You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org> on 2013/02/14 12:40:13 UTC

[jira] [Resolved] (DIRSTUDIO-873) Kerberos encryption types are not saved correctly

     [ https://issues.apache.org/jira/browse/DIRSTUDIO-873?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pierre-Arnaud Marcelot resolved DIRSTUDIO-873.
----------------------------------------------

    Resolution: Fixed

Fixed at revision 1446115.

http://svn.apache.org/viewvc?view=revision&revision=r1446115
                
> Kerberos encryption types are not saved correctly
> -------------------------------------------------
>
>                 Key: DIRSTUDIO-873
>                 URL: https://issues.apache.org/jira/browse/DIRSTUDIO-873
>             Project: Directory Studio
>          Issue Type: Bug
>          Components: studio-apacheds-configuration
>    Affects Versions: 2.0.0-M4
>            Reporter: Emmanuel Lecharny
>            Assignee: Pierre-Arnaud Marcelot
>            Priority: Critical
>             Fix For: 2.0.0-M6, 2.0.0
>
>
> We can't change the Encryption Types values in the Kerberos Configuration page. If we do so, we immediately get the following exception when starting the server :
> 'The server 'xxxx' cannot be started.
> Cause: ERR_0444_CANNOT_NORMALIZE_VALUE Cnnot normalize the wrapped value ERR_04473_NOT_VALID_VALUE Not a valid value '[des-cbs-md5, rc4-hmac]' for the ...
> It seems that the cofigurator tries to store the value as is.
> If we modify the values by hand in the config.ldif file, for instance :
> dn: ads-serverId=kerberosServer,ou=servers,ads-directoryServiceId=default,ou=config
> ...
> ads-krbEncryptionTypes: des-cbc-md5
> ads-krbEncryptionTypes: rc4-hmac
> then in the GUI, the EncryptionTypes is now : [des-cbc-md5, rc4-hmac]
> So there is an incompatible config/gui transformation that works in the config -> GUI way, but not in the other way.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira