Bug 793319 (JBEPP-402) - Remove IP addresses from picketlink msad example config files
Summary: Remove IP addresses from picketlink msad example config files
Keywords:
Status: VERIFIED
Alias: JBEPP-402
Product: JBoss Enterprise Portal Platform 5
Classification: JBoss
Component: Portal
Version: 5.0.0.GA
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 5.2.1.ER02
Assignee: Nobody
QA Contact:
URL: http://jira.jboss.org/jira/browse/JBE...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-08-10 08:55 UTC by Martin Weiler
Modified: 2020-04-27 01:31 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
It was discovered that the Microsoft Active Directory (MSAD) configuration files (<filename>picketlink-idm-msad-config.xml</filename> and <filename>picketlink-idm-msad-readonly-config.xml</filename>) contained a providerURL property with an IP address specified. The IP address was interpreted by customers as required and mandatory, instead of being interpreted as a value that needed to be changed to an IP address used in the customer's implementation. The fix replaces the numerical IP address with replaceable values that are more prescriptive to users, which corrects the originally reported issue.
Clone Of:
Environment:
Last Closed:
Type: Task
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker JBEPP-402 0 Major Closed Remove IP addresses from picketlink msad example config files 2015-04-24 08:39:35 UTC

Description Martin Weiler 2010-08-10 08:55:04 UTC
Help Desk Ticket Reference: https://access.redhat.com/issue-tracker/1233653
project_key: JBEPP

The example picketlink config files for MS AD contain a providerURL property with an actual IP:
02portal.war/WEB-INF/conf/organization/picketlink-idm/examples/picketlink-idm-msad-config.xml
02portal.war/WEB-INF/conf/organization/picketlink-idm/examples/picketlink-idm-msad-readonly-config.xml

          <option>
            <name>providerURL</name>
            <value>ldap://192.168.0.12:389</value>
          </option>

This has caused confusion for customers who did not spot the incorrect server IP address when configuring EPP 5 to use with MS AD. If we just include the following providerURL property (which is already in the config files, but commented out), the necessary config change would have been detected easier:

          <option>
            <name>providerURL</name>
            <value>[ldap|ldaps]://[msad-host]:[port]</value>
          </option>

Comment 1 boleslaw.dawidowicz 2011-01-17 08:27:12 UTC
Requires merge from:

https://fisheye.jboss.org/changelog/gatein/portal/trunk?cs=5762

Comment 3 Jared MORGAN 2011-11-18 00:56:41 UTC
Release Notes Docs Status: Added: Not Yet Documented
Release Notes Text: Added: CAUSE:

CONSEQUENCE:

FIX:

RESULT:


Comment 5 Jared MORGAN 2012-03-22 04:29:05 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
==CUSTOMER FACING ISSUE REQUIRES RELEASE NOTE==

CAUSE:

CONSEQUENCE:

FIX:

RESULT:

Comment 6 Thomas Heute 2012-03-28 19:39:13 UTC
    Technical note updated. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    Diffed Contents:
@@ -1,9 +1,13 @@
 ==CUSTOMER FACING ISSUE REQUIRES RELEASE NOTE==
 
 CAUSE:
+Fixed IP addresses as example in configuration files
 
 CONSEQUENCE:
+Confusion as what needs to be changed and what needs to remain the same
 
 FIX:
+Replaced IP addresses with bracket style template to show what needs to be replaced
 
-RESULT:+RESULT:
+Less confusion

Comment 7 Jared MORGAN 2012-03-29 00:07:21 UTC
    Technical note updated. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    Diffed Contents:
@@ -1,13 +1 @@
-==CUSTOMER FACING ISSUE REQUIRES RELEASE NOTE==
+It was discovered that the Microsoft Active Directory (MSAD) configuration files (<filename>picketlink-idm-msad-config.xml</filename> and <filename>picketlink-idm-msad-readonly-config.xml</filename>) contained a providerURL property with an IP address specified. The IP address was interpreted by customers as required and mandatory, instead of being interpreted as a value that needed to be changed to an valid IP address used in the customer's implementation. The fix replaces the numerical IP address with replaceable values that are more prescriptive to users, which corrects the originally reported issue.-
-CAUSE:
-Fixed IP addresses as example in configuration files
-
-CONSEQUENCE:
-Confusion as what needs to be changed and what needs to remain the same
-
-FIX:
-Replaced IP addresses with bracket style template to show what needs to be replaced
-
-RESULT:
-Less confusion

Comment 8 Jared MORGAN 2012-04-11 03:34:11 UTC
    Technical note updated. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    Diffed Contents:
@@ -1 +1 @@
-It was discovered that the Microsoft Active Directory (MSAD) configuration files (<filename>picketlink-idm-msad-config.xml</filename> and <filename>picketlink-idm-msad-readonly-config.xml</filename>) contained a providerURL property with an IP address specified. The IP address was interpreted by customers as required and mandatory, instead of being interpreted as a value that needed to be changed to an valid IP address used in the customer's implementation. The fix replaces the numerical IP address with replaceable values that are more prescriptive to users, which corrects the originally reported issue.+It was discovered that the Microsoft Active Directory (MSAD) configuration files (<filename>picketlink-idm-msad-config.xml</filename> and <filename>picketlink-idm-msad-readonly-config.xml</filename>) contained a providerURL property with an IP address specified. The IP address was interpreted by customers as required and mandatory, instead of being interpreted as a value that needed to be changed to an IP address used in the customer's implementation. The fix replaces the numerical IP address with replaceable values that are more prescriptive to users, which corrects the originally reported issue.


Note You need to log in before you can comment on or make changes to this bug.