[
https://issues.apache.org/jira/browse/KNOX-718?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Krishna Pandey updated KNOX-718:
Description:
User does not get any warning for rejection due to whitelist when logging
through KnoxSSO form based authentication. Refer logs below from gateway.log
"2016-06-21 18:26:02,074 WARN service.knoxsso (WebSSOResource.java:init(89)) -
The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure.
2016-06-21 18:26:02,076 INFO service.knoxsso
(WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name:
original-url
2016-06-21 18:26:02,077 ERROR service.knoxsso
(WebSSOResource.java:getAuthenticationToken(159)) - The original URL:
http://:6080/ for redirecting back after authentication is not
valid according to the configured whitelist:
^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See
documentation for KnoxSSO Whitelisting."
was:
User does not get any warning for rejection due to whitelist when logging
through KnoxSSO form based authentication. Refer logs below from gateway.log
"2016-06-21 18:26:02,074 WARN service.knoxsso (WebSSOResource.java:init(89)) -
The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure.
2016-06-21 18:26:02,076 INFO service.knoxsso
(WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name:
original-url
2016-06-21 18:26:02,077 ERROR service.knoxsso
(WebSSOResource.java:getAuthenticationToken(159)) - The original URL:
http://os-d7-larry-knox-bug59465-5.openstacklocal.com:6080/ for redirecting
back after authentication is not valid according to the configured whitelist:
^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See
documentation for KnoxSSO Whitelisting."
> redirecting back after authentication, not valid according to the configured
> whitelist
> --
>
> Key: KNOX-718
> URL: https://issues.apache.org/jira/browse/KNOX-718
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
>Reporter: Krishna Pandey
> Fix For: 0.10.0
>
>
> User does not get any warning for rejection due to whitelist when logging
> through KnoxSSO form based authentication. Refer logs below from gateway.log
> "2016-06-21 18:26:02,074 WARN service.knoxsso (WebSSOResource.java:init(89))
> - The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure.
> 2016-06-21 18:26:02,076 INFO service.knoxsso
> (WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name:
> original-url
> 2016-06-21 18:26:02,077 ERROR service.knoxsso
> (WebSSOResource.java:getAuthenticationToken(159)) - The original URL:
> http://:6080/ for redirecting back after authentication is not
> valid according to the configured whitelist:
> ^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See
> documentation for KnoxSSO Whitelisting."
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
