[PATCH] BUG 172567 support non ASCII user name to login in

[Thiago Macieira]

潘卫平 wrote:
>Ingo Klöcker 写道:
>> On Monday 13 October 2008, Randy Kramer wrote:
>>> On Sunday 12 October 2008 11:02 pm, 潘卫平 wrote:
>>>> I believe KDE should allow non-ASCII user name to login in
>>>> computer.
>>>
>>> This sparked a thought in a slightly different direction--not to
>>> advocate security by obscurity, but having usernames and passwords in
>>> Unicode (UTF-8 or whatever)--would that make it harder to guess
>>> (i.e., brute force) usernames and passwords?
>>>
>>> I'm not entirely sure myself atm--maybe because they all (that is,
>>> all Unicode encodings, if that's the right description) resolve to
>>> sequences of bytes, maybe in one sense it doesn't help.
>>>
>>> On the other hand, if I used say an 8 character password that
>>> resolved to 32 bytes (because each of the characters in it is chosen
>>> from a non-ASCII subset that resolves to 4 bytes (or even 16/2
>>> bytes)), that would seem to make a fairly simple to remember (8
>>> character) password harder to brute force.
>>>
>>> I wonder to what extent current password programs are ready to handle
>>> Unicode passwords?
>>
>> I would refrain from using non-ASCII characters in passwords. There's
>> no gain in using them. A strong argument against the usage of
>> non-ASCII characters is that you might not be able to enter the
>> necessary Unicode characters on some system you have to use. OTOH,
>> ASCII characters will work reliably with any OS with any application.
>>
>>
>> Regards,
>> Ingo
>
>I agree. But I prefer to display non-ASCII user name for user's
> convenience.

There's a field in the user database, the GECOS, that is the user's real 
name. That should be localised and displayed as such. The username should 
be a keyword.

-- 
  Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20081017/4ff41468/attachment.sig>