[jira] [Created] (DIRSERVER-2069) Failed to change password if realm is not EXAMPLE.COM

["Alexander Bersenev (JIRA)" <ji...@apache.org>]

Alexander Bersenev created DIRSERVER-2069:
---------------------------------------------

             Summary: Failed to change password if realm is not EXAMPLE.COM
                 Key: DIRSERVER-2069
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2069
             Project: Directory ApacheDS
          Issue Type: Bug
            Reporter: Alexander Bersenev
         Attachments: realm.patch

>From verifyServiceTicket(protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java):
ChangePasswordConfig config = changepwContext.getConfig();
...
String primaryRealm = config.getPrimaryRealm();
...
        if ( !ticket.getRealm().equals( primaryRealm ) || !serverPrincipal.getName().equals( changepwPrincipal.getName() ) )
        {
            throw new KerberosException( org.apache.directory.shared.kerberos.exceptions.ErrorType.KRB_AP_ERR_NOT_US );
        }

The primary realm is always EXAMPLE.COM because an initialization of primaryRealm in ChangePasswordConfig was forgot.

Attached one-string patch fixes it.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)