https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/AAA-55 aaa <p>TokenAuth.java always passes null for domain name, resulting in default domain. Thus, if a user is not associated with the default domain, then no grants are associated with the Claim. If no grants are associated with the claim, then the claim fails to build. A HTTP GET queryParameter needs to be added to handle the domainname.</p> <p>Operating System: All<br/> Platform: All</p> AAA-55

AuthN fails for users that aren't granted permission with default sdn domain

Bug Resolved Done Ryan Goulding Ryan Goulding Wed, 22 Jul 2015 21:01:22 +0000 Thu, 21 Mar 2019 11:56:42 +0000 Thu, 12 Nov 2015 16:56:10 +0000 General 0 0 <p>This is a real problem in Helium and Lithium, but depending on what we do in Be we might not want to address this. I am fairly confident that no one was using anything other than the default "sdn" domain since grant creation was broken until recently, and grants for non-"sdn" domains could not be created. We will have to figure out how we want to address this considering the work going into changing the authentication data model, and including domain as part of the user record directly (no FK).</p> <p>Fixed in Be by requiring Domain for each user:</p> <p><a href="https://git.opendaylight.org/gerrit/#/c/26887/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/26887/</a></p> <p>Fixed in Be by requiring Domain for each user:</p> <p><a href="https://git.opendaylight.org/gerrit/#/c/26887/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/26887/</a></p> Development External issue ID 4042 External issue URL Rank 0|i023tj: