You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using AD/LDAP connections with Kerberos Lock correctly identifies that the user is connecting from the internal network and displays the KerberosScreen.
However, when the user clicks the button nothing happens.The error registered in the browser is that the connection object does not have a get member.
Looking at the code the main issue is that the corpNetworkConnection is getting only the name of the connection from ssodata (notice the TODO).
Improves handling of the format sent by the server using and AD connection with Kerberos authentication.
When connecting from a corporate network a user can choose to connect using Kerberos or certificate authentication. In any of these cases lock relies in information provided by the server to validate that the user is in a corporate network and to obtain the name and strategy of the connection associated with the network.
However, the format of the information is flat inside the `sso` object and not in the connection format used in other cases. The fix manages the flat format and creates a temporary object with the known format to allow `KerberosScreen` to work as expected.
Improves handling of the format sent by the server using and AD connection with Kerberos authentication.
When connecting from a corporate network a user can choose to connect using Kerberos or certificate authentication. In any of these cases lock relies in information provided by the server to validate that the user is in a corporate network and to obtain the name and strategy of the connection associated with the network.
However, the format of the information is flat inside the `sso` object and not in the connection format used in other cases. The fix manages the flat format and creates a temporary object with the known format to allow `KerberosScreen` to work as expected.
When using AD/LDAP connections with Kerberos Lock correctly identifies that the user is connecting from the internal network and displays the
KerberosScreen
.However, when the user clicks the button nothing happens.The error registered in the browser is that the connection object does not have a
get
member.Looking at the code the main issue is that the corpNetworkConnection is getting only the name of the connection from
ssodata
(notice the TODO).In this scenario
ssodata
looks like this:A simple fix would be to change this line to
The text was updated successfully, but these errors were encountered: