Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-8831

Accessing policy editor through a subrealm DNS alias displays the policies for that subrealm independently of the realm selected


    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 12.0.2, 13.0.0, 14.0.0
    • Fix Version/s: None
    • Component/s: policy editor, XUI
    • Labels:
    • Environment:
      OpenAM 12.0.2
    • Support Ticket IDs:


      Access the console using a sub-realm DNS Alias. Select the top realm and open the policy editor. Applications and policies from the sub-realm are displayed.

      Reproduction steps

      • OpenAM 12.0.2: openam.example.com:18080/openam
      • Sub-realm called subrealm with DNS alias subrealm.example.com
      • disable XUI
      • FQDN in Servers and Sites > advanced :
      • In subrealm, create subApp application and subPol policy
      • Access OpenAM console using the DNS alias, entering credentials in: http://subrealm.example.com:18080/openam/UI/Login?realm=/
      • Go to the top realm: Access Control > /
      • Open the Policy Editor

      Expected behaviour

      Default iPlanetAMWebAgentService application being displayed; no policies

      Observed behaviour

      Application subApp being displayed; clicking on it: policy subPol being displayed
      Note that the realm on top left of screen displays: / Top level realm

      Can not test in 13.0.0 due to OPENAM-8315; fixing OPENAM-8315 may possibly fix this as well for OpenAM 13.0.0.


          Issue Links



              • Assignee:
                julian.kigwana@forgerock.com Julian Kigwana [X] (Inactive)
                nathalie.hoet Nathalie Hoet
              • Votes:
                0 Vote for this issue
                5 Start watching this issue


                • Created: