Hi,

the fix works for us and the group gets now verified and checked just fine for members with NON-ASCII Characters in their name.

Thanks again,
Mischa

-- 
Mischa Diehm | Network Operations Center (NOC)
UniBasel | UniRechenZentrum (URZ)
Klingebergstr. 70 | CH-4056 Basel
Tel. +41 61 267 1574 | http://urz.unibas.ch

From: Morten Brekkevold <morten.brekkevold@uninett.no>
Date: Donnerstag, 3. April 2014 10:07
To: Mischa Diehm <mischa.diehm@unibas.ch>
Cc: "nav-users@uninett.no" <nav-users@uninett.no>
Subject: Re: NAV authentication with LDAP + MS AD

On Wed, 2 Apr 2014 16:12:41 +0000 Mischa Diehm <mischa.diehm@unibas.ch> wrote:

I pulled the fix from:


this makes the login with wrong credentials work (before we had an error)
but in case of good credentials the system  still crashes. Debug output
below:

[snip]
   File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 280, in
is_group_member
     result = self.ldap.search_s(group_dn, ldap.SCOPE_BASE, filterstr)
[snip]
UnicodeEncodeError: 'ascii' codec can't encode character u'\xfc' in position
26: ordinal not in range(128)

This actually looks like the same kind of encoding problem while
verifying your group memberships.

Unicode is hard *sigh*.


I posted this as https://bugs.launchpad.net/nav/+bug/1301794 and will be
pushing a patch within a few minutes. Attempting, for once, due
diligence, I also wrote a regression test for the problem :)


--
Morten Brekkevold
UNINETT