Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1496979 - Check for UPN userid when "Get User Groups from External Authentication (httpd)" is not checkd
Check for UPN userid when "Get User Groups from External Authentication (http...
Status: CLOSED ERRATA
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance (Show other bugs)
5.8.0
Unspecified Unspecified
unspecified Severity medium
: GA
: 5.9.0
Assigned To: Joe Vlcek
Matt Pusateri
auth:externalauth:ad
:
: 1496978 (view as bug list)
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2017-09-28 16:53 EDT by Joe Vlcek
Modified: 2018-03-01 08:18 EST (History)
5 users (show)

See Also:
Fixed In Version: 5.9.0.1
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2018-03-01 08:18:32 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2018:0380 normal SHIPPED_LIVE Moderate: Red Hat CloudForms security, bug fix, and enhancement update 2018-03-01 13:37:12 EST

  None (edit)
Description Joe Vlcek 2017-09-28 16:53:25 EDT
Description of problem:

When doing external authenticaiton if "Get User Groups from External Authentication (httpd)" is not checked user records with a userid in UPN format are not matched.

There are situations when the userid could be in UPN format and need to be matched.
Comment 3 CFME Bot 2017-10-04 14:01:28 EDT
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/2ba8f0c7617e8446ab87b7d9514772845b1824db

commit 2ba8f0c7617e8446ab87b7d9514772845b1824db
Author:     Joe VLcek <jvlcek@redhat.com>
AuthorDate: Thu Sep 28 18:03:13 2017 -0400
Commit:     Joe VLcek <jvlcek@redhat.com>
CommitDate: Fri Sep 29 10:46:50 2017 -0400

    Always check for userid as UPN
    
    Always check for userid in UPN format, even when "Get User Groups
    from External Authentication (httpd)" is not checked
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1496979

 app/models/authenticator/base.rb        |  4 +--
 app/models/authenticator/httpd.rb       |  9 ++++++
 spec/models/authenticator/httpd_spec.rb | 51 ++++++++++++++++++++++++---------
 3 files changed, 48 insertions(+), 16 deletions(-)
Comment 5 Joe Vlcek 2017-10-09 09:34:11 EDT
*** Bug 1496978 has been marked as a duplicate of this bug. ***
Comment 6 Matt Pusateri 2017-10-25 12:01:28 EDT
Verified 5.9.0.2 - External auth - AD
Comment 9 errata-xmlrpc 2018-03-01 08:18:32 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:0380

Note You need to log in before you can comment on or make changes to this bug.