[pubcookie-dev] can't increase username lenght in pubcookie code :-(

[Nico Tranquilli]

On Dec 5, 2007, at 19:53 PM, Jim Fox wrote:


>

> We've never used any value but 42, but it ought to be able to

> change.  Make sure you do a complete rebuild of both the

> login server and the module with the new value of PBC_USER_LEN

> and PBC_TOT_COOKIE_DATA.  ("make clean", and "make", and "make  

> install").

>

> Jim


It seems I did choose the unlucky value (72) for username length,  
because I noticed  it works with some values and doesn't work with  
others (74 is ok, 72 is not), maybe because of byte alignment
in the stringify/unbundle code, I don't know.

Nico.



>

>>

>> I've been trying for two days to increase the username length in  

>> pubcookie (max size of 42 characters is way too short for our  

>> needs) with no luck.

>>

>> The only code I found about user length is in pubcookie.h

>>

>> #define PBC_USER_LEN 42

>> and maybe

>> #define PBC_TOT_COOKIE_DATA 228

>>

>> If I change those values to

>> #define PBC_USER_LEN 72

>> #define PBC_TOT_COOKIE_DATA 260

>>

>> It seems that the application servers get an incomplete or bad G  

>> or L cookie and think that it is expired and needs to  

>> reauthenticate. The username/password is checked correctly, but  

>> after authentication the browser jumps to the application server  

>> and it redirects it back to the login server due to expired auth  

>> session.

>>

>> Trying to debug, I found that create_ts and expire_ts timestamp  

>> content is ok when passed to the create_cookie code in index.cgi.c  

>> but gets replaced (by random negative values) when the cookie is  

>> later decoded.

>>

>> Please help, maybe there's some hidden dependency on PBC_USER_LEN  

>> I should take care of.

>>

>> Best Regards

>> Nico

>> --

>> Nico Tranquilli

>> Dipartimento Sistemi & Tecnologie

>> CINECA - Interuniversity Computing Centre

>> tranquilli at cineca.it  +39-0516171519

>>

>>

>> _______________________________________________

>> pubcookie-dev mailing list

>> pubcookie-dev at u.washington.edu

>> http://mailman1.u.washington.edu/mailman/listinfo/pubcookie-dev

> _______________________________________________

> pubcookie-dev mailing list

> pubcookie-dev at u.washington.edu

> http://mailman1.u.washington.edu/mailman/listinfo/pubcookie-dev

>