Bug 51718 - The title of the login page should be configurable via UCR
Summary: The title of the login page should be configurable via UCR
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
Version: UCS 4.4
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 4.4-5-errata
Assignee: Johannes Keiser
QA Contact: Jürn Brodersen
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-07-23 10:59 CEST by Johannes Keiser
Modified: 2020-07-29 17:09 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2020061521000474
Bug group (optional):
Customer ID:
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Keiser univentionstaff 2020-07-23 10:59:06 CEST
The title of the login page ("Login at mydomain") should be configurable via UCR.
Comment 1 Johannes Keiser univentionstaff 2020-07-23 13:59:37 CEST
f6ede8b35a Bug #51718: yaml
8f7df30272 Bug #51718: debian changelog
63d139f3d3 Bug #51718: make the title of the login page configurable

Successful build
Package: univention-management-console
Version: 11.0.4-92A~4.4.0.202007231346
Branch: ucs_4.4-0
Scope: errata4.4-5
Comment 3 Philipp Hahn univentionstaff 2020-07-24 10:54:25 CEST
This were half the failing test today

[4.4-5] ea8fd3a57e Bug #51718: make the title of the login page configurable
 test/ucs-test/tests/03_ucr/63checkucrwarning | 1 +
 1 file changed, 1 insertion(+)
[4.4-5] a0af4db8df Bug #51718: make the title of the login page configurable
 test/ucs-test/debian/changelog | 6 ++++++
 1 file changed, 6 insertions(+)

Package: ucs-test
Version: 9.0.4-16A~4.4.0.202007241051
Branch: ucs_4.4-0
Scope: errata4.4-5
Comment 4 Florian Best univentionstaff 2020-07-28 09:32:46 CEST
Please don't introduce a new meta.json while there is already an existing one, where the data can simply be added.
Comment 5 Florian Best univentionstaff 2020-07-28 09:41:31 CEST
Question: The reason why we make it configurable is that the BSI security guidelines don't want domainnames / fqdns to be exposed?

If yes, then this is still exposed in "/univention/get/meta".
Comment 6 Johannes Keiser univentionstaff 2020-07-28 15:44:14 CEST
(In reply to Florian Best from comment #4)
> Please don't introduce a new meta.json while there is already an existing
> one, where the data can simply be added.

We thought it would be better to not flood the meta.json with information that is only needed for the login page in this case. If that is the point of the meta.json (to be used as a global storage for different pages) then i guess we can change it. Is there another reason to use the 'global' meta.json?


(In reply to Florian Best from comment #5)
> Question: The reason why we make it configurable is that the BSI security
> guidelines don't want domainnames / fqdns to be exposed?
> 
> If yes, then this is still exposed in "/univention/get/meta".

Yes this was communicated and so far this does not seem to be a problem.
That would be a different bug.
Comment 7 Florian Best univentionstaff 2020-07-28 15:49:47 CEST
(In reply to Johannes Keiser from comment #6)
> (In reply to Florian Best from comment #4)
> > Please don't introduce a new meta.json while there is already an existing
> > one, where the data can simply be added.
> 
> We thought it would be better to not flood the meta.json with information
> that is only needed for the login page in this case. If that is the point of
> the meta.json (to be used as a global storage for different pages) then i
> guess we can change it. Is there another reason to use the 'global'
> meta.json?

The existing meta.json contains already data for the login dialog, e.g. login_links.
I would like to eliminate a second unnecessary HTTP request because the old meta.json is also fetched on the login page. And I would like to keep the overview by not having more than 1 place with metadata.

> (In reply to Florian Best from comment #5)
> > Question: The reason why we make it configurable is that the BSI security
> > guidelines don't want domainnames / fqdns to be exposed?
> > 
> > If yes, then this is still exposed in "/univention/get/meta".
> 
> Yes this was communicated and so far this does not seem to be a problem.
> That would be a different bug.

OK. I thought that was solved by a javascript hook.
Comment 8 Johannes Keiser univentionstaff 2020-07-28 16:27:14 CEST
258e1aedbe Bug #51718: yaml                                                                                                                                                                                                                  
e0922e22f0 Bug #51718: debian changelog
9db861dac9 Bug #51718: use existing meta.json

Successful build
Package: univention-management-console
Version: 11.0.4-94A~4.4.0.202007281621
Branch: ucs_4.4-0
Scope: errata4.4-5
Comment 9 Johannes Keiser univentionstaff 2020-07-29 14:52:19 CEST
5adfd744e1 Bug #51718: yaml
b34186f976 Bug #51718: debian changelog
7bd54a200e Bug #51718: fix typo and redundant ucr var
1ae65ffe10 Bug #51718: yaml
f4ccbef6f7 Bug #51718: debian changelog
2e4af36b34 Bug #51718: login title is configurable via ucr

Successful build
Package: univention-management-console
Version: 11.0.4-96A~4.4.0.202007291436
Branch: ucs_4.4-0
Scope: errata4.4-5

Successful build
Package: univention-saml
Version: 6.0.2-46A~4.4.0.202007291436
Branch: ucs_4.4-0
Scope: errata4.4-5
Comment 10 Jürn Brodersen univentionstaff 2020-07-29 14:55:38 CEST
What I tested:
Classic login with and without custom text: OK
SAML login with and without custom text: OK

YAML: OK

-> verified
Comment 12 Florian Best univentionstaff 2020-07-29 17:09:39 CEST
E:0004-12: conffiles/etc/simplesamlphp/univentiontheme/dictionaries/login.translation.json: template file contains variables that are not registered in file entry:
	- domainname
E:0004-12: conffiles/etc/simplesamlphp/univentiontheme/dictionaries/login.definition.json: template file contains variables that are not registered in file entry:
	- domainname

→ In theory this is a REOPEN.