Support Article
Time out Session password not encrypted correctly
SA-45284
Summary
After upgrading to Pega 7.2.2, Web-Timeout HTML screen for re-authentication does not work correctly and the password entered was not passed to the Active Directory server as was entered by the user.
Error Messages
Not Applicable
Steps to Reproduce
Upgrade from PRPC 6.1 SP2 to Pega 7.2.2.
Root Cause
After a timeout, the password entered must be in the Base64 format so that the engine layer, which is Base64, decodes the password and sends it to the Active Directory incorrectly.
Resolution
Update the Web-Timeout to Base64 to encode the password on Submit.function base64EncodePassword(){
document.getElementById("txtPassword").value = btoa(document.getElementById("txtPassword").value);
return true;
}
form name="main" method="post" action="<pega:reference name="pxThread.pxReqURI" mode="normal" />?pyActivity=CheckServerConnection&Close=true" onSubmit="base64EncodePassword()">
Published October 13, 2017 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.