[jira] [Commented] (KNOX-718) Whitelist Violation should Result in Error to User

["Sumit Gupta (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KNOX-718?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15733484#comment-15733484 ] 

Sumit Gupta commented on KNOX-718:
----------------------------------

[~lmccay], should this be moved to 0.12.0?

> Whitelist Violation should Result in Error to User
> --------------------------------------------------
>
>                 Key: KNOX-718
>                 URL: https://issues.apache.org/jira/browse/KNOX-718
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Krishna Pandey
>             Fix For: 0.11.0
>
>
> User does not get any warning for rejection due to whitelist when logging through KnoxSSO form based authentication. Refer logs below from gateway.log
> "2016-06-21 18:26:02,074 WARN  service.knoxsso (WebSSOResource.java:init(89)) - The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure.
> 2016-06-21 18:26:02,076 INFO  service.knoxsso (WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name: original-url
> 2016-06-21 18:26:02,077 ERROR service.knoxsso (WebSSOResource.java:getAuthenticationToken(159)) - The original URL: http://<ranger_host>:6080/ for redirecting back after authentication is not valid according to the configured whitelist: ^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See documentation for KnoxSSO Whitelisting."



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)