RE: Jetspeed 2.3.0 - Enabling password validation - Request for support - Urgent
"Elyse Badr" <[email protected]> Fri, 14 Jul 2017 08:50:39 +0300
| Newsgroups | gmane.comp.jakarta.jetspeed.user,gmane.comp.jakarta.jetspeed.devel |
|---|---|
| Message-ID | <[email protected]> |
------=_NextPart_000_0260_01D2FC7E.4661A950 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0261_01D2FC7E.4661A950" ------=_NextPart_001_0261_01D2FC7E.4661A950 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Kind reminder. I need urgent help please. Feel free to give me any contact email who can help. Thanks, Elyse BADR Software Engineer, CME (O)+961-01-389-392, (M) +961-03-533-179 <mailto:[email protected]> [email protected] From: Elyse Badr [mailto:[email protected]] Sent: Thursday, July 13, 2017 7:57 AM To: '[email protected]' <[email protected]>; '[email protected]' <[email protected]> Subject: Jetspeed 2.3.0 - Enabling password validation - Request for support - Urgent Hi Support team, We are using Jetspeed 2.3.0 to deploy our set of portlets applications. I am sharing a problem I am facing in order to provide me with help or hints. We would like to enable password validation rules that are already supported by Jetspeed security. We would like to enable the following rules: * Set min & max character, alphanumeric count for passwords * Set password age [90 days] * Set count of password history [last 5 passwords] * Set notification period for password change reminder I uncommented some sections in Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\security-spi-atn.xml and Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\alternate\credentials\max-p assword-auth.xml but nothing was happening. I did the same and nothing happened too. I made some research with no luck as no documentation or question related to this topic. In Jetspeed documentation link <https://portals.apache.org/jetspeed-2/deployguide/security-config.html#secu rity-spi-atn_xml> they provide a sample config which is not working too. I am getting java.lang.ClassNotFoundException: org.apache.jetspeed.security.spi.impl.InternalPasswordCredentialInterceptors Proxy Although the jar jetspeed-security is present in the lib folder of the same location: Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\lib After investigations, it turned out that the sample configuration defined in Jetspeed 2 documentation link <https://portals.apache.org/jetspeed-2/deployguide/security-config.html#secu rity-spi-atn_xml> for security-spi-atn.xml, is referencing classes not present in Jetspeed jars probably belonging to older versions of Jetspeed (1): I even downloaded 2.3.1 and found out it has the same problem. I had to decompile the jetspeed-security-2.3.0 jar to get some equivalent names of some implementations. I created my own security-spi-atn.xml, Jetspeed did start successfully, however the validation rules are not applied, and I can try incorrect login password for several times. Please find attached my new configuration file and advice. Awaiting your reply. Thanks in advance. Thanks, Elyse BADR Software Engineer, CME (O)+961-01-389-392, (M) +961-03-533-179 <mailto:[email protected]> [email protected] ------=_NextPart_001_0261_01D2FC7E.4661A950 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><!--[if !mso]><style>v\:* = {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} </style><![endif]--><style><!-- /* Font Definitions */ @font-face {font-family:Wingdings; panose-1:5 0 0 0 0 0 0 0 0 0;} @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri",sans-serif;} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} p.msonormal0, li.msonormal0, div.msonormal0 {mso-style-name:msonormal; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:11.0pt; font-family:"Calibri",sans-serif;} span.EmailStyle18 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext;} span.EmailStyle19 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext;} span.EmailStyle20 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext;} span.EmailStyle21 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext;} span.EmailStyle22 {mso-style-type:personal-reply; font-family:"Calibri",sans-serif; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} /* List Definitions */ @list l0 {mso-list-id:1152714831; mso-list-template-ids:78949902;} @list l0:level1 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:.5in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level2 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:1.0in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level3 