Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-2518

Improving Insufficient header buffer size for VTI Kerberos SSO

    Details

    • Type: Service Pack Request
    • Status: Closed
    • Resolution: Fixed
    • Affects Version/s: 4.0
    • Fix Version/s: 4.1.5
    • Labels:
      None
    • Environment:
      OS: Windows
      App Server: Tomcat
      Database: SQL Server

      Description

      when Alfresco is configured for Kerberos SSO, HTTP header sizes sent by the client can get quite large. This requires configuration changes in Tomcat, which is easy enough to do:

      increase the maxHttpHeaderSize in Tomcat

      However, the integrated Jetty server used for Sharepoint uses a default of 8192 bytes, which is configured in the AMPs vti-context.xml, bean vtiServerConnector, property headerBufferSize. This should be set to 32768 by default, so that users who are members in lots of groups can access SPP (kerberos header size depends mainly on the number of groups a user is a member of).

      In addition to increasing the default, it might be a good idea to make its size configurable.

        Attachments

          Structure

            Activity

              People

              • Assignee:
                closedbugs Closed Bugs (Inactive)
                Reporter:
                sliaw Seng Liaw
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Structure Helper Panel