You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geode.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2017/03/17 15:14:41 UTC
[jira] [Commented] (GEODE-2670) pulse with integrated security has
authentication and authorization issues
[ https://issues.apache.org/jira/browse/GEODE-2670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15930105#comment-15930105 ]
ASF subversion and git services commented on GEODE-2670:
--------------------------------------------------------
Commit 5b71c4b5b99a62063453535c9604df7e4be460fe in geode's branch refs/heads/develop from [~jinmeiliao]
[ https://git-wip-us.apache.org/repos/asf?p=geode.git;h=5b71c4b ]
GEODE-2670: fixing pulse authentication/authorization issues
> pulse with integrated security has authentication and authorization issues
> --------------------------------------------------------------------------
>
> Key: GEODE-2670
> URL: https://issues.apache.org/jira/browse/GEODE-2670
> Project: Geode
> Issue Type: Bug
> Reporter: Jinmei Liao
> Assignee: Jinmei Liao
>
> Steps to reproduce:
> 1) in gfsh, start up a locator with a security manager
> 2) in the browser, try to connect to pulse: http://localhost:7070/pulse
> 3) when presented a login page, try a invalid username/password.
> 4) when getting "incorrect password" hint, use the same username, try using the correct password for that user. It would still say "incorrect password".
> Also, repeat above step 1 and 2,
> 3), use a correct username and password that only have cluster:read previlage.
> 4) try to access the dataBrowser.html, expect to get denied access, but is still able to access.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)