Krishna Pandey created KNOX-718:
-----------------------------------

             Summary: redirecting back after authentication is not valid 
according to the configured whitelist
                 Key: KNOX-718
                 URL: https://issues.apache.org/jira/browse/KNOX-718
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
            Reporter: Krishna Pandey
             Fix For: 0.10.0


User does not get any warning for rejection due to whitelist when logging 
through KnoxSSO form based authentication. Refer logs below from gateway.log

"2016-06-21 18:26:02,074 WARN  service.knoxsso (WebSSOResource.java:init(89)) - 
The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure.
2016-06-21 18:26:02,076 INFO  service.knoxsso 
(WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name: 
original-url
2016-06-21 18:26:02,077 ERROR service.knoxsso 
(WebSSOResource.java:getAuthenticationToken(159)) - The original URL: 
http://os-d7-larry-knox-bug59465-5.openstacklocal.com:6080/ for redirecting 
back after authentication is not valid according to the configured whitelist: 
^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See 
documentation for KnoxSSO Whitelisting."



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to