[
https://issues.apache.org/jira/browse/GEODE-10144?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jinmei Liao reopened GEODE-10144:
---------------------------------
I am going to revert the revert, so reopening this ticket again:
the exception happened on the old client connecting to the new server. Once CQ
determined this user is expired, it will wait for 5 seconds for the client to
do some operation to refresh the subject, but the implementation of the
security manager only throws the AuthExpiredException every 30 seconds, so the
client operation never gets that exception therefore the refresh didn't happen.
CQ disconnects the client, but the client didn't know that and continues
operations, thus it receives this exception.
The correct behavior is security manager once determines a user expired, it
should throw the auth-expired exception all the time, then if the client choose
to send in a refreshed token, then CQ will continue, if the client didn't send
in a refreshed token, then client should get AuthenticationFailedException
immediately after the 2nd try.
> Regression in geode-native test
> CqPlusAuthInitializeTest.reAuthenticateWithDurable
> ----------------------------------------------------------------------------------
>
> Key: GEODE-10144
> URL: https://issues.apache.org/jira/browse/GEODE-10144
> Project: Geode
> Issue Type: Bug
> Components: client/server
> Affects Versions: 1.15.0
> Reporter: Blake Bender
> Assignee: Jinmei Liao
> Priority: Major
> Labels: blocks-1.15.0, needsTriage
> Fix For: 1.15.0
>
>
> This test is failing across the board in the `geode-native` PR pipeline.
> Main develop pipeline is green only because nothing can get through the PR
> pipeline to clear checkin gates. We have green CI runs with 1.15. build 918,
> then it started failing when we picked up build 924.
>
> [~moleske] tracked this back to this commit:
> [https://github.com/apache/geode/commit/2554f42b925f2b9b8ca7eee14c7a887436b1d9db|https://github.com/apache/geode/commit/2554f42b925f2b9b8ca7eee14c7a887436b1d9db].
> See his notes in `geode-native` PR # 947
> ([https://github.com/apache/geode-native/pull/947])
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
