Mac Beta Bug - Integrated Security Problem

Mac Beta Bug - Integrated Security Problem

avatar

Hi Benoit

I noted with excitement that, in this post :

http://forum.devolutions.net/topic8423-unable-to-connect-to-the-database--codepage-.aspx

you mention that since version 0.9.26.0, Integrated Security is now possible with RDM Mac Beta. I was keen to give it a try, so we updated (picked up 0.9.28.0 as of today), and I have a couple of issues to report (sorry!).

Firstly, the connection to the SQL server appears to work nicely using Integrated Auth - see "Data Source Settings.jpg" below for the settings we used, and also "Connection String Debug.jpg" (I must object again about the fact that the password is displayed on-screen in plain text!).

The problem is in the next step, after connecting to the DB, where RDM needs to load the user info. What we get on-screen is in the attached screenshot "Unable to find Integrated User.jpg". The RemoteDesktopManager.log shows :

[4/12/2013 11:52:42 AM]DEBUG Loading user info Zarija Stankovic
[4/12/2013 11:52:56 AM]DEBUG UserInfo not found for Zarija Stankovic

I think I know why this is happening. In RDM, this user appears in the Users list as "CEOWA\Zarija Stankovic", however it appears to be looking for just "Zaria Stankovic". This is wrong, because when you create an integrated user in RDM, it puts this domain name prefix on the start of the username automatically - you can't remove it!

So, I think the fix is easy - just add the domain name as a prefix to the username!

NOW THERE IS A PART 2 TO THIS PROBLEM

In the screenshot, it says "using default security". This appears give Zarija access to RDM entries that he would otherwise not gain access to. In fact, he can see ALL the entries! This is a security hole that needs to be filled!

Thanks
Des
edited by ceo_rdm on 12/3/2013

Unable to find Integrated User.jpg

Connection String Debug.jpg

Data Source Settings.jpg

All Comments (3)

avatar

Hi Des,

I will look into your issues and try to fix them as soon as possible

Thank you for your great feed back

Benoît Sansregret

avatar

Hi,

The user info issue, default security showing secured item and the password appearing in the debug message issue are all fixed in version 0.9.29.0.
You can now "Check for Updates" to get it.

Thank you for your feedback

Benoît Sansregret

avatar

Benoit

Thanks! That seems to have gotten us over that problem, now we'll get on with the rest of the testing...

Des