Search Results

What is OAuth? It is a utility that authorizes third party applications to interact with the Liferay platform. The OAuth example from our official documentation is worth repeating here; users can make Twitter or Facebook available on Liferay Portal or DXP. Instead of entering your...

Note: This article is no longer maintained and is only made available for your reference. All the information in this article can now be found in the Liferay DXP Release Notes. This article documents a list of known issues that exist in Liferay DXP 7.0 Fix Packs and Service Packs. Fix...

When publishing individual pages from a Staging environment to a Live environment, it is possible that upon publication, all pages in the Live environment may reflect changes. If this happens, it is likely the case that Web Content Articles were published incorrectly. Resolution When...

Application Display Templates Table of Contents Introduction to Application Display Templates (ADT) Working with an ADT: Media Gallery Using the API: Creating an ADT for Wiki Exporting / Importing ADTs Known Issues and Troubleshooting Resolution Introduction Application display templates...

Liferay Portal fix packs and hotfixes will often update, not only JSPs, but also classes. In order to ensure that your custom projects continue to use the most up-to-date code, please follow these guidelines Resolution Use the latest Patching Tool found here: Patching Tool download page....

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When there are updates to plugins in the Liferay Marketplace, it is possible to receive on-screen notifications...

In custom environments, it may be necessary to apply custom styles to specific portlets. The example below gives guidance on how to override the Liferay Theme CSS in order to customize portlets to fit requirements. Resolution Affected Products Liferay Portal 6.0 EE SP2 and above Please...

This article documents some of the more complex use cases when granting permissions to a site. Who can be site members? I am having trouble adding user groups to a site; the user groups are not displaying. I don't want site Members to have permissions to add content to a page. How can I...

This advisory comes in response to the recent public announcement of a potential Server-Side Request Forgery (SSRF) vulnerability in Liferay Portal 7.0.4. The report talks about a perceived vulnerability for the pingback functionality in the blogs feature of the product. You can find a...

This article documents how the Web Content Display portlet is designed to display different versions of the same Web Content article. In particular, this article discusses the intended behaviors for expired or those scheduled for future display. Resolution Content creators often create...

This article is intended for legacy versions of Liferay Portal CAPTCHA is an industry standard security measure that requires users to enter what they see a small window as part of the validation process when creating an account. Only human users are able to see the contents. Liferay has...

This article documents a possible known issue where there is ThreadLocal leak shown in the console logs when shutting down the application server: org.apache.catalina.loader.WebappClassLoaderBase.checkThreadLocalMapForLeaks The web application [ROOT] created a ThreadLocal with key of...

When view permissions for guests are unchecked for a portlet, a guest will see the following message in the portlet: You do not have the roles required to access this portlet. While this is one way to handle guests who don't have access to the portlet, it is also possible to hide this...

This article addresses one issue for Active Directory users attempting to log in to the Liferay platform. Liferay is configured for use with an LDAP server (without mapping the "Group" attribute in the User section) LDAP export is enabled LDAP user, "user1" is able to log in to Liferay...

Customers using Tomcat 8.5 and configuring the Liferay platform with URLs that have a leading period (.) may encounter the following error: java.lang.IllegalArgumentException: An invalid domain [.example.com] was specified for this cookie Resolution Please...

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. Ext-plugins were created to replace the extension environment that was used in Liferay 5.2.x EE and previous...

This reference article describes several different ways to embed videos in Web Content Articles in Liferay Digital Experience Platform 7.1+. It is designed to supplement Liferay's Official Documentation on Publishing Web Content and optimizing your content using structures and templates....

This article outlines a practical suggestion for managing the use of categories and vocabularies in a way that prevents publication errors due to dependencies.  Resolution When working within a site, a user may select vocabularies from both the current site as well as the global site....

This article outlines a practical suggestion for performing a page reordering in a staged environment. Following the suggestion below will ensure that pages are reordered without the publish taking an inordinate amount of time.  Resolution When reordering pages within a staged site, a...

QUESTION: How are Liferay Digital Enterprise 7.0 and Liferay Portal affected by the Spring Framework Vulnerabilities: CVE-2018-1270, CVE-2018-1271, and CVE-2018-1272? Resolution Impact to Liferay CVE-2018-1270: Liferay Portal 6.2 and Digital Enterprise 7.0 are not affected because they...

