[
https://jira.jboss.org/jira/browse/GTNPORTAL-1121?page=com.atlassian.jira...
]
Marek Posolda commented on GTNPORTAL-1121:
------------------------------------------
I tried to test with SPNEGOFilter removed from web.xml. But then I am seeing another
issue. Only first login into GateIn is correct but others for the same session are not.
Steps to reproduce:
1) command "kinit root" in terminal
2) Switch to browser and going to
http://server.local.network:8080/portal/private/classic
. Now I am correctly logged as user root in GatEIn.
3) Click to "Sign out" in GateIn. I am redirected to
http://server.local.network:8080/portal/public/classic and everything looks correct.
4) Click to "Sign in" again. Now I am logged but the page is broken (upper BAR
with user name and menu is missing ). And in server log can be seen this message:
15:16:24,073 ERROR [SetCurrentIdentityFilter] Not found identity in IdentityRegistry for
user root, check Login Module.
I am not able to reproduce this scenario with SPNEGOFilter enabled. So looks like identity
object is not correctly bound to identityRegistry with SPNEGOFilter disabled.
GateIn+SPNEGO integration: org.hibernate.HibernateException:
createCriteria is not valid without active transaction (thrown from SPNEGOFilter)
----------------------------------------------------------------------------------------------------------------------------------------------
Key: GTNPORTAL-1121
URL:
https://jira.jboss.org/jira/browse/GTNPORTAL-1121
Project: GateIn Portal
Issue Type: Bug
Security Level: Public(Everyone can see)
Environment: GateIn-3.0.0-GA,
SSO component: build from trunk (revision 2673),
Ubuntu 9.10 with kerberos5,
Firefox 3.5.9
Reporter: Marek Posolda
Assignee: Sohil Shah
Attachments: SPNEGOFilter-exception.txt
I have GateIn with SPNEGO integration (Kerberos) according to instructions from
http://community.jboss.org/wiki/SettingupyourKerberosDevelopmentEnvironment and
http://community.jboss.org/wiki/GateInSPNEGOintegrationusingJBossNegotiation . And now
going throug this scenario:
1) command "kinit root" in terminal
2) Switch to browser and going to
http://server.local.network:8080/portal/private/classic
. Now I am correctly logged as user root in GatEIn.
3) Wait 2 minutes or more (cache expiration time on
org.picketlink.idm.impl.api.session.managers.PersistenceManagerImpl )
4) Reload page
http://server.local.network:8080/portal/private/classic. Now everything
fine but exception in server.log (attached SPNEGOFilter-exception.txt )
It seems to be similar issue to GTNPORTAL-1048 , problem is that IDM operation is called
from SPNEGOFilter outside of active Hibernate tranasction.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira