Jetspeed 2
  1. Jetspeed 2
  2. JS2-1129

JetSpeed hides error if values in SSO-Portlets are specified too long

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: 2.2.0
    • Fix Version/s: 2.2.1
    • Component/s: Security
    • Labels:
      None

      Description

      I am trying to use the "SSO Web Content" Portlet to display a website which requires basic authentication. Although all the parameters are specified correctly, I get the error "Could not add remote user: portal principal admin is already associated with a remote user for this site!" displayed when I save the portlet configuration.

      I found out that actually there is a SQL Exception during writing the configuration, but the code just prints out this incorrect error message. Also log-output does not contain any hint of the actual problem.

      Doing some tracing, I found that the problem is caused by the following commit: http://mail-archives.apache.org/mod_mbox/portals-jetspeed-dev/200905.mbox/%3C20090501033954.14ADF23888A4@eris.apache.org%3E

      Look at SSOWebContentPortlet.java, line 194: The change replaces the "throw" of the actual exception with the dumb error message which effectively hides the actual cause in this case. In my case the error was "Unexpected security error at JetspeedSecurityPersistenceManager from addDomain: OJB operation; SQL []; A truncation error was encountered trying to shrink VARCHAR 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' to length 30.; nested exception is java.sql.SQLDataException: A truncation error was encountered trying to shrink VARCHAR 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' to length 30.

      Please adjust the error-check here to only report the error text if this is the actual cause and report the actual error otherwise.

        Issue Links

          Activity

          No work has yet been logged on this issue.

            People

            • Assignee:
              Woonsan Ko
              Reporter:
              Dominik Stadler
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development