Discussions specific to the VMware vSphere hypervisor
Post Reply
RubinCompServ
Service Provider
Posts: 62
Liked: 12 times
Joined: Mar 16, 2015 4:00 pm
Full Name: David Rubin
Contact:

Self-Service portal URL now case-sensitive

Post by RubinCompServ » Jan 30, 2019 8:46 pm

The vCloud Self-Service portal (within Enterprise Manager) is a highly-used component in our backup offering to our customers. When we updated the BEM components to Update 4, a change was made to the functionality of the site so that customer names must be entered exactly as they exist within vCloud.

Example:
Customer name (as it appears within vCloud): ContosoCorp
Acceptable URL in pre-U4 BEM: https://[domain]/vcloud/ContosoCorp or https://[domain]/vcloud/Contosocorp or https://[domain]/vcloud/conTosocoRp etc.
Acceptable URL in U4 BEM: https://[domain]/vcloud/ContosoCorp ONLY. When attempting to use any other URL, users are simply informed that their username or password is incorrect.

Gostev
SVP, Product Management
Posts: 23860
Liked: 3209 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Self-Service portal URL now case-sensitive

Post by Gostev » Jan 30, 2019 11:06 pm

Hmm, this is an unexpected change. Can you please open a support case, so that this does not get lost and gets tracked for fixing in the next update? Thanks!

RubinCompServ
Service Provider
Posts: 62
Liked: 12 times
Joined: Mar 16, 2015 4:00 pm
Full Name: David Rubin
Contact:

Re: Self-Service portal URL now case-sensitive

Post by RubinCompServ » Feb 04, 2019 5:55 pm

This has already been opened as case #03364154

RubinCompServ
Service Provider
Posts: 62
Liked: 12 times
Joined: Mar 16, 2015 4:00 pm
Full Name: David Rubin
Contact:

Re: Self-Service portal URL now case-sensitive

Post by RubinCompServ » Feb 15, 2019 7:15 pm

UPDATE:
The Veeam engineer says that this behavior was by design:
"The change was made as an attempt to tighten security for login attempts.
I am unsure why this change was undocumented, but I will make sure to reach out to the team which handles the user guide and propose an update to reflect this change.
"

Considering that vCloud itself doesn't make this case-based distinction, I anticipate hearing from many confused customers in the near future.

Gostev
SVP, Product Management
Posts: 23860
Liked: 3209 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Self-Service portal URL now case-sensitive

Post by Gostev » Feb 18, 2019 12:06 am

I checked with our security lead and he disagrees this helps security in any way :D so, let me escalate this internally. Thanks!

Gostev
SVP, Product Management
Posts: 23860
Liked: 3209 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Self-Service portal URL now case-sensitive

Post by Gostev » Feb 18, 2019 12:25 am 2 people like this post

So, it looks like this has already been fixed in U4a. Sorry for misinformation by our support.

RubinCompServ
Service Provider
Posts: 62
Liked: 12 times
Joined: Mar 16, 2015 4:00 pm
Full Name: David Rubin
Contact:

Re: Self-Service portal URL now case-sensitive

Post by RubinCompServ » Feb 19, 2019 4:28 pm

Thanks you for getting this taken care of!

Post Reply

Who is online

Users browsing this forum: backupquestions, fondazionetls, rookfive and 27 guests