Search Results

Sort By
Capability
Feature
Deployment Approach
Publishing Individual Pages in a Staging Environment May Publish All Pages
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: When publishing individual pages from a Staging environment to a Live environment, it is possible that upon publication, all pages in the Live environment may reflect changes. If this...
Using Application Display Templates on DXP 7.1
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: Application Display Templates Table of Contents Introduction to Application Display Templates (ADT) Working with an ADT: Media Gallery Using the API: Creating an ADT for Wiki Exporting / Importing ADTs Known Issues and...
Patching Liferay Portal When There Are Custom Apps Installed
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: Liferay Portal fix packs and hotfixes will often update, not only JSPs, but also classes. In order to ensure that your custom projects continue to use the most up-to-date code, please...
Notifications for Updated Versions of Plugins
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When there...
Overriding Liferay's Default CSS for Individual Portlets
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: In custom environments, it may be necessary to apply custom styles to specific portlets. The example below gives guidance on how to override the Liferay Theme CSS in order to customize...
Roles and Permissions FAQ
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This article documents some of the more complex use cases when granting permissions to a site. Who can be site members? I am having trouble adding user groups to a site; the user groups are not displaying. I don't want...
LSV-391: Security Advisory for Vulnerability With Pingback in Blogs
authorEmailAddress: tibor.lipusz@liferay.com, authorName: Tibor Lipusz, content: This advisory comes in response to the recent public announcement of a potential Server-Side Request Forgery (SSRF) vulnerability in Liferay Portal 7.0.4. The report talks about a perceived vulnerability for the...
Managing Expired and Future Scheduled Web Content
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article documents how the Web Content Display portlet is designed to display different versions of the same Web Content article. In particular, this article discusses the intended...
Making Liferay CAPTCHA Easier to Read in Liferay Portal 6.1
authorEmailAddress: ira.chui@liferay.com, authorName: Ira Chui, content: This article is intended for legacy versions of Liferay Portal CAPTCHA is an industry standard security measure that requires users to enter what they see a small window as part of the validation process when creating an...
ThreadLocal Leaking Caused by Usages of Netty in Elasticsearch
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This article documents a possible known issue where there is ThreadLocal leak shown in the console logs when shutting down the application server:...
Hiding Portlets From Guests Who Do Not Have Permission to View It
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: When view permissions for guests are unchecked for a portlet, a guest will see the following message in the portlet: You do not have the roles required to access this portlet. While...
Group mapping required for LDAP export
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article addresses one issue for Active Directory users attempting to log in to the Liferay platform. Liferay is configured for use with an LDAP server (without mapping the "Group"...
Known Issue: Error With URLs Leading With Period (.) in Tomcat 8.5
authorEmailAddress: brian.suh@liferay.com, authorName: Brian Suh, content: Customers using Tomcat 8.5 and configuring the Liferay platform with URLs that have a leading period (.) may encounter the following error: java.lang.IllegalArgumentException: An invalid domain [.example.com] was specified...
Extension Environment Migration Tips
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable....
Embedding Videos in Web Content Articles on DXP 7.1+
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This reference article describes several different ways to embed videos in Web Content Articles in Liferay Digital Experience Platform 7.1+. It is designed to supplement Liferay's Official Documentation on Publishing...
Vocabulary and Category Management for Staging
authorEmailAddress: brett.ripley@liferay.com, authorName: Brett Ripley, content: This article outlines a practical suggestion for managing the use of categories and vocabularies in a way that prevents publication errors due to dependencies.  Resolution When working within a site, a user may...
Page Reordering for Staging
authorEmailAddress: brett.ripley@liferay.com, authorName: Brett Ripley, content: This article outlines a practical suggestion for performing a page reordering in a staged environment. Following the suggestion below will ensure that pages are reordered without the publish taking an inordinate...
Spring Framework Security Vulnerabilities: CVE-2018-1270, CVE-2018-1271, CVE-2018-1272
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: QUESTION: How are Liferay Digital Enterprise 7.0 and Liferay Portal affected by the Spring Framework Vulnerabilities: CVE-2018-1270, CVE-2018-1271, and CVE-2018-1272? Resolution Impact to Liferay CVE-2018-1270: Liferay...
Disabling the Authentication System and Delegating It to an LDAP Server
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: By default, the Liferay platform always uses its own authentication system that checks and validates the user password in its own database. Even if you enable LDAP settings and set it...
Defining Wiki Permissions
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. Wiki...
Using Multiple Languages for Staging
authorEmailAddress: brett.ripley@liferay.com, authorName: Brett Ripley, content: This article outlines a practical suggestion for avoiding issues when using multiple languages in a site along with the Liferay platform’s staging feature. Following this suggestion will help prevent future staging...
Defining Encryption Algorithms for Passwords Stored in the Database
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: By default, Liferay encrypts the passwords that go into the database. The default algorithm is SHA-1 in 6.0 and 6.1 versions, which changed to PBKDF2WithHmacSHA1/160/128000 in version...
