Bug 1220314 - Unable to log into Cloudforms with IE8 if the appliance is in the "internal website" security group
Summary: Unable to log into Cloudforms with IE8 if the appliance is in the "internal w...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: UI - OPS
Version: 5.3.0
Hardware: All
OS: All
medium
low
Target Milestone: GA
: 5.6.0
Assignee: Brian McLaughlin
QA Contact: Matouš Mojžíš
URL:
Whiteboard: retest:browser
Depends On:
Blocks: 1291809
TreeView+ depends on / blocked
 
Reported: 2015-05-11 09:51 UTC by Felix Dewaleyne
Modified: 2019-07-11 09:08 UTC (History)
10 users (show)

Fixed In Version: 5.6.0.0
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1291809 (view as bug list)
Environment:
Last Closed: 2016-06-29 14:54:45 UTC
Category: ---
Cloudforms Team: ---
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
login failed (51.34 KB, image/png)
2015-05-19 07:19 UTC, Aziza Karol
no flags Details
Compatibility View settings window (18.69 KB, image/png)
2015-05-19 20:44 UTC, Brian McLaughlin
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 1444253 0 None None None Never
Red Hat Product Errata RHBA-2016:1348 0 normal SHIPPED_LIVE CFME 5.6.0 bug fixes and enhancement update 2016-06-29 18:50:04 UTC

Description Felix Dewaleyne 2015-05-11 09:51:51 UTC
Description of problem:
Unable to log into Cloudforms with IE8 if the appliance is in the "internal website" security group

Version-Release number of selected component (if applicable):
cfme-5.3.4

How reproducible:
all the time

Steps to Reproduce:
1. set the "internet policy" so that the appliance is in the "internal website" group (any security level)
2. if you previously were logged into the appliance, clear out all cookies 
3. open the appliance's webpage in internet explorer 8
4. watch the audit.log on the server to confirm the authentication passes
5. log into the appliance

Actual results:
a 403 page is displayed, announcing that "the website requires you to login" or a different message depending on the version of IE8

Expected results:
able to log in

Additional info:
this behaviour is consistant with any level of security being set and with or without the checks on https enabled for the zone. it cannot be reproduced if the appliance is placed on the "internet" or "trusted websites" zones.

Comment 4 Aziza Karol 2015-05-18 09:11:54 UTC
Felix,

I am not able to reproduce this issue. I tried on 5.3.4 and 5.4.1 and was able to login successfully on IE8. Audit log also shows authentication passes.

I did not placed the appliance in "trusted websites" zone.
Can you please  let me know what "internet policy" did you set so that the appliance is in the "internal website" group (any security level) ?

~Thanks,
Aziza

Comment 5 Felix Dewaleyne 2015-05-18 09:48:09 UTC
I actually repeated the experiment with various settings, from low to high. I even selected the same settings as internet (that worked) and trusted. I was not able to access the appliance at all when placing the appliance in  'internal website' regardless of what security level was used, but also regardless of ssl verifications being turned on or off.

that test system I used is running windows XP and this is the closest I got to replicating the issue the customer described, but the appliance also behaves differently in its rejection. the default security level was used for him, but he has a more updated version of IE8 than I had with winxp.

what version were you using, and what security level?

Comment 6 Aziza Karol 2015-05-19 07:18:31 UTC
Felix,

I tried again with various settings, from low to high and was able to reproduce this issue.The user is unable to login and it displays "website requires you to login"
see attached screenshot.

~Thanks,
Aziza

Comment 7 Aziza Karol 2015-05-19 07:19:29 UTC
Created attachment 1026983 [details]
login failed

Comment 8 Felix Dewaleyne 2015-05-19 09:20:40 UTC
that's exactly the behaviour I hit. do you think that would be a IE8 bug? we may need to happend this to our documentation in some way if it is...

Comment 9 Brian McLaughlin 2015-05-19 20:44:33 UTC
Created attachment 1027405 [details]
Compatibility View settings window

Comment 10 Brian McLaughlin 2015-05-19 20:45:14 UTC
I was able to reproduce locally and believe the culprit is a default setting in IE8.  To verify, please go to the 'Page' menu and then the 'Compatibility View Settings' option.

By default, 'Display intranet sites in Compatibility View' is checked.  This is causing the problem, as the application is designed to be run in standards mode.

I would recommend adding this to the documentation.

Comment 12 Felix Dewaleyne 2015-05-21 09:39:52 UTC
I passed that to my customer - I'll let you know if he updates me again, but he seems to have resolved to using firefox 38.0.1 from a usb key now.

Comment 16 Brian McLaughlin 2016-02-19 19:11:09 UTC
Documented resolution in linked Solution.

Comment 17 Matouš Mojžíš 2016-04-25 18:13:08 UTC
Verified in 5.6.0, because it's not applicable for 5.5+, because IE8 is not supported for 5.5+.

Comment 19 errata-xmlrpc 2016-06-29 14:54:45 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1348


Note You need to log in before you can comment on or make changes to this bug.