8:22 a.m.
Michal Vanco created GTNPORTAL-2558:
---------------------------------------
Summary: Clustering - authentication replication
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Fix For: 3.5.0.Final
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:04 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco updated GTNPORTAL-2558:
------------------------------------
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer (was: GateIn master configured for cluster, 2 nodes, 1 mod_jk loadbalancer)
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Final
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:04 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco commented on GTNPORTAL-2558:
-----------------------------------------
I have tried to configure sso based on
https://209.132.182.48/message/732565
https://209.132.182.48/message/732565
but unfortunately it still doesn't work.
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Final
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:18 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco updated GTNPORTAL-2558:
------------------------------------
Attachment: login-replication-sso-node2.txt
login-replication-sso-node1.txt
Adding log files with sso log enabled.
You can see that sso message with login is propagated, but something is still missing.
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Final
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:24 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco commented on GTNPORTAL-2558:
-----------------------------------------
Wow, finally I have login authentication working.
After failover and access on second node I get:
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf11/10.16.88.189:8009-1) Security checking request GET /portal/dologin
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf11/10.16.88.189:8009-1) Calling hasUserDataPermission()
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf11/10.16.88.189:8009-1) Calling authenticate()
DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(ajp-perf11/10.16.88.189:8009-1) SSO Id nZUXqhCo6v6prgPVehXzdWQj set; attempting
reauthentication
TRACE [org.jboss.as.clustering.web.sso.infinispan.SSOClusterManager]
(ajp-perf11/10.16.88.189:8009-1) addSession(): adding Session
0Ut-P6GvnXBBtuJFJZoxfhQP.perf11 to cached session set for SSO nZUXqhCo6v6prgPVehXzdWQj
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf11/10.16.88.189:8009-1) Reauthenticated cached principal 'root' with
auth type 'LOGIN'
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf11/10.16.88.189:8009-1) Calling accessControl()
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf11/10.16.88.189:8009-1) Successfully passed all security constraints
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Final
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:54 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco commented on GTNPORTAL-2558:
-----------------------------------------
There is still one issue with login replication, it works only with private request (this
means that it's not replicated if I'm on home page, but when I access any private
resource, it reauthenticates and correctly sign me in).
----
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Security checking request GET /portal/classic/sitemap
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Not subject to any constraint
----
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Security checking request GET
/portal/private/classic/sitemap
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Calling hasUserDataPermission()
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Calling authenticate()
DEBUG [org.apache.catalina.authenticator.FormAuthenticator]
(ajp-perf15/10.16.88.193:8009-1) SSO Id DMzs46XKi3A3Ic8KFgzV3-sF set; attempting
reauthentication
TRACE [org.jboss.as.clustering.web.sso.infinispan.SSOClusterManager]
(ajp-perf15/10.16.88.193:8009-1) addSession(): adding Session
CiCoiLlsuEHxz4pXGYrBhDF1.perf15 to cached session set for SSO DMzs46XKi3A3Ic8KFgzV3-sF
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Reauthenticated cached principal 'root' with
auth type 'LOGIN'
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Calling accessControl()
DEBUG [org.apache.catalina.authenticator.AuthenticatorBase]
(ajp-perf15/10.16.88.193:8009-1) Successfully passed all security constraints
ClusteredSSOFilter for /* is present as portal.war/WEB-INF/web.xml
I have tried adding PortalLoginModule at standalone-ha.xml, but it didn't help as
well.
Maybe SSOFilter or PortalLoginModule have to be updated for as7/servlet 3?
Any tip/help will be appreciated.
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Final
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:07 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco commented on GTNPORTAL-2558:
-----------------------------------------
Important note, to have login replication working, you have to add:
<sso cache-container="web" cache-name="sso"
reauthenticate="false"/>
at <virtual-server> element at standalone-ha.xml
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Final
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:11 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Michal Vanco updated GTNPORTAL-2558:
------------------------------------
Fix Version/s: 3.5.0.Beta01
(was: 3.5.0.Final)
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Beta01
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:52 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Stian Thorgersen commented on GTNPORTAL-2558:
---------------------------------------------
Due to a bug in AS7 I had to add a workaround in PortalLogoutLifecycle to invalidate the
session before calling Request.logout. See https://issues.jboss.org/browse/AS7-5728 for
more details - this workaround can be removed in the future when AS7 is fixed
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Beta01
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:15 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Stian Thorgersen updated GTNPORTAL-2558:
----------------------------------------
Status: Pull Request Sent (was: Open)
Git Pull Request: https://github.com/gatein/gatein-portal/pull/205
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Beta01
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:04 a.m.
[
https://issues.jboss.org/browse/GTNPORTAL-2558?page=com.atlassian.jira.pl...
]
Thomas Heute updated GTNPORTAL-2558:
------------------------------------
Status: Resolved (was: Pull Request Sent)
Resolution: Done
Clustering - authentication replication
---------------------------------------
Key: GTNPORTAL-2558
URL: https://issues.jboss.org/browse/GTNPORTAL-2558
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Affects Versions: 3.4.0.M01
Environment: GateIn master configured for cluster, AS 7.1.2, 2 nodes, 1 mod_jk
loadbalancer
Reporter: Michal Vanco
Assignee: Marko Strukelj
Labels: EPP6.0-Test-Dev
Fix For: 3.5.0.Beta01
Attachments: login-replication-sso-node1.txt, login-replication-sso-node2.txt
I was able to configure clustering build based on gatein master and portlet session
replication works after failover.
I wasn't able to have authentication replication working (I was always logged out
after failover)
Probably some configuration is required (something like ClusteredSingleSignOn at EPP5).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4283
days inactive
4320
days old
10 comments
3 participants
participants (3)
-
Michal Vanco (JIRA) -
Stian Thorgersen (JIRA)
-
Thomas Heute (JIRA)