Communicate Standard for Using 'Live-Editable' Portlets for Staging
authorEmailAddress: brett.ripley@liferay.com, authorName: Brett Ripley, content: This article outlines a practical suggestion for keeping data in sync between the staging and live site for portlets that allow changes in both places. Following the workaround will help prevent staging publication...
Creating Numeric Screen Names
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article describes how numeric screennames can be used in Liferay Portal. Resolution Set the following property to true in the portal-ext.properties file that will override the...
Patch Management Best Practices
authorEmailAddress: ivan.cheung@liferay.com, authorName: Ivan Cheung, content: The principles below are adopted from general industry standard patch management best practices. Following these will help mitigate the risk of change on production servers. Awareness Liferay communicates the...
Configuring Lucene to Reindex Less Aggressively on Liferay Portal
authorEmailAddress: ira.chui@liferay.com, authorName: Ira Chui, content: In Liferay Portal, after completing a large LDAP import, performance may suffer because Lucene is set to re-index after every change. For example, if there are 15,000 users, Lucene will perform an index after each user is...
Limitations When Using Pjax to Render Embedded Content
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This article describes a fundamental product limitation when pjax is used to render programmatically nested content in Liferay platforms. (Pjax is a jQuery plugin, a standalone JavaScript module that uses AJAX...
Correcting Translations in the Liferay Platform
authorEmailAddress: tibor.jandi@liferay.com, authorName: Tibor Jándi, content: When installing Liferay Digital Experience Platform (DXP) 7.0 or any Liferay Portal version, portal administrators have the option to leverage any of the translations that come with the default installation. This...
Configuring LDAP to Ignore Attributes During the Import Process
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article describes how specific LDAP attributes can be ignored during LDAP user import. Sometimes, users may change some information on the Liferay Portal. When the next scheduled...
Changing the Default Title or Description of a Portlet System-wide
authorEmailAddress: joel.garman@liferay.com, authorName: Joel Garman, content: The title of a portlet is determined by the language properties files and may be changed system-wide by using a language ext properties file similar to portal-ext.properties. Resolution To demonstrate how to change the...
Splitting Blog Information Into Different Pages
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: Through the Blog Portlet, there is a unique functionality where Blog information can be split into different pages. Resolution To achieve this functionality, start by going to the...
Optimizing Lucene
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: In most cases, optimizing Lucene is helpful; in larger deployments it is a necessity. This article aims to explain the relevant settings for optimizing Lucene and provide links to...
Configuring the automatic email notification URLs to display the correct port number
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: When an email notification is sent out, the template for the message may not be referencing the correct port within the URL. For example, the email may show the URL as...
AIX License Deployment Issue
authorEmailAddress: brett.ripley@liferay.com, authorName: Brett Ripley, content: When using the AIX operating system with Liferay Portal 6.1, a license may fail to deploy, giving the output: License is in use by another instance. Resolution This license issue is due to a known issue with AIX, in...
Message Boards Issue When Configuring With HTML and Creating Hyperlinks With the 'Other' Designation
authorEmailAddress: brian.suh@liferay.com, authorName: Brian Suh, content: This article documents a known behavior where Message Boards' CKEditor—when configured to HTML—will have text stripped from hyperlinks after a post. This is usually observed after setting the protocol to Other. Resolution...
Liferay's permissions.inline.sql.check.enabled property
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: When searching, guest users are able to see highlighted folders, categories, and threads when they have no permission to view them. Resolution During search, Liferay runs a permission...
Liferay Portal Activation Key Deployment Instructions for versions 5.2 SP5 to 6.0.X
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: Activation Key deployment for Liferay Portal versions 5.2.9 (Service Pack 5) to 6.0.x is different from key deployment for Liferay versions 5.2 SP4 and earlier. Activation keys are no...
Elasticsearch and Liferay Enterprise Search Security Advisory: CVE-2018-3831
authorEmailAddress: tibor.lipusz@liferay.com, authorName: Tibor Lipusz, content: CVE-2018-3831 reports that, "Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings...
Excluding User Groups Not Part of the BaseDN In LDAP Import
authorEmailAddress: christopher.lui@liferay.com, authorName: Christopher Lui, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. In older versions of Liferay Portal...
Apache Struts 2 Vulnerability: CVE-2017-9805 and CVE-2017-12611 - REST XStream FreeMarker
authorEmailAddress: tibor.lipusz@liferay.com, authorName: Tibor Lipusz, content: The following Common Vulnerabilities and Exposures (CVE) have been reported for Apache Struts 2: CVE-2017-9805 CVE-2017-12611 CVE-2018-1327 - REST XStream FreeMarker CVE-2018-11776 How are Liferay DXP (both 7.0 and...
JSESSIONID Changes as Part of Liferay Security
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This article documents Liferay's position regarding the Session Identifier (JSESSIONID), including how and why a new JSESSIONID is generated.  Resolution Customers doing their own security scan of the Liferay platform...
Java NPEs in the Console When Refreshing the CAPTCHA Image
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This article documents a known issue where refreshing the CAPTCHA image causes a Java NullPointerException (NPE) to be triggered. Please note that the CAPTCHA image will still be refreshed. Steps to Reproduce Start the...
Open LDAP setup guide
authorEmailAddress: brian.suh@liferay.com, authorName: Brian Suh, content: Liferay Support does not recommend or endorse specific third-party products over others. Liferay is not responsible for any instructions herein or referenced regarding these products. Any implementation of these principles...
Cookies Issue Related to Two-Character Domain Names While Using Internet Explorer
authorEmailAddress: brian.suh@liferay.com, authorName: Brian Suh, content: This article documents an issue that has been reported by some users working on Liferay Digital Experience Platform (DXP). It is a cookies issue that has been reported, and the issue arises when using certain versions of...
Using the 'getOriginalServlet' Function to Retrieve the Default Query String in DXP 7.0
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This article serves as a reference guide on how to use the getOriginalServletRequest function to get the default queryString when using the OSGi framework. Developers familiar with Liferay Portal 6.2 EE and now using...
WeDeploy Auth Admin Portlet in Liferay DXP 7.0 Fix Packs
authorEmailAddress: nicole.mak@liferay.com, authorName: Nicole Mak, content: When deploying Liferay DXP 7.0 Fix Pack 24, 25, 26 or 27, the WeDeploy Auth Admin portlet will appear in the Control Panel. WeDeploy is currently a beta product. The addition of this portlet will have no impact or...
Configuring Theme-Embedded Portlets After Deploying Security-Hotfix-11-6012
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable....
Changes in Wiki Syntax Parsing from 6.0 EE SP1 to 6.0 EE SP2
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: In Liferay Portal 6.0 EE SP2, a new Creole parser for the Wiki portlet has been implemented and changed how links are parsed. For example, previously in 6.0 EE SP1, links using single...
Liferay DXP 7.1 Known Issues
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: For customers working on Liferay DXP 7.1, the following table has been formed to serve you and provide current information regarding known issues that have been discovered, reported,...
Liferay DXP 7.0 Known Issues
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: For customers working on Liferay DXP 7.0, the following table has been formed to serve you and provide current information regarding known issues that have been discovered, reported, or resolved. Please be sure to...
Avoiding Authentication Errors With IE8 and IE9
authorEmailAddress: jonas.choi@liferay.com, authorName: Jonas Choi, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When a session of Liferay times-out, an...
User Interface Changes in DXP 7.0
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article highlights several changes to front-end tools and features with User Interface for Liferay DXP 7.0. Resolution Here are some highlighted changes followed by brief...
Buttons missing from CKEditor when using Internet Explorer 8
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. While...
Things You Should Know Before Using Liferay WYSIWYG Portlet
authorEmailAddress: brian.suh@liferay.com, authorName: Brian Suh, content: The Liferay WYSIWYG portlet allows for WYSIWYG editing capabilities in a very simplified package. While the lightweight nature of the Liferay WYSIWYG portlet can be useful, Liferay Marketplace indicates that the...
Applying Security Update 2012-05-25 requires Tunnel-web
authorEmailAddress: jira_integration_6b0c73@jira.zendesk-integrations.com, authorName: Liferay Support, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When...
SAML Comprehensive Quick Start Guide for Liferay Portal
authorEmailAddress: justin.choi@liferay.com, authorName: Justin Choi, content: This is a comprehensive article that documents the steps for how to set up SAML on Liferay Portal 6.2 EE. In addition, this article covers the different ways that SAML can be implemented and utilized. SAML (Security...
Unable to add portlets in Nested Portlet
authorEmailAddress: alexander.chau@liferay.com, authorName: Alex Chau, content: Issue When using the "Nested Portlets" portlet, one possibility is that portlets cannot be nested because the Nested Portlets portlet is collapsed. Resolution Ensure Nested Portlets is not collapsed when attempting to...
Minification May No Longer Work if JS Code Contains eval() or with() on DXP 7.0
authorEmailAddress: alfonso.crisci@liferay.com, authorName: Alfonso Crisci, content: This article serves as a reference concerning an intended change in the minification process which might break some JavaScript code. After upgrading from Liferay Portal 6.2 to Liferay DXP 7.0, any JavaScript code...
LiferayPortletURLs Generated For a .War File Do Not Have Authentication Token
authorEmailAddress: brett.ripley@liferay.com, authorName: Brett Ripley, content: This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. Subscribers often develop custom portlets...
Kaleo Workflow Changes for DXP 7.0
authorEmailAddress: vincent.liu@liferay.com, authorName: Vincent Liu, content: This article documents the Kaleo workflow changes that have taken place in Liferay Digital Experience Platform. In DXP, there are some Kaleo Workflow related user experience changes happening surrounding Web Content....