Uploaded image for project: 'Pentaho BA Platform'
  1. Pentaho BA Platform
  2. BISERVER-11444

adminUser does not get administrator privileges after migrated content from 4.8.x (with MS AD Authentication) is imported to 5.0.x

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Reopened
    • Severity: High
    • Resolution: Unresolved
    • Affects Version/s: 5.0.4 GA, 5.0.5 GA
    • Fix Version/s: None
    • Labels:
    • Notice:
      When an issue is open, the "Fix Version/s" field conveys a target, not necessarily a commitment. When an issue is closed, the "Fix Version/s" field conveys the version that the issue was fixed in.
    • Sprint:
      Vodka Finalization, 5.x Required Defects

      Description

      After importing migrated content from 4.8.x that was configured to use MS AD the following two properties are added to the applicationContext-spring-ldap.properties

      1. These properties were added during migration:
        adminRole=cn\=Administrator,ou\=roles
        adminUser=uid\=admin,ou\=users

      There are two problems with these two lines:
      Problem 1 as described in BISERVER-11443

      Problem 2 even after adding a valid username to adminUser and restarting the server the adminUser will not have Administrator privileges; this is because we still do not have the appropriate MS AD admin role to be mapped to the Pentaho's Administrator role.

      Since we are migrating from 4.8.3 we should be able to get the admin role from the following file:
      /pentaho-solutions/system/pentaho.xml from the following tag:

      <admin-role>ADPentahoAdmin</admin-role>

      Please see attached 4.8.3 pentaho.xml

      so instead of adding:
      adminRole=cn\=Administrator,ou\=roles

      we should add it as:

      adminRole=cn\=ADPentahoAdmin

        PractiTest Integration




          Attachments

            Issue Links

              Activity

                People

                Assignee:
                project admin Triage
                Reporter:
                clopez Carlos Lopez
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                  Dates

                  Created:
                  Updated:

                    Time Tracking

                    Estimated:
                    Original Estimate - 0h
                    0h
                    Remaining:
                    Remaining Estimate - 0h
                    0h
                    Logged:
                    Time Spent - 7.5h
                    7.5h