Re: Jetspeed 2.3.0 - Enabling password validation - Request for support - Urgent
DavidSeanTaylor <[email protected]> Sun, 16 Jul 2017 18:12:55 -0700
| Newsgroups | gmane.comp.jakarta.jetspeed.user |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail=_85D45AB5-6429-4887-A1FD-C9F62414E9AF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > I uncommented some sections in = Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\security-spi-atn.xml = and = Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\alternate\credentials\max= -password-auth.xml but nothing was happening. The alternate directory configs are examples only. They are not used. = Drop your Spring overrides into /WEB-INF/assembly/override directory. = Try the file attached > On Jul 12, 2017, at 9:57 PM, Elyse Badr <[email protected]> = wrote: >=20 > Hi Support team, > =20 > We are using Jetspeed 2.3.0 to deploy our set of portlets = applications. I am sharing a problem I am facing in order to provide me = with help or hints. > We would like to enable password validation rules that are already = supported by Jetspeed security. > =20 > We would like to enable the following rules: > =20 > Set min & max character, alphanumeric count for passwords > Set password age [90 days] > Set count of password history [last 5 passwords] > Set notification period for password change reminder > =20 > I uncommented some sections in = Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\security-spi-atn.xml = and = Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\alternate\credentials\max= -password-auth.xml but nothing was happening. > I did the same and nothing happened too.=20 > =20 > I made some research with no luck as no documentation or question = related to this topic. In Jetspeed documentation link = <https://portals.apache.org/jetspeed-2/deployguide/security-config.html#se= curity-spi-atn_xml>they provide a sample config which is not working = too. I am getting=20 > java.lang.ClassNotFoundException: = org.apache.jetspeed.security.spi.impl.InternalPasswordCredentialIntercepto= rsProxy > Although the jar jetspeed-security is present in the lib folder of the = same location: Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\lib > After investigations, it turned out that the sample configuration = defined in Jetspeed 2 documentation link = <https://portals.apache.org/jetspeed-2/deployguide/security-config.html#se= curity-spi-atn_xml> for security-spi-atn.xml, is referencing classes not = present in Jetspeed jars probably belonging to older versions of = Jetspeed (1): > =20 > <image001.jpg> > =20 > =20 > <image002.jpg> > =20 > =20 > I even downloaded 2.3.1 and found out it has the same problem.=20 > =20 > I had to decompile the jetspeed-security-2.3.0 jar to get some = equivalent names of some implementations=E2=80=A6 I created my own = security-spi-atn.xml, Jetspeed did start successfully, however the = validation rules are not applied, and I can try incorrect login password = for several times. > Please find attached my new configuration file and advice. > =20 > Awaiting your reply. > Thanks in advance. > =20 > Thanks, > =20 > Elyse BADR > Software Engineer, CME > (O)+961-01-389-392, (M) +961-03-533-179 > [email protected] <mailto:[email protected]> > =20 > =20 > <security-spi-atn.xml> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] = <mailto:[email protected]> > For additional commands, e-mail: [email protected] = <mailto:[email protected]> --Apple-Mail=_85D45AB5-6429-4887-A1FD-C9F62414E9AF Content-Type: multipart/mixed; boundary="Apple-Mail=_D6C89E07-605E-4564-9F4E-660E68AA76AC" --Apple-Mail=_D6C89E07-605E-4564-9F4E-660E68AA76AC Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii <html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><blockquote type="cite" class=""><div class="WordSection1" style="page: WordSection1;"><div class="" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">I uncommented some sections in <i class="">Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\security-spi-atn.xml</i> and <i class="">Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\alternate\credentials\max-password-auth.xml </i>but nothing was happening.</div></div></blockquote><div class=""><br class=""></div><div class=""><br class=""></div>The alternate directory configs are examples onl y. They are not used. Drop your Spring overrides into /WEB-INF/assembly/override directory. Try the file attached<div class=""><br class=""></div><div class=""></div></body></html> --Apple-Mail=_D6C89E07-605E-4564-9F4E-660E68AA76AC Content-Disposition: attachment; filename=password-overrides.xml Content-Type: application/xml; name="password-overrides.xml" Content-Transfer-Encoding: 7bit <?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd"> <bean id="org.apache.jetspeed.security.spi.CredentialPasswordValidator" class="org.apache.jetspeed.security.spi.impl.DefaultCredentialPasswordValidator"> <meta key="j2:cat" value="default or security" /> <!-- UNCOMMENT TO TURN ON Regex-based password validation. The pattern below gives: * Must be at least 6 characters * Must contain at least one one lower case letter, one upper case letter, one digit and one special character * Valid special characters are @#$%^&+= --> <constructor-arg index="0"><value><![CDATA[^.*(?=.{6,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#$%^&+=]).*$]]></value></constructor-arg> </bean> <bean id="org.apache.jetspeed.security.CredentialPasswordValidator" class="org.apache.jetspeed.security.spi.impl.DefaultCredentialPasswordValidator"> <meta key="j2:cat" value="default or security" /> <constructor-arg index="0"><value><![CDATA[^.