[Pki-devel] [PATCH] pki-cfu-0095-Ticket-1543-portalEnroll-authentication-does-not-loa.patch

[Christina Fu]

I tried the patch and looked at the code.  Functionally, the non-hash 
option works, but for security reasons, please make the hashed option 
work as well, and make sure hashed option is on by default.

thanks,
Christina



On 08/12/2015 10:56 AM, John Magne wrote:
> This looks like a good solution at this point in time.
>
> ACK
>
> I would suggest we investigate the possibility of permanently
> ripping this thing out or actually fixing it and file the appropriate ticket.
>
> ----- Original Message -----
> From: "Christina Fu" <cfu at redhat.com>
> To: "pki-devel" <pki-devel at redhat.com>
> Sent: Wednesday, August 12, 2015 10:45:57 AM
> Subject: Re: [Pki-devel] [PATCH]	pki-cfu-0095-Ticket-1543-portalEnroll-authentication-does-not-loa.patch
>
> now with the patch...
>
> On 08/12/2015 10:17 AM, Christina Fu wrote:
>> Ticket 1543 portalEnroll authentication does not load during creation
>> from Console
>> https://fedorahosted.org/pki/ticket/1543
>>
>>      It appears that the PortalEnroll plugin was never converted to
>> work in the
>>      Profile Framework.
>>      This patch takes out the following line from CS.cfg:
>> auths.impl.PortalEnroll.class=com.netscape.cms.authentication.PortalEnroll
>>
>>
>>      so that it cannot be instantiated from the console, nor manually
>> in CS.cfg,
>>      unless explicitly put back in.
>>      While in CS.cfg.in, I found the NSSAuth auths.impl line having no
>> real
>>      implementation, so I remove that too.
>>
>> thanks,
>> Christina
>>
>> _______________________________________________
>> Pki-devel mailing list
>> Pki-devel at redhat.com
>> https://www.redhat.com/mailman/listinfo/pki-devel
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel