forbiddenera
Cadet
- Joined
- Oct 24, 2021
- Messages
- 7
Hey,
Sorry - I don't really have time to sign up for the bug tracker but wanted to report this.
In #4098 it was discovered that SMB doesn't like passwords containing a '?' character.
William Gzybowski added validation to reject passwords with a '?' because of this.
Personally, I think enforcing this on any password that isn't also specifically used for SMB is a bit insecure however that's not really the issue at hand.
When you first install TrueNAS and choose a root password during installation/initial, this check is not enforced; however when changing the root password with netcli, after a full configration reset (triggered through netcli) or within the browser, this check is enforced.
This resulted in me being able to use my desired password initially during install, but after a reset due to network issues - I was unable to use the same password.
My suggestion for a fix would be to only perform this additional verification steps either only on SMB accounts or at least avoid the check on the root account - I don't think any of us are (or should) be using the root account for SMB anyway.
Sorry - I don't really have time to sign up for the bug tracker but wanted to report this.
In #4098 it was discovered that SMB doesn't like passwords containing a '?' character.
William Gzybowski added validation to reject passwords with a '?' because of this.
Personally, I think enforcing this on any password that isn't also specifically used for SMB is a bit insecure however that's not really the issue at hand.
When you first install TrueNAS and choose a root password during installation/initial, this check is not enforced; however when changing the root password with netcli, after a full configration reset (triggered through netcli) or within the browser, this check is enforced.
This resulted in me being able to use my desired password initially during install, but after a reset due to network issues - I was unable to use the same password.
My suggestion for a fix would be to only perform this additional verification steps either only on SMB accounts or at least avoid the check on the root account - I don't think any of us are (or should) be using the root account for SMB anyway.