AuthenticationManager.canSelfRegister is problematic with stacked
authentication modules
----------------------------------------------------------------------------------------
Key: DS-1007
URL: https://jira.duraspace.org/browse/DS-1007
Project: DSpace
Issue Type: Bug
Components: DSpace API
Affects Versions: 1.8.0
Reporter: Hardy Pottinger
This was first noticed in DS-994, but is a separate issue.
AuthenticationManger.canSelfRegister contains a loop which goes through all the
authentication modules configured in the stack of authentication modules, and
returns "true" for any particular module's canSelfRegister method. This allows
the value of one canSelfRegister method to trump the values of all others in
the stack. In cases where a module always returns true for this method (the
Shibboleth Authentication module's canSelfRegister method does just this), any
logic in any other authentication module's canSelfRegister method is ignored,
if this module is used in a stack of authentication modules. This means that
the values in dspace.cfg for authentication.password.domain.valid are currently
being ignored, if Shibboleth is in the stack of authentication modules.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://jira.duraspace.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
EMC VNX: the world's simplest storage, starting under $10K
The only unified storage solution that offers unified management
Up to 160% more powerful than alternatives and 25% more efficient.
Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel
