Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Long Names Cannot Login with UPN format #56

Closed
rbeghin opened this issue Dec 5, 2018 · 6 comments
Closed

Long Names Cannot Login with UPN format #56

rbeghin opened this issue Dec 5, 2018 · 6 comments
Labels

Comments

@rbeghin
Copy link

rbeghin commented Dec 5, 2018

Describe the bug

Long Names Cannot Login with UPN format

Software Versions

  • DNN: 9.2.2- Module: 6.1.2

To Reproduce

Steps to reproduce the behavior:

1.Attempts to login using UPN formatted username fails when username (to the left of the @ sign) is longer than 20 characters.
DNN 9.2.2 DNN_ActiveDirectoryAuthentication 6.1.2

##Current result
Login fails.

Expected behavior

Login should succeed for UPN format when username is less than 64 characters. Previous version of DNN with AD module UPN formatted logins succeed for long usernames.

Screenshots

If applicable, add screenshots to help explain your problem.

Error log

Note: Debug DLL's
Please replace the current extension DLL's with the debug DLL's (if these are available with the release) and reproduce the error with the debug DLL's before pasting the error log.

Paste the error log that is related to this issue.

Additional context

I am aware of 20 character limitations for SAM usernames. However, the same long usernames are able to login to DNN ver 7 with AD module. The affected username can login using non-UPN format with username truncated to 20 characters. eg: domain\12345678901234567890 works but 1234567890123456789099999@domain.com does not work. It is my understanding that UPN login should work for up to 64 characters.

@sawest
Copy link
Collaborator

sawest commented Dec 14, 2018

SAM accounts are limited to 20 characters, therefore, a username that is longer than 20 characters is invalid and doesn't exist in AD. I cant think of a reason to pursue authenticating a user that doesn't exist in AD. This is an AD Authentication Provider.

@sawest sawest added the wontfix label Dec 14, 2018
@sawest sawest closed this as completed Dec 14, 2018
@rbeghin
Copy link
Author

rbeghin commented Dec 14, 2018 via email

@rbeghin
Copy link
Author

rbeghin commented Dec 14, 2018

please reopen this issue

@sawest sawest reopened this Dec 14, 2018
@sawest
Copy link
Collaborator

sawest commented Dec 14, 2018

Please give detailed steps to reproduce including exact usernames in UPN format.

@rbeghin
Copy link
Author

rbeghin commented Dec 19, 2018

This problem occurs for all Active Directory users with usernames longer than 20 characters.
For example:
AD functional level: Windows Server 2008
AD Firstname: Josephine AD Lastname: Reallylongname
AD Display name: Josephine Reallylongname
AD User longon name: Josephine.Reallylongname@domain.com <<<<UPN format
User longon name (pre-Windows 2000): Josephine.Reallylong

In DNN 7 AD module would authenticate Josephine.Reallylongname@domain.com successfully.
In DNN 9 with current AD module the UPN logon name Josephine.Reallylongname@domain.com cannot login.
However, if the user the pre-Windows 2000 formatted login: Josephine.Reallylong they are able to successfully login.

I am hoping to be able to have the same functionality for long login names that was in previous versions.

Thanks

@sawest sawest added bug and removed wontfix labels Feb 6, 2019
@sawest
Copy link
Collaborator

sawest commented Feb 6, 2019

This issue is fixed in version 7.00.00. Please update and verify.

@sawest sawest closed this as completed in 7c714c1 Jan 20, 2021
sawest added a commit that referenced this issue Jan 20, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants