Site Search - Liferay Learn

After performing a security configuration, our users can no longer add Categories in Web Content

Issue After applying the workaround indicated in this Security Advisory LSV-545: Unauthenticated Remote code execution via JSONWS (CVE-2020-7961), every client-side web service call to the JSONWS-API is failing: json.web.service.enabled=false This does not allow users to set Tags,...

Disable Email Verification in DXP 7.3

legacy How To

Issue In DXP 7.3, new users have to verify their email address in their initial login. I want to disable this verification requirement. Environment DXP 7.3 Resolution In DXP 7.3, the default value for company.security.strangers.verify= has been changed to true. Set it back to...

Got the error "saml-hook.war does not support this version of Liferay" after deploying the Liferay Connector to SAML 2.0 lpkg

legacy Troubleshooting

Issue Got the error saml-hook.war does not support this version of Liferay in log after deploying the SAML 2.0 lpkg (version 6.0.0) on DXP 7.1 fix pack dxp-18 Environment Liferay DXP 7.1 Resolution The root cause for this error is that the incorrect SAML 2.0 lpkg version was deployed. To...

SAML Authentication Issue: Message context was not authenticated

legacy Troubleshooting

Issue After enabling the SAML, when the user is trying to log in, authentication failed with the following message. ERROR [http-nio-8080-exec-36][BaseSamlStrutsAction:59] org.opensaml.messaging.handler.MessageHandlerException: Message context was not authenticated Caused by:...

DNSName components must begin with a letter error while starting LDAP server in Apache DS

legacy Troubleshooting

Issue During the configuration of Apache DS I encountered an issue that resulted in an IOException that interfered with starting the LDAP server: ERROR [org.apache.directory.server.wrapper.ApacheDsTanukiWrapper] - Failed to start the service....

Landing page redirection is not working after SAML configuration

legacy Troubleshooting

Issue Once the SAML is configured the Landing Page redirection is not redirecting to the desired page. Environment Liferay DXP 7.1 Resolution The pre and post-login actions (like DefaultLandingPage actions) are not compatible with AutoLogin solutions (like SAML). These pre and post-login...

Can we set different instance configurations on sites?

legacy

Issue Can we have different instance level settings like One-Time-Password or Multi-Factor Authentication configurations applied on different sites in the same virtual instance? Environment DXP 7.3+ Resolution The configuration of Multi-Factor Authentication and One-Time-Password takes...

How to configure email sender and email logging for Multi-Factor Authentication?

legacy How To

Issue I would like to understand where sender email address for Multi-Factor Authentication comes from. I would like to set the log levels so I can see when emails are sent. Environment Liferay DXP 7.4 Resolution Set up the email's sender: By default, when using Multi-Factor...

Users Fail to Import When First Name is Missing in LDAP

legacy

This article discusses an apparent issue when Liferay Portal will throw a ContactFirstNameException error in the console. This error message appears when the first name is left out if importing a user from an LDAP server. Resolution This behavior is intended for Liferay Portal. Liferay...

LDAP Authentication and User Import/Export

legacy

This article provides an overview of LDAP integration with Liferay DXP 7.0. This content on authentication, user Import/Export, configurations, upgrade considerations and what has changed from previous Liferay Portal versions, is intended to help readers successfully integrate LDAP with...

Configuring Cookies' httpOnly Status

legacy How To

Description By default, the Liferay platform sets all of its cookies to httpOnly true in its portal.properties file (Liferay 6.2 and earlier) or in its system.properties (starting with Liferay 7.0) files. # # HTTP only cookies are not supposed to be exposed to client-side scripting #...

How to configure HTTPS in Tomcat for Liferay DXP 7.3

legacy How To

Introduction Liferay Support does not recommend or endorse specific third-party products over others. Liferay is not responsible for any instructions herein or referenced regarding these products. Any implementation of these principles is the responsibility of the subscriber. This...

FAQ for LDAP on Liferay DXP

legacy

This document has been updated and ported to Liferay Learn and is no longer maintained here. This article documents some of the most frequently asked questions regarding the use of Lightweight Directory Access Protocol (LDAP) to manage users in Liferay DXP. Specifically, the aim of this...

Possible LDAP NullPointerExceptions

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When setting up LDAP in the portal-ext.properties, NullPointerException errors may be thrown if settings are not...

Configuring reCAPTCHA v2 in Liferay Portal 6.2 EE

legacy How To

This article outlines how to configure reCAPTCHA version 2 in Liferay Portal 6.2. Google is sunsetting reCAPTCHA v1 and as of March 2018 all v1 API calls will no longer work. In response to this "End of Life" announcement, Liferay Portal 6.2 EE has been updated in LPS-55941 (LPE-16253)...

NTLM Browser Support

legacy

Affected Versions Liferay DXP 7.1 Liferay DXP 7.0 Liferay Portal 6.2 EE Liferay Portal 6.1 EE Integrating NTLM with Liferay products should only be done with Internet Explorer for these affected versions due to security vulnerabilities. Microsoft has not made any updates to NTLM with the...

Customer and Deployment Impact of Disabling TLS 1.0 for Inbound Traffic on Liferay Services

legacy

Due to vulnerabilities in the Transport Layer Security v1.0, Liferay has disabled TLS 1.0 for inbound secure connections on all systems and services on January 11, 2019. We previously announced in November 2018 that Liferay will be disabling TLS 1.0 for inbound secure connections on all...

Authentication Error When Logging In With Google Account

legacy Troubleshooting

This article documents an authentication error when attempting to log in to the portal instance using a google account. Listed below are the steps to resolve the issue or avoid it altogether. Resolution Error: redirect_uri_mismatch Summary: After the user has been authenticated with...

AntiSamy Portlet Removes HTML Target Attributes

legacy How To

The AntiSamy portlet is meant to prevent XSS type attacks. One side effect however is that if an HTML target is used, then the portlet will remove it upon publishing the content. Steps to Reproduce Create Web Content Embed a link with a target of _blank For example:link2 Publish the...

Setup Guide for Liferay and WSO2 Identity Server SAML Integration

legacy How To

This guide shows you how to integrate Liferay Portal with WSO2's Identity Server. These are the basic settings with the goal of setting the user on the right track. Resolution Install, Start and Setup WSO2 Download the binary package here: WSO2 Identity Server. You will need to register...

Signing into Liferay Using NTLM Before the User is Imported From LDAP Causes Error

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When signing into Liferay portal through the use of LDAP and NTLM, if the user credentials are not already...

SAML Plugin Throws NPE When Trying to Access Metadata

legacy Troubleshooting

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. With "liferay-fix-pack-plugin-deployment-1-6120.zip" installed an error occurs while trying to access...

Providing User Data in SAML AuthnResponse Packets

legacy How To

SAML communication occurs via request and response packets between an identity provider and a service provider. This article addresses how to provide user data within the response packets. The configuration will be done through portal-ext.properties. Affected Products Liferay Connector...

Performance Issue With LDAP Imports When Using Oracle Database

legacy Troubleshooting

This article is regarding a performance issue that may surface when executing an LDAP import using the UserGroup method for a large amount of users. Specifically, the issue is that the import process could take longer than expected. The cause of this issue is that the SQL query ("SELECT...

JSON Authentication for Custom Portlets

legacy Troubleshooting

Liferay will support our API and resolve any issues and answer any questions having to do with the API itself or any other part of Liferay's software. Issues and questions regarding custom development may be handled by our Global Services team or by the developer of those customizations....

Errors Exporting Password to LDAP

legacy Troubleshooting

The fix on LPS-55208 modifies LDAPUserExporterImpl (PortalLDAPExporterImpl in Portal 6.2 EE) in a way that the user is only exported to LDAP when the user's modifiedDate field changed. When you change the password for a user only, then the call stack is a bit different and the user...

Importing Contact and Custom Field Mappings From LDAP

legacy How To

In some environments it may be desirable to import a user's contact information from an LDAP server. This article explains how to import custom mappings as well as contact mappings from a Microsoft Active Directory LDAP server using the following properties: ldap.contact.mappings.0=...

Disabling the Change Password Request When Users First Log In to Liferay

legacy How To

When a user first logs in to the Liferay Portal 6.1 EE, they are immediately prompted to change their password. Resolution While this request is the default setting, the setting can be changed via the control panel. Navigate to Control Panel > Password Policies In the Default Password...

Is Liferay Product affected by OpenSSL security issue CVE-2020-1967 ?

legacy

Issue Is Liferay Product affected by OpenSSL security issue CVE-2020-1967 ? Environment Liferay DXP 7.1 Resolution Since Liferay products do not come with OpenSSL built-in, Liferay is not affected by CVE-2020-1967 out of the box. If you have implemented OpenSSL into your project, your...

No administrative options can be accessed when an F5 load balancer is in front of Liferay forcing a secure protocol

legacy Troubleshooting

Issue When a F5 load balancer is in front of Liferay and is forcing a secure protocol, no administrative options can be selected and accessed. On Liferay the following options are configured on the portal-ext.properties web.server.https.port = 443 web.server.host = [A host is specified...

Liferay redirects to iframe source URL upon logging in

legacy Troubleshooting

Issue After adding an Iframe to a Liferay page and set the Source URL of that Iframe to e.g. /web/guest/page2, Liferay will redirect to /web/guest/page2 when logging in through the Welcome homepage. Environment Liferay Portal 6.2 Liferay DXP 7.0+ Resolution The above has to be considered...

When authorizing OAuth2 applications HTTP is used instead of HTTPS

legacy Troubleshooting

Issue If there's a web server in front of Liferay, when clicking on the Authorize button to authorize OAuth2 applications HTTP is used instead of HTTPS and the following WARNs are displayed in the log. 2019-11-08 09:37:05.000 WARN [http-nio-8080-exec-63][AbstractOAuthService:88] Unsecure...

Is it possible to set different Authentication methods for different sites in the same portal instance

legacy

Issue Is it possible to set different Authentication methods for different sites in the same portal instance? Environment Liferay DXP 7.2 Resolution Currently, it is not possible to use different authentication methods for different Sites in one Portal Instance on Liferay DXP 7.2. The...

LDAP server is unreachable when "Required" option is enabled

legacy Troubleshooting

Issue For any virtual instances apart from a default instance, if the "Required" option in LDAP is enabled, only LDAP users can log in to the portal. When the LDAP server is down/unreachable, none of the users able to log in. In that case, how to login to the portal to make the changes...

Why the error "Failed to bind to the LDAP server with userDN" is thrown in the logs

legacy Troubleshooting

Issue What is the reason behind the following error which is thrown in the logs? [LDAPAuth:198] Failed to bind to the LDAP server with userDN CN=VERMA BRIJESH KUMAR (MR.),OU=USERS,OU=RND,DC=DS,DC=INDIANOIL,DC=IN and password Me4Sharom@15012020 javax.naming.AuthenticationException: [LDAP:...

Why can't I see the name of the resource in the Audit app?

legacy

Issue I am an Administrator in Liferay DXP Someone deleted an asset (for example an Organization) I check the events in the Audit app (Control Panel > Configuration > Audit) I open the delete event I can only see the Resource ID of the Organization but not its name Since it was removed...

Impact of Google Chrome 80 and changes in the default behavior of the SameSite cookie setting on SAML

legacy Troubleshooting

Issue Updated (May 31, 2021): The behavior is enabled by default since Chrome 84. Updated (April 3, 2020): Chrome is Temporarily rolling back SameSite Cookie Changes Updated (June 12, 2020): Added information about the fixed versions of the SAML 2.0 connector. With the release of Chrome...

Why certain Security Headers are not included in the HTTP Request and Response of Liferay DXP

legacy

Issue The following headers are missing in Liferay: Missing ”X-Content-Type-Options” header Missing ”X-XSS Protection” header Missing ”X-Frame-Options” header Missing ”Content-Security-Policy” header Missing ”Strict-Transport-Security” header Missing cross-origin resource...

Encryption keys can be used at Liferay

legacy How To

Issue How to disable/stop using DES as it possesses Security Threat. Environment Liferay DXP 7.0 Resolution Encryption keys can be used at Liferay end are: # For more details about encryption keys, see the Java Cryptography # Extension documentation. # ...

Can SAML or LDAP be accessed via Liferay APIs?

legacy

Issue We would like to remotely configure SAML and/or LDAP authentication using Liferay APIs. Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP 7.2 Resolution Neither SAML or LDAP APIs are publicly exposed so it is not possible to remotely configure them via APIs. Additional...

Configuring Liferay to display CAPTCHA's with numbers only - 7.2

Issue Configuring Liferay to display CAPTCHA's with numbers only instead of alphanumeric characters. Environment This issue affects Liferay 7.2 Resolution While the default CAPTCHAs in Liferay generated by SimpleCaptcha contain alphanumeric combinations it is possible to configure them...

Will Liferay DXP 7.1 support X-Frame-Options, X-XSS-Protection, X-Content-Type-Options headers?

legacy How To

Issue Will Liferay DXP 7.1 support X-Frame-Options, X-XSS-Protection, X-Content-Type-Options headers? If yes, how to enable the same. Environment Liferay DXP 7.1 Resolution Liferay DXP 7.1 is already secured with the following headers and it is enabled by default. These values are found...

Security Vulnerability: Remote-Code-Execution (RCE) With ImageMagick

legacy Troubleshooting

Issue Symptom: CVE-2016-3714 - Insufficient shell characters filtering leads to potentially remote-code-execution vulnerability in ImageMagick. Environment ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 Resolution Liferay does not endorse or support any specific third-party...

Import nested groups and users from Microsoft Active Directory

legacy How To

Issue What configuration is needed in Liferay so that the nested groups and the users are imported from AD? Environment DXP 7.2 DXP 7.1 DXP 7.0 Resolution Change the User attribute of the Group Mapping in the LDAP server configuration page to member:1.2.840.113556.1.4.1941:. Additional...

Users are being logged in as some other user

legacy Troubleshooting

Issue When any user logs into the portal, they see the user profile of another user instead of seeing their own profile. Environment Liferay DXP 7.0 Resolution There are usually two root causes for the reported behavior: 1. Session ID conflict, and 2. Incorrect cache configuration....

Liferay's OpenID Connect implementation and Single Logout

legacy

Issue Does Liferay's OpenID Connect implementation support Single Logout? Environment Liferay DXP 7.1/7.2 Resolution Liferay's current OpenID Connect (OIDC) integration only implements parts of the Final specifications, specifically "Core" and "Discovery". While single-logout (SLO)...

Using one user's JSessionID any logged in user can access the respective user's session

legacy

Issue One user's session is accessed by knowing the respective user's JSessionID. Steps for reference: 1) 2 users (say: User A and User B) 2) User "A" logs-in to the system 3) Now, user "A" has one Jession ID(0D13262EDECBA19E93D5A753FC34E03A) and shares his JSessionID to user "B" 4)...

When SAML is enabled, logging out from particular Site should stay at the respective site itself

legacy

Issue When SAML is enabled, logging out from "SITE A" is not redirecting/stays at the respective site's home page itself. Environment Liferay DXP 7.1 SAML plugin Resolution The ideal scenario is authentication functions at the entire portal level and not at the site level due to which...

LDAP users are unable to log in

legacy Troubleshooting

Issue Users who are present in LDAP are unable to perform login into Liferay and the below error was observed at the server console. ERROR [liferay/scheduler_dispatch-4][PortalLDAPImporterImpl:717] Unable to import user CN=abdulfar: null:null:{samaccountname=sAMAccountName: abdulfar}...

Does Liferay DXP 7.1 support HTTP headers?

legacy

Issue Does Liferay DXP 7.1 support the following HTTP headers: "X-Frame-Options", "X-XSS-Protection" and "X-Content-Type-Options"? If not, what changes have to be done from the application side to enable the same Environment Liferay DXP 7.1 Resolution Liferay portal is already secured...

TLS v1.2 in Liferay DXP 7.1

legacy

Issue Due to some security vulnerable in TLS v1.0, it should be upgraded to TLS v1.2. 1. Does Liferay DXP 7.1 support TLS v1.2? 2. If it supports, then how to use/upgrade the same in Liferay DXP 7.1? Environment Liferay DXP 7.1 Resolution Liferay 7.1 supports TLS v1.2 as it requires...

Unable to import LDAP telephoneNumber into Liferay phone in the Contact page

legacy Troubleshooting

Issue Unable to import LDAP telephoneNumber (in Microsoft Active Directory) into Liferay Contact Information -> Phone Numbers on the Contact page. Environment Liferay DXP 7.1 Resolution Only attributes listed in ContactModel.java can be imported through LDAP "contact mapping". Since...

Https Access Portal Problems

legacy Troubleshooting

Issue When users are trying to access to portal using https protocol, portal is redirecting to http protocol and pages are not showed right. Https protocol was configured in load balancers and application servers but not in Liferay portal. Environment Liferay DXP 7.1 Application server:...

NTLM authenticate failed due to " Logon failure: unknown user name or bad password error "

legacy Troubleshooting

Issue Users are unable to login through NTML due to the following WARN: 2019-08-29 05:55:28.671 WARN [http-nio-8080-exec-5][Netlogon:104] Unable to authenticate user emma: Logon failure: unknown user name or bad password. Environment Liferay DXP 7.0 Liferay DXP 7.1 Resolution The error...

Password is visible as a plain text in the user's browser console

legacy

Issue When a user tries to log in to Liferay via Liferay's default Sign-In portlet, the user's password shows in the browser console as a plain text. Environment Liferay DXP 7.0-7.4 Resolution This is not a Liferay issue. When submitting the login credentials in the browser, the browser...

SAML SLO is not working when using two Liferay servers in my machine

legacy Troubleshooting

Issue We configured 2 Liferay Servers in my machine, one as Service Provider and the other as Identity Provider. We managed to perform the login through IdP. The issue happens when we try to logout the user in SP. Environment Liferay DXP 7.0, Liferay DXP 7.1 Resolution If IdP and SP use...

How to add security, authentication to my REST service?

legacy How To

Issue We developed a REST service and it works. But we need endpoint security. At the moment it is available without any credentials. We do not want to give access to a REST Web service without credentials. How can we force user to send credentials (Basic Auth is ok) to call our service...

LDAP settings and upgrading from 5.2.x to 6.x

legacy Troubleshooting

This article pertains to portals in which LDAP is configured in Liferay Portal 5.2.x and an upgrade is performed. When a user attempts to login, an error is thrown, and the user is not authenticated. 18:44:06,854 ERROR [LDAPAuth:321] Problem accessing LDAP server...

Troubleshooting Missing OpenID Connect Login Option and OIDC "not requested or was removed" Errors

Issue The OpenID Connect option doesn’t appear in the Sign In (login) portlet; or, starting OIDC returns an “OpenID Connect was not requested or was removed” error. Environment Liferay DXP Quarterly Release: 2024.Q1+ Resolution If the Open ID connect button is not displayed in the login...

How to add a certificate in Cacerts file in PaaS

How To

Issue What is the best way to add a new certificate for the Cacerts file to trust the response of a consumed API in Liferay Cloud (PaaS)? Environment Liferay DXP 7.4+ Resolution To ensure your security settings survive a reboot, the best approach is to move the certificates out of...

Search Results