password policy grommunio-cui

MichaelH

Hello i have changed my password for the grommunio-cui login from a low security password to a high security password like "-c?za3Z?2<#kC9c§" and after that i can't login into grommunio-cui.

After change the password back to a low security password i can login again.

is there a limitation at the charts and length of the password.

greets
Michael

WalterH

Just an idea, do not use ? or $ signs in password. Please try a password without of this two symbols and report if its working.

MichaelH

I haved tested ist with this "ezKKYg7QC6CrZVyX" and it is not working.

WalterH

MichaelH With my system, I tested your sample password: ezKKYg7QC6CrZVyX and it worked. Also I tested this password with 19 digits: 1234567890!$%&12345 this also worked. Also your first mentioned password: -c?za3Z?2<#kC9c§ works with may system.

My grommunio version is:

# rpm -qi gromox | head -n 3
Name        : gromox
Version     : 2.3.56.5fff54d
Release     : lp153.39.1

Which version you use?

WalterH

May be a developer reads this and tell us how long a password can be.

MichaelH

Sorry, but this topic has a certain priority for me. Please for an info from a developer.

MichaelH

Here are the errors after trying to log in with a complex password (18 characters).

mail:~ # grommunio-cui Traceback (most recent call last): File "/usr/libexec/grommunio-cui/__init__.py", line 11, in <module> app.start() File "/usr/libexec/grommunio-cui/cui/classes/model.py", line 861, in start self.control.app_control.loop.run() File "/usr/lib64/python3.6/site-packages/urwid/main_loop.py", line 285, in run self._run() File "/usr/lib64/python3.6/site-packages/urwid/main_loop.py", line 383, in _run self.event_loop.run() File "/usr/lib64/python3.6/site-packages/urwid/main_loop.py", line 787, in run self._loop() File "/usr/lib64/python3.6/site-packages/urwid/main_loop.py", line 824, in _loop self._watch_files[fd]() File "/usr/lib64/python3.6/site-packages/urwid/raw_display.py", line 403, in <lambda> event_loop, callback, self.get_available_raw_input()) File "/usr/lib64/python3.6/site-packages/urwid/raw_display.py", line 501, in parse_input callback(processed, processed_codes) File "/usr/lib64/python3.6/site-packages/urwid/main_loop.py", line 410, in _update self.process_input(keys) File "/usr/lib64/python3.6/site-packages/urwid/main_loop.py", line 510, in process_input k = self._topmost_widget.keypress(self.screen_size, k) File "/usr/lib64/python3.6/site-packages/urwid/container.py", line 594, in keypress *self.calculate_padding_filler(size, True)), key) File "/usr/lib64/python3.6/site-packages/urwid/container.py", line 1589, in keypress key = self.focus.keypress(tsize, key) File "/usr/lib64/python3.6/site-packages/urwid/container.py", line 2270, in keypress key = w.keypress((mc,) + size[1:], key) File "/usr/lib64/python3.6/site-packages/urwid/container.py", line 1118, in keypress return self.footer.keypress((maxcol,),key) File "/usr/lib64/python3.6/site-packages/urwid/container.py", line 2270, in keypress key = w.keypress((mc,) + size[1:], key) File "/usr/libexec/grommunio-cui/cui/classes/button.py", line 92, in keypress return self._hidden_button.keypress(*args, **kw) File "/usr/lib64/python3.6/site-packages/urwid/wimp.py", line 539, in keypress self._emit('click') File "/usr/lib64/python3.6/site-packages/urwid/widget.py", line 459, in _emit signals.emit_signal(self, name, self, *args) File "/usr/lib64/python3.6/site-packages/urwid/signals.py", line 264, in emit result |= self._call_callback(callback, user_arg, user_args, args) File "/usr/lib64/python3.6/site-packages/urwid/signals.py", line 294, in _call_callback return bool(callback(*args_to_pass)) TypeError: check_login() takes 1 positional argument but 2 were given mail:~ #

MichaelH

Hi,

i use this Version
# rpm -qi gromox | head -n 3 Name : gromox Version : 2.3.29.96766be Release : lp153.27.1

WalterH

Interesting, with this version we have customers the uses complex passwords with about 11 characters long.

MichaelH

I was also able to narrow it down a bit. When I copy paste the complex password into the login screen, it gives me the error message I posted here.

If I enter it by hand, it works. The strange thing is that I also copy pasted the password when I changed it.

MacBook M2 OS Ventura 13.2.1
Terminus PRO V. 7.56.1

weini

MichaelH
When you copy / past it to "notepad", is it then working?
This may indicate an issue with the character set in the source screen where you are copying the password from. As notepad.exe only understands plain text, it is doing kind of an implicit conversion.

Such things happen when copying text from e. g. a PDF.

WalterH

I use a Windows 11 PC and I also did copy and paste the password.

MichaelH

weini On a MacBook there is no notepad.exe. I use CotEdit as notepad alternative.And it is the same, if i copy the Passwort from the Passwort Safe or if i Copy it first to CotEdit an then copy again to the login screen.

But if I change the password by copy paste shouldn't the character error be there too. Or why does it only occur in the login screen?

weini

I´m sorry, but I don´t know the Mac.
But if the password works when you type it directly, then I´d suspect more a client related issue and not Grommunio beeing the cause here.