[KNOX-2747] RemoteAliasService generates password without checking if it already exists

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Assignee: Attila Magyar
• Reporter: Attila Magyar
• Created: 20/May/22 14:24
• Updated: 23/Jun/22 09:18
• Resolved: 27/May/22 10:59

Description

RemoteAliasService:

    /* Generate a new password  */
    if (generate) {
      generateAliasForCluster(clusterName, alias);
    }

DefaultAliasService checks first

      credential = keystoreService.getCredentialForCluster(clusterName, alias);
      if (credential == null && generate) {
        generateAliasForCluster(clusterName, alias);
        credential = keystoreService.getCredentialForCluster(clusterName, alias);
      }

This causes the Pac4jDispatcherFilter to regenerate the password at each topology change.

Issue Links

• links to: GitHub Pull Request #581