-
- Service Provider
- Posts: 326
- Liked: 78 times
- Joined: Mar 16, 2015 4:00 pm
- Full Name: David Rubin
- Contact:
Self-Service portal URL now case-sensitive
The vCloud Self-Service portal (within Enterprise Manager) is a highly-used component in our backup offering to our customers. When we updated the BEM components to Update 4, a change was made to the functionality of the site so that customer names must be entered exactly as they exist within vCloud.
Example:
Customer name (as it appears within vCloud): ContosoCorp
Acceptable URL in pre-U4 BEM: https://[domain]/vcloud/ContosoCorp or https://[domain]/vcloud/Contosocorp or https://[domain]/vcloud/conTosocoRp etc.
Acceptable URL in U4 BEM: https://[domain]/vcloud/ContosoCorp ONLY. When attempting to use any other URL, users are simply informed that their username or password is incorrect.
Example:
Customer name (as it appears within vCloud): ContosoCorp
Acceptable URL in pre-U4 BEM: https://[domain]/vcloud/ContosoCorp or https://[domain]/vcloud/Contosocorp or https://[domain]/vcloud/conTosocoRp etc.
Acceptable URL in U4 BEM: https://[domain]/vcloud/ContosoCorp ONLY. When attempting to use any other URL, users are simply informed that their username or password is incorrect.
-
- Chief Product Officer
- Posts: 31809
- Liked: 7301 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: Self-Service portal URL now case-sensitive
Hmm, this is an unexpected change. Can you please open a support case, so that this does not get lost and gets tracked for fixing in the next update? Thanks!
-
- Service Provider
- Posts: 326
- Liked: 78 times
- Joined: Mar 16, 2015 4:00 pm
- Full Name: David Rubin
- Contact:
Re: Self-Service portal URL now case-sensitive
This has already been opened as case #03364154
-
- Service Provider
- Posts: 326
- Liked: 78 times
- Joined: Mar 16, 2015 4:00 pm
- Full Name: David Rubin
- Contact:
Re: Self-Service portal URL now case-sensitive
UPDATE:
The Veeam engineer says that this behavior was by design:
"The change was made as an attempt to tighten security for login attempts.
I am unsure why this change was undocumented, but I will make sure to reach out to the team which handles the user guide and propose an update to reflect this change."
Considering that vCloud itself doesn't make this case-based distinction, I anticipate hearing from many confused customers in the near future.
The Veeam engineer says that this behavior was by design:
"The change was made as an attempt to tighten security for login attempts.
I am unsure why this change was undocumented, but I will make sure to reach out to the team which handles the user guide and propose an update to reflect this change."
Considering that vCloud itself doesn't make this case-based distinction, I anticipate hearing from many confused customers in the near future.
-
- Chief Product Officer
- Posts: 31809
- Liked: 7301 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: Self-Service portal URL now case-sensitive
I checked with our security lead and he disagrees this helps security in any way so, let me escalate this internally. Thanks!
-
- Chief Product Officer
- Posts: 31809
- Liked: 7301 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: Self-Service portal URL now case-sensitive
So, it looks like this has already been fixed in U4a. Sorry for misinformation by our support.
-
- Service Provider
- Posts: 326
- Liked: 78 times
- Joined: Mar 16, 2015 4:00 pm
- Full Name: David Rubin
- Contact:
Re: Self-Service portal URL now case-sensitive
Thanks you for getting this taken care of!
Who is online
Users browsing this forum: No registered users and 57 guests