You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jmeter.apache.org by Sarah Pimentel <sa...@gmail.com> on 2012/02/13 21:12:12 UTC

Trouble to keep session in a site with SSO

I'm trying to build a script to access my application.
I recorded the script setting HTTP Request Defaults, HTTP Cookie Manager,
Recording Controller and HTTP Proxy Server.

When I enter my site url (let's say customer.systemintegration.com.br) it
leads me to the sso page (sso.systemintegration.com.br), both URLs are
configured in the HTTP Request Defaults. The Cookie Manager is using
"compatibility" policy.

It makes a request to the path "/" with no parameters
Then it it makes a request to the path "/sso-web/login" sending the service
"customer" as parameter
This parameter is used in the next request which path is
"/sso-web/login?service=customer"
In this request, the system is passing the parameters username, password,
lt (which is an access ticket, a token)

Watching the results on the tree I saw that this parameter "lt" is set in a
hidden field in the first request and each of the requests I mentioned is
generating a new lt. That's why I'm not managing to keep myself logged in
the app.

I'd like to get the value of the hidden field in the first request and use
it as the parameter value in the other requests.

I'm not sure if I made myself clear or if it's too contextual, but I'd
appreciate even a post indication or something that can guide me.


Regards,
Sarah

Re: Trouble to keep session in a site with SSO

Posted by Deepak Shetty <sh...@gmail.com>.
Dynamic Parameters need you to use one of the post processors (usually
regex post processor which will extract data into a variable) and your next
sampler uses this variable.

http://jmeter.apache.org/usermanual/component_reference.html#Regular_Expression_Extractor

You should find multiple examples in the mail archives/and or google
e.g.
https://cwiki.apache.org/WICKET/wicket-and-jmeter-with-regular-expressions.html

regards
deepak

On Mon, Feb 13, 2012 at 12:12 PM, Sarah Pimentel
<sa...@gmail.com>wrote:

> I'm trying to build a script to access my application.
> I recorded the script setting HTTP Request Defaults, HTTP Cookie Manager,
> Recording Controller and HTTP Proxy Server.
>
> When I enter my site url (let's say customer.systemintegration.com.br) it
> leads me to the sso page (sso.systemintegration.com.br), both URLs are
> configured in the HTTP Request Defaults. The Cookie Manager is using
> "compatibility" policy.
>
> It makes a request to the path "/" with no parameters
> Then it it makes a request to the path "/sso-web/login" sending the service
> "customer" as parameter
> This parameter is used in the next request which path is
> "/sso-web/login?service=customer"
> In this request, the system is passing the parameters username, password,
> lt (which is an access ticket, a token)
>
> Watching the results on the tree I saw that this parameter "lt" is set in a
> hidden field in the first request and each of the requests I mentioned is
> generating a new lt. That's why I'm not managing to keep myself logged in
> the app.
>
> I'd like to get the value of the hidden field in the first request and use
> it as the parameter value in the other requests.
>
> I'm not sure if I made myself clear or if it's too contextual, but I'd
> appreciate even a post indication or something that can guide me.
>
>
> Regards,
> Sarah
>