*(?=.{6,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[@#$%^&+=]).*$]]></value></constructor-arg> </bean> </beans> --Apple-Mail=_D6C89E07-605E-4564-9F4E-660E68AA76AC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div class=3D""></div><div class=3D""><br class=3D""><div = class=3D""><div><blockquote type=3D"cite" class=3D""><div class=3D"">On = Jul 12, 2017, at 9:57 PM, Elyse Badr <<a = href=3D"mailto:[email protected]" = class=3D"">[email protected]</a>> wrote:</div><br = class=3D"Apple-interchange-newline"><div class=3D""><div = class=3D"WordSection1" style=3D"page: WordSection1; font-family: = Helvetica; font-size: 12px; font-style: normal; font-variant-caps: = normal; font-weight: normal; letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: = 0px;"><div style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; = font-family: Calibri, sans-serif;" class=3D"">Hi Support team,<o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">We are = using Jetspeed 2.3.0 to deploy our set of portlets applications. I am = sharing a problem I am facing in order to provide me with help or = hints.<o:p class=3D""></o:p></div><div style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D"">We would like to enable password validation rules that are = already supported by Jetspeed security.<o:p class=3D""></o:p></div><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D""><o:p class=3D""> </o:p></div><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D"">We would like to enable the following = rules:<o:p class=3D""></o:p></div><div style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D""><o:p class=3D""> </o:p></div><ul type=3D"disc" = style=3D"margin-bottom: 0in; margin-top: 0in;" class=3D""><li = class=3D"MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; = font-family: Calibri, sans-serif;">Set min & max character, = alphanumeric count for passwords<o:p class=3D""></o:p></li><li = class=3D"MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; = font-family: Calibri, sans-serif;">Set password age [90 days]<o:p = class=3D""></o:p></li><li class=3D"MsoNormal" style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">Set count = of password history [last 5 passwords]<o:p class=3D""></o:p></li><li = class=3D"MsoNormal" style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; = font-family: Calibri, sans-serif;">Set notification period for password = change reminder<o:p class=3D""></o:p></li></ul><div style=3D"margin: 0in = 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D""><o:p class=3D""> </o:p></div><div style=3D"margin: 0in = 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D"">I uncommented some sections in<span = class=3D"Apple-converted-space"> </span><i = class=3D"">Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\security-spi-a= tn.xml</i><span class=3D"Apple-converted-space"> </span>and<span = class=3D"Apple-converted-space"> </span><i = class=3D"">Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\assembly\alternate\cred= entials\max-password-auth.xml<span = class=3D"Apple-converted-space"> </span></i>but nothing was = happening.<o:p class=3D""></o:p></div><div style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">I= did the same and nothing happened too.<span = class=3D"Apple-converted-space"> </span><o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">I made = some research with no luck as no documentation or question related to = this topic. In Jetspeed documentation<span = class=3D"Apple-converted-space"> </span><a = href=3D"https://portals.apache.org/jetspeed-2/deployguide/security-config.= html#security-spi-atn_xml" style=3D"color: rgb(149, 79, 114); = text-decoration: underline;" class=3D"">link</a>they provide a sample = config which is not working too. I am getting<span = class=3D"Apple-converted-space"> </span><o:p = class=3D""></o:p></div><table class=3D"MsoNormalTable" border=3D"0" = cellpadding=3D"0"><tbody class=3D""><tr class=3D""><td style=3D"padding: = 0.75pt;" class=3D""></td><td style=3D"padding: 0.75pt;" class=3D""><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D"">java.lang.ClassNotFoundException: = org.apache.jetspeed.security.spi.impl.InternalPasswordCredentialIntercepto= rsProxy<o:p class=3D""></o:p></div></td></tr></tbody></table><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D"">Although the jar<span = class=3D"Apple-converted-space"> </span><i = class=3D"">jetspeed-security</i><span = class=3D"Apple-converted-space"> </span>is present in the lib = folder of the same location: = Jetspeed-2.3.0\webapps\jetspeed\WEB-INF\lib<o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">After = investigations, it turned out that the sample configuration defined in = Jetspeed 2 documentation<span = class=3D"Apple-converted-space"> </span><a = href=3D"https://portals.apache.org/jetspeed-2/deployguide/security-config.= html#security-spi-atn_xml" style=3D"color: rgb(149, 79, 114); = text-decoration: underline;" class=3D"">link</a><span = class=3D"Apple-converted-space"> </span>for<span = class=3D"Apple-converted-space"> </span><i = class=3D"">security-spi-atn.xml,</i><span = class=3D"Apple-converted-space"> </span>is referencing classes not = present in Jetspeed jars probably belonging to older versions of = Jetspeed (1):<o:p class=3D""></o:p></div><div style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D""><o:p class=3D""> </o:p></div><div style=3D"margin: 0in = 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D""><span = id=3D"cid:[email protected]"><image001.jpg></span><o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><span = id=3D"cid:[email protected]"><image002.jpg></span><o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">I even = downloaded 2.3.1 and found out it has the same problem.