By default, the Liferay platform always uses its own authentication system that checks and validates the user password in its own database. Even if you enable LDAP settings and set it as required, the Liferay platform will always check and validate the user password in its own database...

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. Wiki Permissions can be "layered" because of the multiple permission levels that can go into accessing Wiki...

This article outlines a practical suggestion for avoiding issues when using multiple languages in a site along with the Liferay platform’s staging feature. Following this suggestion will help prevent future staging publication failures.  Resolution When utilizing multiple languages...

By default, Liferay encrypts the passwords that go into the database. The default algorithm is SHA-1 in 6.0 and 6.1 versions, which changed to PBKDF2WithHmacSHA1/160/128000 in version 6.2. The encryption algorithm can be changed and even turned off via the portal-ext.properties. Because...

This article outlines a practical suggestion for keeping data in sync between the staging and live site for portlets that allow changes in both places. Following the workaround will help prevent staging publication errors and failure. Resolution Generally, if staging is enabled for a...

This article describes how numeric screennames can be used in Liferay Portal. Resolution Set the following property to true in the portal-ext.properties file that will override the default functionality of being unable to create numeric screennames. # Set this to true when you want the...

The principles below are adopted from general industry standard patch management best practices. Following these will help mitigate the risk of change on production servers. Awareness Liferay communicates the availability of maintenance updates for Liferay products through Announcements....

In Liferay Portal, after completing a large LDAP import, performance may suffer because Lucene is set to re-index after every change. For example, if there are 15,000 users, Lucene will perform an index after each user is added, which will result in 15,000 index commits. This slows down...

This article describes a fundamental product limitation when pjax is used to render programmatically nested content in Liferay platforms. (Pjax is a jQuery plugin, a standalone JavaScript module that uses AJAX (XmlHttpRequest) and pushState() to deliver a fast browsing experience.) This...

When installing Liferay Digital Experience Platform (DXP) 7.0 or any Liferay Portal version, portal administrators have the option to leverage any of the translations that come with the default installation. This article outlines the best way/s to correct these translations. Resolution...

This article describes how specific LDAP attributes can be ignored during LDAP user import. Sometimes, users may change some information on the Liferay Portal. When the next scheduled LDAP import is executed, it will overwrite the user-made change. To ensure the change is not...

The title of a portlet is determined by the language properties files and may be changed system-wide by using a language ext properties file similar to portal-ext.properties. Resolution To demonstrate how to change the portlet titles, this article we will seek to change the title of...

Through the Blog Portlet, there is a unique functionality where Blog information can be split into different pages. Resolution To achieve this functionality, start by going to the wrench in the portlet and scoping the portlet to the specific page. This would make the scoped portlet...

In most cases, optimizing Lucene is helpful; in larger deployments it is a necessity. This article aims to explain the relevant settings for optimizing Lucene and provide links to further information. It must be mentioned, though, that this service is not supported by Liferay...

When an email notification is sent out, the template for the message may not be referencing the correct port within the URL. For example, the email may show the URL as "http://www.liferay.com:8080" instead of port 80. Resolution To resolve this issue, add the following properties to the...

When using the AIX operating system with Liferay Portal 6.1, a license may fail to deploy, giving the output: License is in use by another instance. Resolution This license issue is due to a known issue with AIX, in which neither ipconfig nor ifconfig will return the mac address for the...

This article documents a known behavior where Message Boards' CKEditor—when configured to HTML—will have text stripped from hyperlinks after a post. This is usually observed after setting the protocol to Other. Resolution This behavior is expected under Liferay DXP's Antisamy...

When searching, guest users are able to see highlighted folders, categories, and threads when they have no permission to view them. Resolution During search, Liferay runs a permission check on each of the results to see if the user that is searching has rights to view the result in...

Activation Key deployment for Liferay Portal versions 5.2.9 (Service Pack 5) to 6.0.x is different from key deployment for Liferay versions 5.2 SP4 and earlier. Activation keys are no longer generated based off the Server ID. Instead, you'll need an .xml key file. This file will be...

CVE-2018-3831 reports that, "Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such...