Site Search - Liferay Learn

SAML changes post upgrade from DXP 7.0 to higher version

Issue SAML authentication is being used in DXP 7.0. After upgrading the DXP 7.0 to any higher version, how to configure SAML in the upgraded environment? Environment Liferay DXP 7.1 Liferay DXP 7.2...

Add custom certificate in SAML configuration

legacy How To

Issue As part of the SAML configuration, it is possible to generate a Certificate and a Private Key. This generates both a self-signed key and a container storekey (in $LIFERAY_HOME/data/keystore.jks by default)....

SAML no longer working after upgrading Liferay

legacy Troubleshooting

Issue After upgrading Liferay from Liferay DXP 7.0 to Liferay DXP 7.2, SAML is no longer working and users are no longer able to authenticate using SAML. It is possible that the following error will also appear in the...

How to resolve "User 'x' must have 'y' permission" errors encountered while performing staging publication processes

legacy Troubleshooting

Issue Our team would like our staging managers to not be administrators, so we are only providing them with select permissions. However, publication attempts encounter errors such as: ERROR...

Commerce modules fail to deploy due following license expiration

legacy Troubleshooting

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue There has been a documented case where Commerce modules fail to...

Sensitive Information disclosed via Application Status 400 Error

legacy Troubleshooting

Issue Application Server errors at times may identify software, software versioning and hint at how user input is processed. This sample trace to demonstrate was triggered by having invalid characters (namely a set...

Users without Admin role cannot initiate SSO on the SP when using expando fields

legacy Troubleshooting

Issue When using expando field as "Name Identifier Attribute Name=expando:concurid", user without Administrator role can not initiate SSO. Steps to reproduce: On IdP end Add a custom field 'field1' for user. Go to SAML...

After performing a security configuration, our users can no longer add Categories in Web Content

legacy

Issue After applying the workaround indicated in this Security Advisory LSV-545: Unauthenticated Remote code execution via JSONWS (CVE-2020-7961), every client-side web service call to the JSONWS-API is failing:...

Disable Email Verification in DXP 7.3

legacy How To

Issue In DXP 7.3, new users have to verify their email address in their initial login. I want to disable this verification requirement. Environment DXP 7.3 Resolution In DXP 7.3, the default value for...

Got the error "saml-hook.war does not support this version of Liferay" after deploying the Liferay Connector to SAML 2.0 lpkg

legacy Troubleshooting

Issue Got the error saml-hook.war does not support this version of Liferay in log after deploying the SAML 2.0 lpkg (version 6.0.0) on DXP 7.1 fix pack dxp-18 Environment Liferay DXP 7.1 Resolution The root cause for...

SAML Authentication Issue: Message context was not authenticated

legacy Troubleshooting

Issue After enabling the SAML, when the user is trying to log in, authentication failed with the following message. ERROR [http-nio-8080-exec-36][BaseSamlStrutsAction:59]...

Landing page redirection is not working after SAML configuration

legacy Troubleshooting

Issue Once the SAML is configured the Landing Page redirection is not redirecting to the desired page. Environment Liferay DXP 7.1 Resolution The pre and post-login actions (like DefaultLandingPage actions) are not...

DNSName components must begin with a letter error while starting LDAP server in Apache DS

legacy Troubleshooting

Issue During the configuration of Apache DS I encountered an issue that resulted in an IOException that interfered with starting the LDAP server:...

How to resolve a "Failed to define class from Service Module Loader" error

legacy Troubleshooting

Issue Upon installation of security-hotfix-lsv-45 in Liferay Portal bundled with JBoss, a "Failed to define class" error is generated in the Liferay logs. Failed to define class...

Couldn't retrieve remote JWK set: Server returned HTTP response code: 401 error occurs when using OpenID Connect authentication with Oracle Identity Cloud Service

legacy Troubleshooting

Environment Liferay DXP 7.0-7.3 Oracle Identity Cloud Service OpenID Connect authentication enabled Symptom When OpenID Connect authentication is enabled in Liferay DXP and Oracle Identity Cloud Service (IDCS) is the...

HTTP 400 response code shows sensitive data

legacy Troubleshooting

Issue Sensitive system information may be seen in HTTP 400 - Bad Response status Environment DXP 7.0 DXP 7.1 DXP 7.2 Resolution The HyperText Transfer Protocol (HTTP) 400 Bad Request response status code...

LDAP Performance Issues after upgrading from 6.2 to 7.2

legacy Troubleshooting

Issue Seeing some slowness authenticating with LDAP after upgrading from 6.2 to 7.2. Environment DXP 7.2 [Upgraded from 6.2] Resolution Install Fix Pack 9 or a hotfix that includes LPS-122832 and run the upgrade process...

