Product: Stratusphere FIT/UX
Product Version: 6.7.0-5
Expires on: 365 days from publish date
Updated: Feb 26, 2025
Problem:
- CAC Authentication is enabled in Stratusphere version 6.7.0-5
- Users with mismatched UserPrincipalName cases between Active Directory and the CAC certificate fail to auto-login to the Stratusphere UI (for example, AD has 123456789.ADMIN@MIL but the cert has 123456789.admin@mil)
- Users with matching UPN cases between AD and CAC cert successfully auto-login
Possible resolution:
First, upgrade to version 6.7.0-5 which is the only version compatible with this fix. Version 6.7.0-6+ will include the changes withing this hotfix, so you may upgrade to resolve the issue once it is available.
- Download the two RPM files linked at the bottom of this article
- Using an SCP client like WinSCP, upload the files to the 6.7.0-5 hub.
- For on-premises appliances, the user is friend, for AWS the user is ec2-user, and for Azure the user is azureuser or whatever unique username was chosen.
- Putty into the hub as the same user that uploaded the file and run the following commands:
sudo bash
rpm -Uvh --nosignature lwl-module-user-dao-impl-jdbc-0.62.1.2-1.noarch.rpm lwl-collector-backend-1.0.3-85548.noarch.rpm
systemctl restart lwl-backend lwl-backend-priv lwl-smx
Wait 5 minutes, and then test the CAC auto-login again. Reach out to support@liquidware.com if you need additional assistance.