Bug 1480654
| Summary: | Duplicated users when changed the (upper,lower)case of letters of login name | ||
|---|---|---|---|
| Product: | Red Hat CloudForms Management Engine | Reporter: | Satoe Imaishi <simaishi> |
| Component: | Appliance | Assignee: | Joe Vlcek <jvlcek> |
| Status: | CLOSED ERRATA | QA Contact: | Matt Pusateri <mpusater> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 5.8.0 | CC: | abellott, dajohnso, gekis, hkataria, igortiunov, jbuchta, jhardy, jvlcek, mfeifer, mpovolny, mpusater, obarenbo, simaishi |
| Target Milestone: | GA | Keywords: | ZStream |
| Target Release: | 5.8.2 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | auth:externalauth:ad:rbac | ||
| Fixed In Version: | 5.8.2.0 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1448787 | Environment: |
5.7.2.1
|
| Last Closed: | 2017-10-24 00:38:34 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | CFME Core | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1448787 | ||
| Bug Blocks: | |||
|
Comment 2
CFME Bot
2017-08-11 17:46:49 UTC
New commit detected on ManageIQ/manageiq/fine: https://github.com/ManageIQ/manageiq/commit/344df3acf370e5f852bfd4772b4b67dcc2649d69 commit 344df3acf370e5f852bfd4772b4b67dcc2649d69 Author: Joe VLcek <jvlcek> AuthorDate: Wed Aug 2 17:30:37 2017 -0400 Commit: Joe VLcek <jvlcek> CommitDate: Fri Aug 11 13:27:17 2017 -0400 Normalize the username entered at login to lowercase https://bugzilla.redhat.com/show_bug.cgi?id=1480654 This is a cherry pick from 88a312c28a The cherry pick was not clean and had to be finished manually due to layout change of affected files. LDAP does a case sensitive match of the user name but AD will do a case insensitive match. By normalizing the userid to lowercase when using external auth both backed to either an LDAP directory or AD both will authenticate but only one DB record, in all lowercase, will be created, even if the user attempted to login with a mixed case username when backed to AD. https://bugzilla.redhat.com/show_bug.cgi?id=1448787 app/models/authenticator.rb | 10 ++++++-- spec/models/authenticator/httpd_spec.rb | 44 +++++++++++++++++++++++++++------ 2 files changed, 44 insertions(+), 10 deletions(-) Verified on 5.8.2.0 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3005 |