that lowercase and uppercase characters are really different.

User names should be wiki names, wiki names should use CamelCase with nothing else than A-Za-z0-9. Stick to this rule, allow no exceptions and you avoid lots of trouble. Works even with German users ;-)) -- RobertSeeger 2006-02-07 18:46:57

Plan


CategoryMoinMoinNoBug

MoinMoin: MoinMoinBugs/UserNamesShouldNotBeCaseSensitive (last edited 2007-10-29 19:11:17 by localhost)