Hi All,

When using Active Directory for the User Directory in FarCry (either
3.x or 4.x - though I am using 4.x now) it seems that successful
logins are not recorded in the audit log (however I can see that
failed logins are recorded). Also for Active Directory logins the
session.firstLogin variable is never inititalised or set during the
login process for AD users. The problem it causes is that on each AD
Login, whether it is the first login for a particular user or not, you
are greeted with this error message in the Overview sidebar:


  Element FIRSTLOGIN is undefined in SESSION.

  The error occurred in Q:\Inetpub\Common\FarCry\core\admin\overview
\sidebar.cfm: line 12

  11 : </cfoutput>
  12 :  <cfif session.firstLogin>
  13 :      <cfoutput>
  14 :      <script type="text/javascript">


After looking at core\packages\security\authentication.cfc it seems
that session.firstLogin is not being initialised and is only ever set
to true or false inside the "default case" branch of the UD-type
switch statement (which starts on line 606), and is not set in the
"ADSI" branch at all, hence the error message above.

Should AD logins be recorded in the audit log? Ideally I would think
yes they should be, just because it would actually be useful :) And to
stop the crash, session.firstLogin would need to be initialised
properly, or or least set somewhere in the "ADSI" branch of the switch
statement.


I'll log this one as a bug/enhancement. In the meantime I've just made
a simple change to my local copy of the core to work around it. On
line 12 of core\admin\overview\sidebar.cfm:

Replaced:
  <cfif session.firstLogin>
with:
  <cfif StructKeyExists(session, "firstLogin") AND session.firstLogin>


Cheers.

--
Justin
http://www.madfellas.com/blog


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"farcry-dev" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/farcry-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to