Bug 236268
| Summary: | ESC: get rid of the -secmode option | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Chandrasekar Kannan <ckannan> | ||||
| Component: | esc | Assignee: | Jack Magne <jmagne> | ||||
| Status: | CLOSED ERRATA | QA Contact: | desktop-bugs <desktop-bugs> | ||||
| Severity: | urgent | Docs Contact: | |||||
| Priority: | urgent | ||||||
| Version: | 5.4 | CC: | aakkiang, benl, cfu, jmagne, mharmsen, rrelyea, shaines | ||||
| Target Milestone: | rc | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2009-09-02 09:58:12 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 443788, 497004 | ||||||
| Attachments: |
|
||||||
|
Description
Chandrasekar Kannan
2007-04-12 19:27:32 UTC
per rhcs meeting on 04/16, we can target this post 7.3 Let's discuss this one for 8.0. Here is how this will work for now: 1. No more command line switch. 2. Add a parameter to the esc/defaults/preferences/esc-prefs.js esc.security.url Below are two examples that allow ESC to use either the Security Officer Enrollment UI or the Security Officer Workstation UI. > #Sample Security Officer Enrollment UI > > #pref("esc.security.url","http://test.host.com:7888/cgi-bin/so/enroll.cgi"); > > #Sample Security Officer Workstation UI > > #pref("esc.security.url","https://test.host.com:7889/cgi-bin/sow/welcome.cgi") 3. Start esc. 4. When the user clicks on the tray icon or calls up esc from the command line, esc will now pop up the security UI as requested by the parameter. 5. When the parameter is missing, ESC operates as usual. 6. The parameter "esc.disable.password.prompt" must still be set to "no" for this work properly. Created attachment 333432 [details]
Patch to allow security officer mode to not need a command line switch.
attachment (id=333432) +mharmsen
esc/components/escCLH.js:
change line 34 from:
pref("esc.disable.password.prompt","no");
to:
pref("esc.disable.password.prompt","yes");
Checking in esc/chrome/content/esc/ESC.js; /cvs/dirsec/esc/src/app/xul/esc/chrome/content/esc/ESC.js,v <-- ESC.js new revision: 1.21; previous revision: 1.20 done Running syncmail... Mailing relnotes... ...syncmail done. Running syncmail... Mailing cvsdirsec... ...syncmail done. Checking in esc/components/escCLH.js; /cvs/dirsec/esc/src/app/xul/esc/components/escCLH.js,v <-- escCLH.js new revision: 1.4; previous revision: 1.3 done Running syncmail... Mailing relnotes... ...syncmail done. Running syncmail... Mailing cvsdirsec... ...syncmail done. Checking in esc/defaults/preferences/esc-prefs.js; /cvs/dirsec/esc/src/app/xul/esc/defaults/preferences/esc-prefs.js,v <-- esc-pr efs.js new revision: 1.6; previous revision: 1.5 done Changing product from Certificate System to Red Hat Enterprise 5. Rebase of ESC to version 1.1.0 to pick up present and future Certificate System v8 fixes. Setting ack requests. Setting devel ack. Verified.
Tested token enrollment using Gemalto 64K smart cards on Rhel 5.3 i386
and x86_64 with pref("esc.disable.password.prompt","no"), Security officer
enrollment/format, from security officer station user enrollment/format works
fine.
coolkey version: coolkey-1.1.0-6.el5 (latest from RHEL5.3 BaseOS)
esc version: esc-1.1.0-9.el5 (cs 8.0 build)
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2009-1310.html |