Change in ovirt-engine[ovirt-engine-4.0]: aaa: desktopLogin sends empty password, impacts desktop SSO ...

piotr.kliczewski at gmail.com piotr.kliczewski at gmail.com
Tue Oct 11 13:51:06 UTC 2016


Piotr Kliczewski has submitted this change and it was merged.

Change subject: aaa: desktopLogin sends empty password, impacts desktop SSO feature
......................................................................


aaa: desktopLogin sends empty password, impacts desktop SSO feature

The session password is not saved
on engine and is only saved on SSO
end. Engine should make a call to
retrieve the encryped password from
SSO and use its private key to decrypt
the password.

Change-Id: If3048210dcc71a6eb4a732b347e57398213b9f72
Bug-Url: https://bugzilla.redhat.com/1381606
Signed-off-by: Ravi Nori <rnori at redhat.com>
(cherry picked from commit 39b2133fbf683840af70028725774dbf2caf6d94)
---
M backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/SsoUtils.java
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/VmLogonCommand.java
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/aaa/IsPasswordDelegationPossibleQuery.java
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/aaa/SessionDataContainer.java
4 files changed, 58 insertions(+), 36 deletions(-)

Approvals:
  Martin Peřina: Looks good to me, approved
  Ravi Nori: Verified
  Jenkins CI: Passed CI tests



-- 
To view, visit https://gerrit.ovirt.org/65256
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: If3048210dcc71a6eb4a732b347e57398213b9f72
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-4.0
Gerrit-Owner: Martin Peřina <mperina at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Martin Peřina <mperina at redhat.com>
Gerrit-Reviewer: Piotr Kliczewski <piotr.kliczewski at gmail.com>
Gerrit-Reviewer: Ravi Nori <rnori at redhat.com>
Gerrit-Reviewer: gerrit-hooks <automation at ovirt.org>



More information about the Engine-commits mailing list