Rudder

Purpose¶

Be able to log in with username without case sensitivity

How to test¶

1. Make sure in /opt/rudder/etc/rudder-users.xml the option case-sensitivity is on true

2. In /opt/rudder/etc/rudder-users.xml 3 users toto, ToTO and TITI with different password:

<user name="toto" password="..." role="administrator"/>
<user name="ToTO" password="..." role="administrator"/>
<user name="TITI" password="..." role="administrator"/>

See in logs, you should get a warning about the two similar login in /var/log/rudder/webapp/... for toto

Users with potential username collision if case sensitivity is deactivated: toto

3. Try to log in with username

• tiTI : should fail (with TITI password)
• TITI : should succeed
• ToTO : should succeed
• toto : should succeed

4. Change option case-sensitivity to false in /opt/rudder/etc/rudder-users.xml

<authentication hash="bcrypt" case-sensitivity="false">
...
</authentication>

5. Try to log in with username (with their password)

• TITI : should succeed
• titi : should suceed (with TITI password)
• toto : should fail
• ToTO : should fail

See in logs, you should get an error about same login in /var/log/rudder/webapp/... for toto :

Users with duplicates username will be ignored: toto