Bug 1486041
| Summary: | Unable to login to new user account when it contains one or more uppercase character(s) | ||
|---|---|---|---|
| Product: | Red Hat CloudForms Management Engine | Reporter: | Landon LaSmith <llasmith> |
| Component: | Appliance | Assignee: | Joe Vlcek <jvlcek> |
| Status: | CLOSED ERRATA | QA Contact: | Matt Pusateri <mpusater> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 5.8.0 | CC: | abellott, ansinha, apagac, dajohnso, jhardy, jvlcek, mkourim, mpusater, obarenbo, simaishi |
| Target Milestone: | GA | Keywords: | Regression |
| Target Release: | 5.9.0 | ||
| Hardware: | All | ||
| OS: | All | ||
| Whiteboard: | auth:db | ||
| Fixed In Version: | 5.9.0.1 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-03-01 13:16:22 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Landon LaSmith
2017-08-28 20:14:07 UTC
This bug exists on a vanilla 5.8.2.0 appliance without enabling any external authentication. May be related to fix for bug 1480654 New commit detected on ManageIQ/manageiq/master: https://github.com/ManageIQ/manageiq/commit/7135b4304e4ae368fef5e9446065b86a32a8b3cf commit 7135b4304e4ae368fef5e9446065b86a32a8b3cf Author: Joe VLcek <jvlcek> AuthorDate: Tue Aug 29 17:52:17 2017 -0400 Commit: Joe VLcek <jvlcek> CommitDate: Tue Aug 29 17:52:17 2017 -0400 If the userid is not found in the DB do a case insensitive search https://bugzilla.redhat.com/show_bug.cgi?id=1486041 app/models/authenticator/base.rb | 16 ++++++++++------ app/models/authenticator/database.rb | 2 +- app/models/authenticator/httpd.rb | 8 ++------ spec/models/authenticator/database_spec.rb | 27 +++++++++++++++++++++++++++ 4 files changed, 40 insertions(+), 13 deletions(-) *** Bug 1488393 has been marked as a duplicate of this bug. *** Amazon authentication is blocked because CFME imports the AWS IAM user id as the CFME username. The AWS IAM user id is zcapitalized and can't be modified. (In reply to Landon LaSmith from comment #6) > Amazon authentication is blocked because CFME imports the AWS IAM user id as > the CFME username. The AWS IAM user id is zcapitalized and can't be modified. Landon, That regression is being track in BZ 1489596 which I have already posted a PR for. JoeV *** Bug 1491198 has been marked as a duplicate of this bug. *** Also I've tried this with just DB users as is the original intent. You can indeed create a user with mixed case ex: DBuser1 and you can log into the classic UI. (SSUI logins broken on 5.9.0.2). But you can't log in as dbuser1 which you should be able to. Assinging back to dev for investigation. Per conversation with MattP moving back to ON_QA as by default sssd does case sensitive user matching. In order to do case insensitive with SSSD "case_sensitive = False" needs to be added to the domain section of the sssd.conf See: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/6.3_technical_notes/sssd section: BZ#735827 JoeV Verified on 5.9.0.4 *** Bug 1547445 has been marked as a duplicate of this bug. *** Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:0380 |