Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

ADMIN account disabled but still enabled if you login with a incorrectly cased username

Questions
Tags
Users
Badges
Olly Brand
(16●1●2) Oct 14 '14, 8:40 a.m.
Since upgrading from CLM 4.0.6 to 5.0.1 users are able to log in as ADMIN if they incorrectly enter the case of their username. We're using LDAP and Tomcat so we have to use case sensitive usernames. If a user mistakenly enters a differing case, instead of an error, they are logged in as ADMIN.

I think this might be a bug but before I raise it has anyone seen similar / is there anything I can try?

The team.properties has the line com.ibm.team.repository.ws.allow.admin.access=false

This wasn't happening in 4.0.6.

ADMIN and ADMIN doesn't work, nor does logging in with anything other than the correct case username and password (works as expected) or the incorrect case and correct password (logs you in as ADMIN).

Any thoughts / ideas? Anyone seen similar?

So far I've re-setup the LDAP and copied the config files + tripple checked ADMIN is set to false. All to no avail.

1 vote

Comments
Ralph Schoon
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER Oct 14 '14, 11:19 a.m.
I would consider this serious. I'd suggest to get into contact with support.

1 answer
6,322 views
1 vote

One answer

Permanent link
Olly Brand
(16●1●2) Oct 16 '14, 3:28 a.m.
Defect submitted

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 7,624
× 11
× 2

Question asked: Oct 14 '14, 8:40 a.m.

Question was seen: 6,322 times

Last updated: Oct 16 '14, 3:28 a.m.

Confirmation Cancel Confirm