[DIRSTUDIO-873] Kerberos encryption types are not saved correctly

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.0-M4 (2.0.0.v20130125)
• Fix Version/s: 2.0.0-M6 (2.0.0.v20130308), 2.0.0
• Component/s: studio-apacheds-configuration
• Assignee: Pierre-Arnaud Marcelot
• Reporter: Emmanuel Lécharny
• Created: 08/Feb/13 18:43
• Updated: 21/May/13 12:29
• Resolved: 14/Feb/13 11:38

Description

We can't change the Encryption Types values in the Kerberos Configuration page. If we do so, we immediately get the following exception when starting the server :

'The server 'xxxx' cannot be started.
Cause: ERR_0444_CANNOT_NORMALIZE_VALUE Cnnot normalize the wrapped value ERR_04473_NOT_VALID_VALUE Not a valid value '[des-cbs-md5, rc4-hmac]' for the ...

It seems that the cofigurator tries to store the value as is.

If we modify the values by hand in the config.ldif file, for instance :

dn: ads-serverId=kerberosServer,ou=servers,ads-directoryServiceId=default,ou=config
...
ads-krbEncryptionTypes: des-cbc-md5
ads-krbEncryptionTypes: rc4-hmac

then in the GUI, the EncryptionTypes is now : [des-cbc-md5, rc4-hmac]

So there is an incompatible config/gui transformation that works in the config -> GUI way, but not in the other way.