|View Issue Details|
|Type||Category||Severity||Reproducibility||Date Submitted||Last Update|
|backport||[Openbravo ERP] A. Platform||major||always||2018-05-16 17:31||2018-05-25 09:26|
|Priority||immediate||Resolution||fixed||Fixed in Version||3.0PR18Q2.1|
|Status||closed||Fix in branch||Fixed in SCM revision||d13caf113d0e|
|OS Version||Database version||Ant version|
|Product Version||SCM revision|
|Review Assigned To||alostale|
|Regression level||Production - Confirmed Stable|
|Regression introduced in release||3.0PR17Q3|
|Regression introduced by commit||https://code.openbravo.com/erp/devel/pi/rev/624c1fa5299c [^]|
|Triggers an Emergency Pack||No|
0038617: Autologon and AuthenticationManagers using SSO not working
|Description||If you configure an application to use the Autologon Authentication Manager the application is always redirected to the Login page.|
The issue is in the index.jsp file.
It is retrieving the AD_SESSION_ID parameter and, if it is not set, it redirects to the login page.
That value is set by the Autologon and other SSO AM later when the authenticate method is executed. So these AM are always redirected to the login page.
|Steps To Reproduce||Configure the Openbravo.properties to use Autologon AM:|
compile and try to access the application
|Proposed Solution||Proposed solution is to create a new method in the AuthenticationManager to determine if the AM is using a SSO login or not. In case of using SSO it should not redirect to the login as the session will be created in the authenticate method.|
If finally an authentication is needed the authenticate method should redirect to the login page.
|Tags||No tags attached.|
Author: Carlos Aristu <carlos.aristu <at> openbravo.com>
Date: Thu May 24 18:01:58 2018 +0200
URL: http://code.openbravo.com/erp/backports/3.0PR18Q2.1/rev/d13caf113d0e033402060230407b5b9347d590ce [^]
fixes issue 38617: Allow to skip the login page redirection done in index.jsp
After the fix for issue 0030031, it was not possible to login in Openbravo by using the authentication retrieved with an external login page. This is because in the index.jsp we first check if the DB session has been created and if not, a redirect to the login page is done.
This was breaking the flow where the authentication is performed externally and then a redirection with the result is done to directly access Openbravo, because in that case the DB session does not exists yet causing the redirection to the login page instead of granting the access into the application.
To fix this problem a new method called useExternalLoginPage() has been added to the AuthenticationManager class. It should be overridden by the subclasses that want to avoid the redirection if the DB session is not still present when trying to access into the application.
|tested + reviewed|
|2018-05-24 14:07||caristu||Type||defect => backport|
|2018-05-24 14:07||caristu||Target Version||=> 3.0PR18Q2.1|
|2018-05-24 19:09||hgbot||Note Added: 0104681|
|2018-05-24 19:09||hgbot||Status||scheduled => resolved|
|2018-05-24 19:09||hgbot||Resolution||open => fixed|
|2018-05-24 19:09||hgbot||Fixed in SCM revision||=> http://code.openbravo.com/erp/backports/3.0PR18Q2.1/rev/d13caf113d0e033402060230407b5b9347d590ce [^]|
|2018-05-24 19:09||caristu||Assigned To||platform => caristu|
|2018-05-25 09:26||alostale||Review Assigned To||=> alostale|
|2018-05-25 09:26||alostale||Note Added: 0104695|
|2018-05-25 09:26||alostale||Status||resolved => closed|
|2018-05-25 09:26||alostale||Fixed in Version||=> 3.0PR18Q2.1|
|Copyright © 2000 - 2009 MantisBT Group|