Enterprise 3.x
  1. Enterprise 3.x
  2. ETHREEOH-2747

It's possible to set invalid session timeout (passthru)

    Details

    • Type: Bug Bug
    • Status: Closed Closed
    • Priority: Major Major
    • Resolution: Not a bug
    • Affects Version/s: 3.2
    • Fix Version/s: 3.2
    • Component/s: Authentication
    • Security Level: external (External user)
    • Labels:
      None

      Description


      It's possible to set invalid session timeout while using passthru authentication.
      It's possible to change the value of passthru.authentication.connectTimeout to any number through the JMX .

      See 2 possible ways:
      1. Make it unable to set invalid parameters, or return them to the default if is set out of range
      2. Make a user friendly error in UI and startup logs.Now the error is like this:


      org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'globalAuthenticationFilter' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\ntlm-filter-context.xml]: Cannot resolve reference to bean 'AuthenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.jlan.server.config.InvalidConfigurationException: Invalid session timeout, valid range is 2000 to 30000
      caused by:
      org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.jlan.server.config.InvalidConfigurationException: Invalid session timeout, valid range is 2000 to 30000
      caused by:
      org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.jlan.server.config.InvalidConfigurationException: Invalid session timeout, valid range is 2000 to 30000
      caused by:
      org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [G:\alf32_79\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.jlan.server.config.InvalidConfigurationException: Invalid session timeout, valid range is 2000 to 30000
      caused by:
      org.alfresco.jlan.server.config.InvalidConfigurationException: Invalid session timeout, valid range is 2000 to 30000

      AntonRy

        Activity

        Hide
        Alfresco QA Team added a comment -
        Found in Alfresco 3.2 build 79 using Windows 2008 SP1 x64, Tomcat 6.0.18, Mysql 5.1.34, JDK 6u16 x32.
        Show
        Alfresco QA Team added a comment - Found in Alfresco 3.2 build 79 using Windows 2008 SP1 x64, Tomcat 6.0.18, Mysql 5.1.34, JDK 6u16 x32.
        Hide
        dward added a comment -
        A subsystem doesn't validate its parameters until you've finished editing them and press the start button. That's how it was designed.

        This is JConsole, not a UI.
        Show
        dward added a comment - A subsystem doesn't validate its parameters until you've finished editing them and press the start button. That's how it was designed. This is JConsole, not a UI.
        Hide
        Steve Rigby added a comment -
        for retest in b116
        Show
        Steve Rigby added a comment - for retest in b116
        Hide
        Alfresco QA Team added a comment -
        Closing as not a bug and as designed.
        Show
        Alfresco QA Team added a comment - Closing as not a bug and as designed.

          People

          • Assignee:
            Closed Bugs
            Reporter:
            Alfresco QA Team
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Date of First Response: