[ https://issues.apache.org/jira/browse/KNOX-718?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Krishna Pandey updated KNOX-718: -------------------------------- Summary: redirecting back after authentication, not valid according to the configured whitelist (was: redirecting back after authentication is not valid according to the configured whitelist) > redirecting back after authentication, not valid according to the configured > whitelist > -------------------------------------------------------------------------------------- > > Key: KNOX-718 > URL: https://issues.apache.org/jira/browse/KNOX-718 > Project: Apache Knox > Issue Type: Bug > Components: Server > Reporter: Krishna Pandey > Fix For: 0.10.0 > > > User does not get any warning for rejection due to whitelist when logging > through KnoxSSO form based authentication. Refer logs below from gateway.log > "2016-06-21 18:26:02,074 WARN service.knoxsso (WebSSOResource.java:init(89)) > - The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure. > 2016-06-21 18:26:02,076 INFO service.knoxsso > (WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name: > original-url > 2016-06-21 18:26:02,077 ERROR service.knoxsso > (WebSSOResource.java:getAuthenticationToken(159)) - The original URL: > http://os-d7-larry-knox-bug59465-5.openstacklocal.com:6080/ for redirecting > back after authentication is not valid according to the configured whitelist: > ^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See > documentation for KnoxSSO Whitelisting." -- This message was sent by Atlassian JIRA (v6.3.4#6332)