Regresar
-
Título
Different messages are displayed in the UI when different authentication methods fail -
Descripción
Different messages are displayed in the UI when different authentication methods fail (possibly giving information on what authentication variables are being used)
Local Authentication:
When authenticating via the Local authentication method, if an incorrect username or incorrect password are entered, the message displayed is “Access denied.” That is all.
AD Authentication:
When authenticating with Active Directory as the authentication method, two different messages are displayed:
Correct username, Incorrect password. Message displays: Incorrect password.
Incorrect username, correct/incorrect password. Message displays: Unknown sAMAccountName.
-
Resolución
Resolution:
1. Go to https://<SPP-host>/service/core/swagger/index.html
2. Click authorize and go through the authentication process
3. Go to Settings – PUT /v4/Settings/{id}
4. Enter the following ID: Show Friendly Authentication Error Messages
5. Request body:{ "Name": "Show Friendly Authentication Error Messages", "Category": "Authentication", "Value": "0", "DefaultValue": "1", "MinValue": 0, "MaxValue": 1, "Options": [] }
6. Click Execute
Changing the "Value" to "0" will result in all messages displayed being "Invalid Credentials"