You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Krishna Pandey (JIRA)" <ji...@apache.org> on 2016/06/21 18:37:57 UTC
[jira] [Created] (KNOX-718) redirecting back after authentication
is not valid according to the configured whitelist
Krishna Pandey created KNOX-718:
-----------------------------------
Summary: redirecting back after authentication is not valid according to the configured whitelist
Key: KNOX-718
URL: https://issues.apache.org/jira/browse/KNOX-718
Project: Apache Knox
Issue Type: Bug
Components: Server
Reporter: Krishna Pandey
Fix For: 0.10.0
User does not get any warning for rejection due to whitelist when logging through KnoxSSO form based authentication. Refer logs below from gateway.log
"2016-06-21 18:26:02,074 WARN service.knoxsso (WebSSOResource.java:init(89)) - The SSO cookie SecureOnly flag is set to FALSE and is therefore insecure.
2016-06-21 18:26:02,076 INFO service.knoxsso (WebSSOResource.java:getCookieValue(265)) - Unable to find cookie with name: original-url
2016-06-21 18:26:02,077 ERROR service.knoxsso (WebSSOResource.java:getAuthenticationToken(159)) - The original URL: http://os-d7-larry-knox-bug59465-5.openstacklocal.com:6080/ for redirecting back after authentication is not valid according to the configured whitelist: ^https?:\/\/(localhost|127\.0\.0\.1|0:0:0:0:0:0:0:1|::1):[0-9].*$. See documentation for KnoxSSO Whitelisting."
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)