Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Disabling openID and "Remember me" using portal-ext.properties does not work

Description

In portal-xt.properties, the follwing properties are defined

open.id.auth.enabled=false
company.security.send.password=false
company.security.send.password.reset.link=false

when logging in as an administrator the corresponding settings are correctly reflected by control panel UI.

However, when the following links are applied the corresponding UI appears and hence is accessible:
(openID)
http://localhost:8080/web/guest/home?p_p_id=58&p_p_lifecycle=0&p_p_state=normal&p_p_mode=view&p_p_col_id=column-1&p_p_col_pos=2&p_p_col_count=3&_58_struts_action=%2Flogin%2Fopen_id

(forgot password)
http://localhost:8080/web/guest/home?p_p_id=58&p_p_lifecycle=0&p_p_state=normal&p_p_mode=view&p_p_col_id=column-1&p_p_col_pos=2&p_p_col_count=3&_58_struts_action=%2Flogin%2Fforgot_password

This is reproducible in both 6.0.6 and 6.1

Environment

6.0.6 GA Tomcat bundle, 6.1.0GA1 Tomcat bundle

Activity

Show:

EdGApril 19, 2013 at 4:14 PM

Hello everyone! We are in the process of removing component "Portlet" from LPS. Please make the necessary adjustments to affected filters. Thanks!

Tammy FongJanuary 18, 2012 at 10:56 PM

PASSED Manual testing following the steps in the description.

Reproduced on:
Tomcat 7.0.23 + MySQL 5. 6.2.x GIT ID: 9a7e363d3e8fd8b425c5061cf76e008f188143c5.

With the settings off, user can still navigate to the Forgot-password and OpenID links.

Fixed on:
Tomcat 7.0.23 + MySQL 5. 6.1.x GIT ID: 44182aa6d3ae89203cbe509a6a87250cd2de189e.
Tomcat 7.0.23 + MySQL 5. 6.2.x GIT ID: a8d4dc79fff9720a742587c99fc05f4a1afdbcf1.

With the settings off, user cannot still navigate to the Forgot-password and OpenID links; user will redirect to the Welcome page.

Michael SaechangJanuary 18, 2012 at 3:56 PM

Committed on:
6.1.x GIT ID: 5cb9e7747e52694717617bb22021731558eb9d4b.
6.2.x GIT ID: 5cfbd8400b5c1a35b3f6922a9fb2b3be99c92d7a

Fixed

Details

Assignee

Reporter

Labels

Branch Version/s

6.1.x

Backported to Branch

Committed

Components

Fix versions

Affects versions

Priority

Zendesk Support

Created January 13, 2012 at 7:12 AM
Updated June 24, 2023 at 3:35 PM
Resolved March 12, 2012 at 2:27 PM
Loading...