Visually failed first login to Admin Console

Description

Usually what happens is that i start Openfire, press my Admin Console bookmark in Firefox (https://jiveserver:9091/). It opens the login window (https://jiveserver:9091/login.jsp?url=%2Findex.jsp) I put 'admin' and then 'password', hit Enter. Page refreshes and shows login window again, without errors. If i fill that form again it logins correctly. But i have noticed, that you don't have to login again. It is actually already logged in (if i go to https://jiveserver:9091 again, it will go to Admin Console's first page). But for some reason page refreshes and shows login window again and do not forward to start page.

Environment

None

Attachments

1
  • 16 Feb 2014, 04:49 AM

Activity

Show:

Daryl Herzmann February 20, 2014 at 8:27 PM

Thanks Guus, r13971

Guus der Kinderen February 20, 2014 at 7:49 PM

Daryl, after our chat a few days ago, I made a 180. Let's disble the JSESSIONID reference in the element, as per your suggestion.

Daryl Herzmann February 16, 2014 at 4:49 AM

Guus, Attached is what I believe fixes this issue, by disabling URL rewriting by Jetty, which adds the jsessionid to the URL. IMHO, this should be disabled regardless.

https://wiki.eclipse.org/Jetty/Howto/SessionIds

I am nervous to commit this without your opinion on it.

Daryl Herzmann February 16, 2014 at 3:55 AM

So when i first enter my server address like so:

https://myserver:9091/

I get redirected to

https://myserver:9091/login.jsp?url=%2Flogin.jsp%3Bjsessionid%3D1e4ifyrtfdioh1l27wc79l5nhz%3Furl%3D%252Findex.jsp

This causes the invalid form value url to be set. (I think). Now to resolve how this is happening.

Daryl Herzmann February 16, 2014 at 3:23 AM

Gonna attempt to figure this out, my first curiousity inspecting the page form data is that this is being set for the url form data value

/login.jsp;jsessionid=3zhvn88l1mm256otfu8ti8hh?url=%2Findex.jsp

That looks suspicious. Boggling

Fixed

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

Created May 4, 2013 at 9:23 AM
Updated February 20, 2014 at 8:27 PM
Resolved February 20, 2014 at 8:27 PM

Flag notifications