<span = class=3D"Apple-converted-space"> </span><o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">I had to = decompile the jetspeed-security-2.3.0 jar to get some equivalent names = of some implementations=E2=80=A6 I created my own<span = class=3D"Apple-converted-space"> </span><i = class=3D"">security-spi-atn.xml,<span = class=3D"Apple-converted-space"> </span></i>Jetspeed did start = successfully, however the validation rules are not applied, and I can = try incorrect login password for several times.<o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">Please = find attached my new configuration file and advice.<o:p = class=3D""></o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D"">Awaiting = your reply.<o:p class=3D""></o:p></div><div style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D"">Thanks in advance.<o:p class=3D""></o:p></div><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D""><o:p class=3D""> </o:p></div><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D"">Thanks,<o:p class=3D""></o:p></div><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D""><span style=3D"letter-spacing: 0.9pt;" = class=3D""><o:p class=3D""> </o:p></span></div><div style=3D"margin: = 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D""><span style=3D"letter-spacing: 0.9pt;" class=3D"">Elyse = BADR</span><span style=3D"" class=3D""><br class=3D""><span = style=3D"letter-spacing: 0.9pt;" class=3D"">Software Engineer, CME<o:p = class=3D""></o:p></span></span></div><div style=3D"margin: 0in 0in = 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" = class=3D""><span style=3D"letter-spacing: 1.75pt;" = class=3D"">(O)+961-01-389-392</span><span style=3D"" class=3D"">, (M) = +<span style=3D"letter-spacing: 1.75pt;" = class=3D"">961-03-533-179</span><o:p class=3D""></o:p></span></div><div = style=3D"margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: = Calibri, sans-serif;" class=3D""><span style=3D"color: rgb(93, 93, 98); = letter-spacing: 1.75pt;" class=3D""><a = href=3D"mailto:[email protected]" style=3D"color: rgb(149, 79, = 114); text-decoration: underline;" class=3D""><span style=3D"color: = blue;" class=3D"">[email protected]</span></a><o:p = class=3D""></o:p></span></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div><div style=3D"margin: 0in 0in 0.0001pt; = font-size: 11pt; font-family: Calibri, sans-serif;" class=3D""><o:p = class=3D""> </o:p></div></div><span = id=3D"cid:[email protected]"><se= curity-spi-atn.xml></span><br style=3D"font-family: Helvetica; = font-size: 12px; font-style: normal; font-variant-caps: normal; = font-weight: normal; letter-spacing: normal; orphans: auto; text-align: = start; text-indent: 0px; text-transform: none; white-space: normal; = widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" = class=3D""><span style=3D"font-family: Helvetica; font-size: 12px; = font-style: normal; font-variant-caps: normal; font-weight: normal; = letter-spacing: normal; orphans: auto; text-align: start; text-indent: = 0px; text-transform: none; white-space: normal; widows: auto; = word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: = inline !important;" = class=3D"">---------------------------------------------------------------= ------</span><br style=3D"font-family: Helvetica; font-size: 12px; = font-style: normal; font-variant-caps: normal; font-weight: normal; = letter-spacing: normal; orphans: auto; text-align: start; text-indent: = 0px; text-transform: none; white-space: normal; widows: auto; = word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=3D""><span = style=3D"font-family: Helvetica; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; float: none; display: inline = !important;" class=3D"">To unsubscribe, e-mail:<span = class=3D"Apple-converted-space"> </span></span><a = href=3D"mailto:[email protected]" = style=3D"color: rgb(149, 79, 114); text-decoration: underline; = font-family: Helvetica; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px;" = class=3D"">[email protected]</a><br = style=3D"font-family: Helvetica; font-size: 12px; font-style: normal; = font-variant-caps: normal; font-weight: normal; letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px;" class=3D""><span style=3D"font-family: = Helvetica; font-size: 12px; font-style: normal; font-variant-caps: = normal; font-weight: normal; letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; = float: none; display: inline !important;" class=3D"">For additional = commands, e-mail:<span = class=3D"Apple-converted-space"> </span></span><a = href=3D"mailto:[email protected]" style=3D"color: = rgb(149, 79, 114); text-decoration: underline; font-family: Helvetica; = font-size: 12px; font-style: normal; font-variant-caps: normal; = font-weight: normal; letter-spacing: normal; orphans: auto; text-align: = start; text-indent: 0px; text-transform: none; white-space: normal; = widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" = class=3D"">[email protected]</a></div></blockquote></di= v><br class=3D""></div></div></body></html>= --Apple-Mail=_D6C89E07-605E-4564-9F4E-660E68AA76AC-- --Apple-Mail=_85D45AB5-6429-4887-A1FD-C9F62414E9AF--