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:1.5in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level4 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:2.0in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level5 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:2.5in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level6 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:3.0in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level7 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:3.5in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level8 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:4.0in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l0:level9 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:4.5in; mso-level-number-position:left; text-indent:-.25in; mso-ansi-font-size:10.0pt; font-family:Symbol;} @list l1 {mso-list-id:2132743906; mso-list-type:hybrid; mso-list-template-ids:1178083098 67698689 67698691 67698693 67698689 = 67698691 67698693 67698689 67698691 67698693;} @list l1:level1 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:Symbol;} @list l1:level2 {mso-level-number-format:bullet; mso-level-text:o; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:"Courier New";} @list l1:level3 {mso-level-number-format:bullet; mso-level-text:\F0A7; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:Wingdings;} @list l1:level4 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:Symbol;} @list l1:level5 {mso-level-number-format:bullet; mso-level-text:o; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:"Courier New";} @list l1:level6 {mso-level-number-format:bullet; mso-level-text:\F0A7; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:Wingdings;} @list l1:level7 {mso-level-number-format:bullet; mso-level-text:\F0B7; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:Symbol;} @list l1:level8 {mso-level-number-format:bullet; mso-level-text:o; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:"Courier New";} @list l1:level9 {mso-level-number-format:bullet; mso-level-text:\F0A7; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in; font-family:Wingdings;} ol {margin-bottom:0in;} ul {margin-bottom:0in;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US = link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p = class=3DMsoNormal>Kind reminder… I need urgent help = please.<o:p></o:p></p><p class=3DMsoNormal>Feel free to give me any = contact email who can help.<o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><div><p = class=3DMsoNormal>Thanks,<o:p></o:p></p><p class=3DMsoNormal = style=3D'mso-line-height-alt:0pt'><span = style=3D'color:black;letter-spacing:.9pt'><o:p> </o:p></span></p><p = class=3DMsoNormal style=3D'mso-line-height-alt:0pt'><span = style=3D'color:black;letter-spacing:.9pt'>Elyse BADR</span><span = style=3D'color:black'><br><span style=3D'letter-spacing:.9pt'>Software = Engineer, CME<o:p></o:p></span></span></p><p class=3DMsoNormal = style=3D'mso-line-height-alt:0pt'><span = style=3D'color:black;letter-spacing:1.75pt'>(O)+961-01-389-392</span><spa= n style=3D'color:black'>, (M) +<span = style=3D'letter-spacing:1.75pt'>961-03-533-179</span> = <o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'color:#5D5D62;letter-spacing:1.75pt'><a = href=3D"mailto:[email protected]"><span = style=3D'color:blue'>[email protected]</span></a><o:p></o:p></span><= /p><p class=3DMsoNormal><o:p> </o:p></p></div><p = class=3DMsoNormal><o:p> </o:p></p><div><div = style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in'><p class=3DMsoNormal><b>From:</b> Elyse Badr = [mailto:[email protected]] <br><b>Sent:</b> Thursday, July 13, 2017 = 7:57 AM<br><b>To:</b> '[email protected]' = <[email protected]>; = '[email protected]' = <[email protected]><br><b>Subject:</b> Jetspeed = 2.3.0 - Enabling password validation - Request for support - = Urgent<o:p></o:p></p></div></div><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>Hi Support = team,<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal>We are using Jetspeed 2.3.0 to deploy our set of = portlets applications. I am sharing a problem I am facing in order to = provide me with help or hints.<o:p></o:p></p><p class=3DMsoNormal>We = would like to enable password validation rules that are already = supported by Jetspeed security.