opensso
  1. opensso
  2. OPENSSO-5707

CHP does not work if there is a LB in front of multiple agents

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: current
    • Fix Version/s: build8a
    • Component/s: authentication
    • Labels:
      None
    • Environment:

      Operating System: All
      Platform: All

    • Issuezilla Id:
      5,707

      Description

      In an OpenSSO deployment, there are multiple agent 3.0 instances
      (glassfish) behind a LB. When cookie hijack prevention is enabled.
      Accessing agent protected URL does not always work. Especially if
      only run one agent instance at a time, one agent always works,
      while the other one always gets into an endless loop after user
      authentication.

      1. CRT_submittal:5707
        32 kB
        ericow
      2. x
        0.1 kB
        shivaram

        Activity

        Hide
        ericow added a comment -

        fixing it in 8.0u1p3 now

        Show
        ericow added a comment - fixing it in 8.0u1p3 now
        Hide
        ericow added a comment -

        Created an attachment (id=9769)
        CRT_submittal:5707

        Show
        ericow added a comment - Created an attachment (id=9769) CRT_submittal:5707
        Hide
        shivaram added a comment -

        Created an attachment (id=9770)
        CRT_approved:5707

        Show
        shivaram added a comment - Created an attachment (id=9770) CRT_approved:5707
        Hide
        ericow added a comment -

        amserver/source/com/iplanet/dpro/session/DNOrIPAddressListTokenRestriction.java
        new revision: 1.7
        federation/openfm/source/com/iplanet/services/cdc/LdapSPValidator.java
        new revision: 1.6

        Show
        ericow added a comment - amserver/source/com/iplanet/dpro/session/DNOrIPAddressListTokenRestriction.java new revision: 1.7 federation/openfm/source/com/iplanet/services/cdc/LdapSPValidator.java new revision: 1.6
        Hide
        dp103304 added a comment -

        Mark this verified using latest builds

        Show
        dp103304 added a comment - Mark this verified using latest builds

          People

          • Assignee:
            ericow
            Reporter:
            ericow
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: