BryanMLima opened a new pull request, #9088:
URL: https://github.com/apache/cloudstack/pull/9088

   ### Description
   
   This PR fixes an issue when using the LDAP integration with ACS. PR #6812 
normalized the account and domain configurations to only encrypt the values 
with configurations in the `Hidden` and `Secure` categories. However, that PR 
failed to address the use of these configurations. This resulted in using the 
encrypted value of the configuration, when it should decrypt it first, as 
observed in issue #8637.
   
   This problem was fixed by adding the method `getActualValue()` that checks 
if the configurations in the Account and Domain are in the `Hidden` and 
`Secure` categories, and decrypting it, if needed.
   
   Fixes #8637 
   
   ### Types of changes
   
   - [ ] Breaking change (fix or feature that would cause existing 
functionality to change)
   - [ ] New feature (non-breaking change which adds functionality)
   - [x] Bug fix (non-breaking change which fixes an issue)
   - [ ] Enhancement (improves an existing feature and functionality)
   - [ ] Cleanup (Code refactoring and cleanup, that may add test cases)
   - [ ] build/CI
   
   ### Feature/Enhancement Scale or Bug Severity
   #### Bug Severity
   
   - [ ] BLOCKER
   - [ ] Critical
   - [ ] Major
   - [x] Minor
   - [ ] Trivial
   
   ### How Has This Been Tested?
   In a lab with version 4.19.0 installed, I configured an LDAP server and 
tried to create and LDAP account, which resulted in the following error `LDAP: 
error code 49 - Invalid Credentials`. After applying the changes in this patch, 
no exception was thrown, and the accounts in the LDAP server were correctly 
listed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to