Arjun wrote:
> I just noticed that, on my system, I am able to access the 
> superadmin portal through the user portal. Huijun and I took 
> a look at this issue, and it seems to be related to the 
> recently added date/time REST API [1], which is currently 
> used to asynchronously update the date/time from sipXconfig. 
> This is a serious bug, and I suggest we revert the commit 
> until we get to the bottom of this. 
> 
> Here's the issue tracking this - 
> http://track.sipfoundry.org/browse/XX-7641

Thanks gents, this drove me nuts today.  I couldn't get rid of it on one
system, and couldn't reproduce it on another.  Glad to hear it wasn't
caused by the patches being reviewed.  :)

So (based also on some findings from Carson), I think it occurs when you
have the Admin portal open, manually re-start sipXconfig, and a
date/time update happens to occur before the auto-logout kicks in.  You
get the "Authentication Required" prompt, but no auto-logout.
(http://track.sipfoundry.org/browse/XX-7631)

Then I suppose entering valid credentials (actually the date/time REST
API) creates a login session that the browser caches.  Manually logging
out of the Admin portal and into the User portal seems to be OK, until
you click on a menu item, at which point you flip back to superadmin and
get Admin portal menus?

In either case, I agree that it needs to be fixed in 4.2.


-Paul
[email protected]



_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to