[JS2-1129] JetSpeed hides error if values in SSO-Portlets are specified too long

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.2.1
• Component/s: Security
• Assignee: Woonsan Ko
• Reporter: Dominik Stadler
• Created: 16/Mar/10 13:03
• Updated: 04/Oct/11 21:04
• Resolved: 31/Mar/10 18:02

Description

I am trying to use the "SSO Web Content" Portlet to display a website which requires basic authentication. Although all the parameters are specified correctly, I get the error "Could not add remote user: portal principal admin is already associated with a remote user for this site!" displayed when I save the portlet configuration.

I found out that actually there is a SQL Exception during writing the configuration, but the code just prints out this incorrect error message. Also log-output does not contain any hint of the actual problem.

Doing some tracing, I found that the problem is caused by the following commit: http://mail-archives.apache.org/mod_mbox/portals-jetspeed-dev/200905.mbox/[e-mail]%3E

Look at SSOWebContentPortlet.java, line 194: The change replaces the "throw" of the actual exception with the dumb error message which effectively hides the actual cause in this case. In my case the error was "Unexpected security error at JetspeedSecurityPersistenceManager from addDomain: OJB operation; SQL []; A truncation error was encountered trying to shrink VARCHAR 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' to length 30.; nested exception is java.sql.SQLDataException: A truncation error was encountered trying to shrink VARCHAR 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' to length 30.

Please adjust the error-check here to only report the error text if this is the actual cause and report the actual error otherwise.

Issue Links

• relates to: JS2-671 Improve and Test SSO IFrame Portlet