googlegsa / livelink.v3

Google Search Appliance Connector for Livelink
Apache License 2.0
2 stars 8 forks source link

Missing username or password may throw a NullPointerException #23

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Search for secure content, and leave the Username or Password field in the 
HTTP Basic authentication prompt 
blank.

What is the expected output? What do you see instead?

The GSA sends an authentication request to the Connector Manager with an empty 
Username or Password element 
(i.e., "<Username/>" or "<Password/>"). The Connector Manager interprets an 
empty element as a null and sets 
the corresponding entry in the AuthenticationIdentity to null.

In the Livelink connector, a null username leads to the following:

java.lang.NullPointerException
        at com.google.enterprise.connector.otex.client.lapi.LapiClientFactory.createClient(LapiClientFactory.java:252)

A null password is handled, unless the Send Credentials to Web Server parameter 
is enabled, in which case you get 
the following:

java.lang.NullPointerException
        at com.opentext.api.LLString.<init>(Unknown Source)
        at com.opentext.api.LLValue.<init>(Unknown Source)
        at com.opentext.api.LLValue.add(Unknown Source)
        at com.google.enterprise.connector.otex.client.lapi.LapiClientFactory.createClient(LapiClientFactory.java:284)

Please use labels and text to provide additional information.

The GSA is correctly handling this as an authentication failure, so I've made 
it a medium priority.

Original issue reported on code.google.com by jl1615@gmail.com on 9 May 2008 at 12:36

GoogleCodeExporter commented 9 years ago

Original comment by jla...@google.com on 25 Jun 2011 at 12:48

GoogleCodeExporter commented 9 years ago
This issue is filed as Google issue #6513775

Original comment by tdnguyen@google.com on 18 May 2012 at 5:50