[ 
https://issues.apache.org/jira/browse/KNOX-1919?focusedWorklogId=274903&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-274903
 ]

ASF GitHub Bot logged work on KNOX-1919:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 10/Jul/19 14:54
            Start Date: 10/Jul/19 14:54
    Worklog Time Spent: 10m 
      Work Description: smolnar82 commented on issue #113: KNOX-1919 - Taking 
gateway.path into consideration when processing redirectToUrl provider param 
with the OOTB knoxsso.xml sample
URL: https://github.com/apache/knox/pull/113#issuecomment-510096243
 
 
   @risdenk - could you please re-trigger the Travis job; the error is 
unrelated to my change. Thanks!
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


Issue Time Tracking
-------------------

    Worklog Id:     (was: 274903)
    Time Spent: 0.5h  (was: 20m)

> Enhance redirectToUrl parameter handling in knoxsso.xml
> -------------------------------------------------------
>
>                 Key: KNOX-1919
>                 URL: https://issues.apache.org/jira/browse/KNOX-1919
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: KnoxSSO
>            Reporter: Sandor Molnar
>            Assignee: Sandor Molnar
>            Priority: Major
>             Fix For: 1.4.0
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> As of now, we provide the following {{knoxsso.xml}} sample OOTB:
> {code:java}
> <topology>
>     <gateway>
>         <provider>
>             <role>webappsec</role>
>             <name>WebAppSec</name>
>             <enabled>true</enabled>
>             <param>
>                 <name>xframe.options.enabled</name>
>                 <value>true</value>
>             </param>
>         </provider>
>         <provider>
>             <role>authentication</role>
>             <name>ShiroProvider</name>
>             <enabled>true</enabled>
>             ...
>             <param>
>                 <name>redirectToUrl</name>
>                 <value>/gateway/knoxsso/knoxauth/login.html</value>
>             </param>
>             ...
>         </provider>
>         <provider>
>             <role>identity-assertion</role>
>             <name>Default</name>
>             <enabled>true</enabled>
>         </provider>
>     </gateway>
>     <application>
>         <name>knoxauth</name>
>     </application>
>     <service>
>         <role>KNOXSSO</role>
>         <param>
>             <name>knoxsso.cookie.secure.only</name>
>             <value>true</value>
>         </param>
>         <param>
>             <name>knoxsso.token.ttl</name>
>             <value>-1</value>
>         </param>
>     </service>
> </topology>
> {code}
> In case you modify the {{gateway.path}} configuration element the admin UI 
> won't be reachable due to the hard-coded gateway path ({{gateway}}) in 
> {{redirectToUrl}}.
> Recommended solution:
> change the current value to {{/${GATEWAY_PATH}/knoxsso/knoxauth/login.html}} 
> and replace the {{${GATEWAY_PATH}}} with the actual configuration value.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to