Comments (3)
This does not solve the issue, but either the component with that ticket is running for a lot longer than 3 - 5 days or the authenticator is distributing outdated tickets. A validity period of [31.1.2020 - 21:11:36:55] - [7.2.2020 - 21:15:36:55] means that this ticket was generated on the 31st of January. So, in order for this to happen the component should have been running since then. Furthermore, the component has not performed any action since then (because every action should update the ticket) or, which is more likely to cause such a bug, somehow the session manager exchanged an up-to-date ticket for an outdated one.
from bco.authentication.
So, in order for this to happen the component should have been running since then.
Yes, you are right, possibly openhab and therefore the bco-eclipse-smarthome binding was running since 31st of January. But BCO was restarted at least a couple of times since then.
Furthermore, the component has not performed any action since then (because every action should update the ticket)
Is this actually possible in a live system? I mean any MotionSensor state update is triggering a requestDataAuthenticated
that then updates the ticket, right?
somehow the session manager exchanged an up-to-date ticket for an outdated one.
But even then, we have two different bugs because no relogin is performed, right?
from bco.authentication.
Should be fixed by commit 08f7872. Most likely a remote instance remained running while BCO was restarted. Then an old ticket is used for the first requests. The problem was that the SessionManager did not timeout on some requests. Therefore, the re-login failed because of a deadlock.
from bco.authentication.
Related Issues (20)
- Verify Admin Rights
- show different permission types HOT 1
- Replace Permission Treemap HOT 1
- Hide Admin Tab for users HOT 1
- Hide Settings if user is not logged in HOT 1
- Authentication does not prevent replay attacks HOT 1
- Credential store throws Nullpointer if file store does not exist.
- reenabled automated bco.authentication tests in test module pom HOT 1
- Fix handling of logout during authenticated request HOT 1
- SessionManager in AuthenticatedRemoteService should be changeable
- Enhance Credential Store HOT 5
- CPU Burn after kerberos ticket expires HOT 1
- Please revise code change to fix bug where new tickets are directly outdated. HOT 1
- Bad padding exception when bco cloud tries to control any units. HOT 1
- Password login not possible after the password has set/updated via bcozy. HOT 3
- User login fails in any case after client has failed. HOT 1
- SessionManager return Futures
- loginUserAfterSystemLoginFailure Test fails HOT 2
- Error "Data must not be longer than 117 bytes" when starting bco device manager bundle HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bco.authentication.