Browse Source

HPCC-19331 Investigate Local security manager support

Local security manager reads from the Linux password file, which is not allowed
unless you are a superuser. This does not make sense, since the HPCC user does
not have those privileges. This PR removes "local" security from the configuration
choices

Signed-off-by: Russ Whitehead <william.whitehead@lexisnexisrisk.com>
Russ Whitehead 6 years ago
parent
commit
2b4671800a

+ 0 - 1
initfiles/componentfiles/configschema/xsd/esp.xsd

@@ -144,7 +144,6 @@
                                 <xs:simpleType>
                                     <xs:restriction base="xs:string">
                                         <xs:enumeration value="none" hpcc:description=""/>
-                                        <xs:enumeration value="local" hpcc:description=""/>
                                         <xs:enumeration value="ldap"
                                                         hpcc:requiredAttributes="ldapServer,ldapAuthMethod,ldapConnections,passwordExpirationWarningDays,checkViewPermissions"
                                                         hpcc:description=""/>

+ 0 - 7
initfiles/componentfiles/configxml/@temp/esp_service.xsl

@@ -173,13 +173,6 @@ xmlns:seisint="http://seisint.com"  xmlns:set="http://exslt.org/sets" exclude-re
                     </xsl:for-each>
                 </Authenticate>
             </xsl:when>
-            <xsl:when test="$authMethod='local'">
-                <Authenticate method="Local">
-                    <xsl:for-each select="$bindingNode/Authenticate[string(@path) != '']">
-                        <Location path="{@path}" resource="{@resource}" required="{@access}" description="{@description}"/>
-                    </xsl:for-each>
-                </Authenticate>
-            </xsl:when>
             <xsl:when test="$authMethod='ldap' or $authMethod='ldaps'">
                 <Authenticate method="LdapSecurity" config="ldapserver">
                     <xsl:copy-of select="$bindingNode/@resourcesBasedn"/>

+ 0 - 7
initfiles/componentfiles/configxml/@temp/esp_service_WsSMC.xsl

@@ -709,13 +709,6 @@ This is required by its binding with ESP service '<xsl:value-of select="$espServ
             </xsl:for-each>
          </Authenticate>
       </xsl:when>
-      <xsl:when test="$authMethod='local'">
-         <Authenticate method="Local">
-            <xsl:for-each select="$bindingNode/Authenticate[string(@path) != '']">
-               <Location path="{@path}" resource="{@resource}" required="{@access}" description="{@description}"/>
-            </xsl:for-each>
-         </Authenticate>
-      </xsl:when>
       <xsl:when test="$authMethod='ldap' or $authMethod='ldaps'">
          <Authenticate method="LdapSecurity" config="ldapserver">
             <xsl:copy-of select="$bindingNode/@resourcesBasedn"/> <!--if binding has an ldap resourcebasedn specified then copy it out -->

+ 0 - 7
initfiles/componentfiles/configxml/@temp/esp_service_wsecl.xsl

@@ -194,13 +194,6 @@
                </xsl:for-each>
             </Authenticate>
          </xsl:when>
-         <xsl:when test="$authMethod='local'">
-            <Authenticate method="Local">
-               <xsl:for-each select="$bindingNode/Authenticate[string(@path) != '']">
-                  <Location path="{@path}" resource="{@resource}" required="{@access}" description="{@description}"/>
-               </xsl:for-each>
-            </Authenticate>
-         </xsl:when>
          <xsl:when test="$authMethod='ldap' or $authMethod='ldaps'">
             <Authenticate method="LdapSecurity" config="ldapserver">
                <xsl:copy-of select="$bindingNode/@resourcesBasedn"/> <!--if binding has an ldap resourcebasedn specified then copy it out -->

+ 0 - 7
initfiles/componentfiles/configxml/@temp/esp_service_wslogging.xsl

@@ -65,13 +65,6 @@ xmlns:seisint="http://seisint.com"  xmlns:set="http://exslt.org/sets" exclude-re
                </xsl:for-each>
             </Authenticate>
          </xsl:when>
-         <xsl:when test="$authMethod='local'">
-            <Authenticate method="Local">
-               <xsl:for-each select="$bindingNode/Authenticate[string(@path) != '']">
-                  <Location path="{@path}" resource="{@resource}" required="{@access}" description="{@description}"/>
-               </xsl:for-each>
-            </Authenticate>
-         </xsl:when>
          <xsl:when test="$authMethod='ldap' or $authMethod='ldaps'">
             <Authenticate method="LdapSecurity" config="ldapserver">
             <xsl:copy-of select="$bindingNode/@resourcesBasedn"/> <!--if binding has an ldap resourcebasedn specified then copy it out -->

+ 0 - 1
initfiles/componentfiles/configxml/esp.xsd.in

@@ -363,7 +363,6 @@
                             <xs:simpleType>
                                 <xs:restriction base="xs:string">
                                     <xs:enumeration value="none"/>
-                                    <xs:enumeration value="local"/>
                                     <xs:enumeration value="userNameOnly"/>
                                     <xs:enumeration value="ldap"/>
                                     <xs:enumeration value="ldaps"/>

+ 0 - 7
initfiles/componentfiles/configxml/esp.xsl

@@ -674,13 +674,6 @@
                  </xsl:for-each>
               </Authenticate>
            </xsl:when>
-           <xsl:when test="$authMethod='local'">
-              <Authenticate method="Local">
-                 <xsl:for-each select="$bindingNode/Authenticate[string(@path) != '']">
-                    <Location path="{@path}" resource="{@resource}" required="{@access}" description="{@description}"/>
-                 </xsl:for-each>
-              </Authenticate>
-           </xsl:when>
            <xsl:when test="$authMethod='ldap' or $authMethod='ldaps'">
               <Authenticate method="LdapSecurity" config="ldapserver">
                  <xsl:copy-of select="$bindingNode/@resourcesBasedn"/>