I noticed that i can log into BB server with case-insensitive variations of my username.
Logging in with UserA/<pwd> is successful while my profile username is is usera
Is this intentional?
The session (remote) username is the profile username.
Case-sensitivity for usernames is handled by embedded Crowd and whatever the backing authentication system is (typically LDAP, such as ActiveDirectory). Bitbucket Server’s code passes the user-entered username and password through to Crowd unchanged, and authentication is performed. If the backing authentication system is case-insensitive-but-case-preserving, as they often are, then you’ll get case-insensitive authentication.
Crowd has a knowledgebase article on case-sensitivity that may provide some additional details.
Best regards,
Bryan Turner
Atlassian Bitbucket
2 Likes