[
https://jira.codehaus.org/browse/MRM-1841?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=346909#comment-346909
]
Sascha Vogt commented on MRM-1841:
----------------------------------
Unfortunately it still doesn't work for me. Is this the commit which should
have everything in it?
https://github.com/apache/archiva/commit/ef572f80d72aaf51598ee676e6f862681f58e350
I'm trying to understand how this is supposed to work. With the removal of the
password from the cookie, how should the frontend be able to log in again when
the jsession times out?
As soon as I've understood the idea I might be able to fix this myself ;) Or at
least debug further.
Also regarding the setup, http://archiva.apache.org/redback/configuration.html
says that security.rememberme.timeout is in minutes, though the online help
says days. The cookie expiration indicates that it is indeed days, can you
confirm that?
And which other properties are involved in this? I see that the archiva login
cookie has a domain of ".repo.<our-tld>.de" - note the dot in the beginning.
The JSESSIONID cookie does not have this dot. security.rememberme.domain is set
to repo.<our-tld>.de without the dot, I double-checked that in the archiva.xml
rememberme.path is set to "/"
> "Remember me" not working
> -------------------------
>
> Key: MRM-1841
> URL: https://jira.codehaus.org/browse/MRM-1841
> Project: Archiva
> Issue Type: Bug
> Affects Versions: 2.0.1
> Reporter: Sascha Vogt
> Assignee: Olivier Lamy
> Fix For: 2.1.0
>
>
> The remember me feature doesn't seem to work. I get logged out quite
> frequently (didn't use a stopwatch, but about 10-15 minutes of inactivity are
> sufficient to log me out)
--
This message was sent by Atlassian JIRA
(v6.1.6#6162)