<o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>We would = like to enable the following rules:<o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><ul style=3D'margin-top:0in' = type=3Ddisc><li class=3DMsoNormal style=3D'margin-left:0in;mso-list:l1 = level1 lfo3'>Set min & max character, alphanumeric count for = passwords<o:p></o:p></li><li class=3DMsoNormal = style=3D'margin-left:0in;mso-list:l1 level1 lfo3'>Set password age [90 = days]<o:p></o:p></li><li class=3DMsoNormal = style=3D'margin-left:0in;mso-list:l1 level1 lfo3'>Set count of password = history [last 5 passwords]<o:p></o:p></li><li class=3DMsoNormal = style=3D'margin-left:0in;mso-list:l1 level1 lfo3'>Set notification = period for password change reminder<o:p></o:p></li></ul><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>I = uncommented some sections in = <i>Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\security-spi-atn.xml<= /i> and = <i>Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\alternate\credentials= \max-password-auth.xml </i>but nothing was happening.<o:p></o:p></p><p = class=3DMsoNormal>I did the same and nothing happened too. = <o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal>I made some research with no luck as no documentation = or question related to this topic. In Jetspeed documentation <a = href=3D"https://portals.apache.org/jetspeed-2/deployguide/security-config= .html#security-spi-atn_xml">link</a> they provide a sample config which = is not working too. I am getting <o:p></o:p></p><table = class=3DMsoNormalTable border=3D0 cellpadding=3D0><tr><td = style=3D'padding:.75pt .75pt .75pt .75pt'></td><td = style=3D'padding:.75pt .75pt .75pt .75pt'><p = class=3DMsoNormal>java.lang.ClassNotFoundException: = org.apache.jetspeed.security.spi.impl.InternalPasswordCredentialIntercept= orsProxy<o:p></o:p></p></td></tr></table><p class=3DMsoNormal>Although = the jar <i>jetspeed-security</i> is present in the lib folder of the = same location: = Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\lib<o:p></o:p></p><p = class=3DMsoNormal>After investigations, it turned out that the sample = configuration defined in Jetspeed 2 documentation <a = href=3D"https://portals.apache.org/jetspeed-2/deployguide/security-config= .html#security-spi-atn_xml">link</a> for <i>security-spi-atn.xml,</i> is = referencing classes not present in Jetspeed jars probably = belonging to older versions of Jetspeed (1):<o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><img = border=3D0 width=3D1122 height=3D438 = style=3D'width:11.6875in;height:4.5625in' id=3D"_x0000_i1025" = src=3D"cid:[email protected]"><o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><img = border=3D0 width=3D992 height=3D233 = style=3D'width:10.3333in;height:2.427in' id=3D"_x0000_i1026" = src=3D"cid:[email protected]"><o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>I even = downloaded 2.3.1 and found out it has the same problem. = <o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal>I had to decompile the jetspeed-security-2.3.0 jar to = get some equivalent names of some implementations… I created my = own <i>security-spi-atn.xml, </i>Jetspeed did start successfully, = however the validation rules are not applied, and I can try incorrect = login password for several times.<o:p></o:p></p><p = class=3DMsoNormal>Please find attached my new configuration file and = advice.<o:p></o:p></p><p class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal>Awaiting your reply.<o:p></o:p></p><p = class=3DMsoNormal>Thanks in advance.<o:p></o:p></p><p = class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal>Thanks,<o:p></o:p></p><p class=3DMsoNormal = style=3D'mso-line-height-alt:0pt'><span = style=3D'color:black;letter-spacing:.9pt'><o:p> </o:p></span></p><p = class=3DMsoNormal style=3D'mso-line-height-alt:0pt'><span = style=3D'color:black;letter-spacing:.9pt'>Elyse BADR</span><span = style=3D'color:black'><br><span style=3D'letter-spacing:.9pt'>Software = Engineer, CME<o:p></o:p></span></span></p><p class=3DMsoNormal = style=3D'mso-line-height-alt:0pt'><span = style=3D'color:black;letter-spacing:1.75pt'>(O)+961-01-389-392</span><spa= n style=3D'color:black'>, (M) +<span = style=3D'letter-spacing:1.75pt'>961-03-533-179</span> = <o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'color:#5D5D62;letter-spacing:1.75pt'><a = href=3D"mailto:[email protected]"><span = style=3D'color:blue'>[email protected]</span></a><o:p></o:p></span><= /p><p class=3DMsoNormal><o:p> </o:p></p><p = class=3DMsoNormal><o:p> </o:p></p></div></body></html> ------=_NextPart_001_0261_01D2FC7E.4661A950-- ------=_NextPart_000_0260_01D2FC7E.4661A950--