Denied resolving class [...] error is shown in custom FreeMarker/Velocity templates (LSV-658)

legacy Troubleshooting

Issue Custom FreeMarker and Velocity templates generate the following error after installing a fix pack: Denied resolving class [...] by org.apache Environment Liferay DXP 7.0 FP92+ Liferay DXP 7.1...

SAML Plugin Throws NPE When Trying to Access Metadata

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. With...

Performance Issue With LDAP Imports When Using Oracle Database

legacy Troubleshooting

This article is regarding a performance issue that may surface when executing an LDAP import using the UserGroup method for a large amount of users. Specifically, the issue is that the...

Signing into Liferay Using NTLM Before the User is Imported From LDAP Causes Error

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When...

Providing User Data in SAML AuthnResponse Packets

legacy How To

SAML communication occurs via request and response packets between an identity provider and a service provider. This article addresses how to provide user data within the response...

JSON Authentication for Custom Portlets

legacy Troubleshooting

Liferay will support our API and resolve any issues and answer any questions having to do with the API itself or any other part of Liferay's software. Issues and questions regarding custom development may be handled by...

Errors Exporting Password to LDAP

legacy Troubleshooting

The fix on LPS-55208 modifies LDAPUserExporterImpl (PortalLDAPExporterImpl in Portal 6.2 EE) in a way that the user is only exported to LDAP when the user's modifiedDate field changed....

Importing Contact and Custom Field Mappings From LDAP

legacy How To

In some environments it may be desirable to import a user's contact information from an LDAP server. This article explains how to import custom mappings as well as contact mappings from a Microsoft Active Directory...

Disabling the Change Password Request When Users First Log In to Liferay

legacy How To

When a user first logs in to the Liferay Portal 6.1 EE, they are immediately prompted to change their password. Resolution While this request is the default setting, the setting can be...

Virtual LDAP Server Plugin Setup

legacy How To

The following article gives a basic use case for Liferay's Virtual LDAP Server Plugin. Liferay's EE Virtual LDAP plugin turns Liferay portal into a virtual LDAP server that can be accessed by external LDAP explorer...

User Cannot Log In to Sync Client When SAML SSO and OAuth Are Enabled

legacy Troubleshooting

This article documents a known issue where users cannot log in to the Sync Client if both SAML and OAuth are enabled. As a result, authentication fails with a blank screen on Sync client. Repeated warning messages will print...

Receiving Mixed Mode Warning when ReCaptcha is enabled on site with HTTPS

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. The...

False Security Issue in FCKEditor and Liferay 6.x Reported as CVE-2018-10795

legacy

Recently, a security vulnerability was filed in Mitre under CVE-2018-10795 reporting an issue in FCKEditor and Liferay Portal 6.x versions. Resolution Liferay disputed this issue because file upload is an expected...

Quick Start Guide to SAML on Liferay Portal 6.1 EE GA2

legacy How To

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. SAML (Security Assertion Markup Language) is...

Implementing NTLM Seamless Login

legacy How To

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. After successfully configuring Liferay...

How Password Policies are Applied in Liferay

legacy

This article describes several cases in which a user can receive a password policy. Resolution Here are several use-cases outlining how password policies are applied in Liferay Portal. Case 1 When a user and all...

LDAP Frequently Asked Questions

legacy

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. As many Liferay subscribers use...

List of Cookies That Are Affected at Liferay Login

legacy How To

In compliance to the European Union Cookie Directive, please see the following articles in reference to cookies that Liferay has set upon at login. Resolution How HTTP Cookies are...

Setting Up OpenAM With Liferay Portal 6 on Tomcat

legacy How To

Liferay Support does not recommend or endorse specific third-party products over others. Liferay is not responsible for any instructions herein or referenced regarding these products. Any implementation of these...

Setting Up NTLM With Liferay

legacy How To

NTLM (NT Lan Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users. When Liferay Portal is successfully integrated with NTLM, Active Directory users...

Setting Up Liferay Portal with Active Directory Server

legacy How To

The details of this article may also be covered in Configuring Liferay's LDAP Settings to Import Users. This article provides a comprehensive walkthrough for integrating an Active Directory Server with Liferay...

Using Liferay Connector to OAuth 2.0 in Liferay DXP 7.1

legacy How To

What is OAuth? It is a utility that authorizes third party applications to interact with the Liferay platform. The OAuth example from our official documentation is worth repeating here; users can make Twitter or...

LSV-391: Security Advisory for Vulnerability With Pingback in Blogs

legacy How To

This advisory comes in response to the recent public announcement of a potential Server-Side Request Forgery (SSRF) vulnerability in Liferay Portal 7.0.4. The report talks about a perceived vulnerability for the...

Search Results