[Bug 6694] New: Anonymous sessions not kept when casAuthentication is on
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Bug #: 6694 Summary: Anonymous sessions not kept when casAuthentication is on Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Architecture, internals, and plumbing AssignedTo: gmcharlt@gmail.com ReportedBy: julian.maurice@biblibre.com QAContact: koha-bugs@lists.koha-community.org In OPAC, if I am an anonymous user and the system preference casAuthentication is set, each time I reach a new page, the CGISESSID cookie gets a new value, causing the previous session to be destroyed and a new one to be created. This bug comes from an error in checkauth (C4/Auth.pm), where a missing test cause this strange behavior. Also found a similar issue in check_api_auth, which cause C4::Service->init to fail if the syspref is set. For example, I was unable to change a syspref value when casAuthentication was set. Patch will follow. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 --- Comment #1 from Julian Maurice <julian.maurice@biblibre.com> 2011-08-10 09:46:43 UTC --- Created attachment 4921 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=4921 Fixes for checkauth and check_api_auth -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Julian Maurice <julian.maurice@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 |PATCH-Sent -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Julian Maurice <julian.maurice@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |5630 -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Owen Leonard <oleonard@myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Patch Status|--- |Needs Signoff AssignedTo|gmcharlt@gmail.com |julian.maurice@biblibre.com -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Owen Leonard <oleonard@myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Sophie MEYNIEUX <sophie.meynieux@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sophie.meynieux@biblibre.co | |m --- Comment #2 from Sophie MEYNIEUX <sophie.meynieux@biblibre.com> 2011-11-04 11:42:02 UTC --- I have tested with casAuthentication syspref activated: In OPAC, no visible symptoms, but if I look at CGISESSID cookie, its value changes each time I display a new page. The patch does not change this behavior. In staff when I try to modify a syspref value I got an error. The patch fixes this bug. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Alex Arnaud <alex.arnaud@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alex.arnaud@biblibre.com --- Comment #3 from Alex Arnaud <alex.arnaud@biblibre.com> 2011-12-09 13:09:10 UTC --- For me all works well. I have tested with casAuthentication syspref activated too. CGISESSID cookie no more changes values while going to another page. And sysprefs are no more blocked. signing off -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 --- Comment #4 from Alex Arnaud <alex.arnaud@biblibre.com> 2011-12-09 13:10:00 UTC --- Created attachment 6694 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=6694 [SIGNED-OFF] Bug 6694: Problem with casAuthentication syspref A missing test in checkauth caused anonymous session to be destroyed and re-created at every call when this syspref was set. Almost the same issue is also fixed in check_api_auth, which caused C4::Service->init to fail. Signed-off-by: Alex Arnaud <alex.arnaud@biblibre.com> -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Alex Arnaud <alex.arnaud@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Patch Status|Needs Signoff |Signed Off -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Paul Poulain <paul.poulain@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #4921|0 |1 is obsolete| | -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 M. de Rooy <m.de.rooy@rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |m.de.rooy@rijksmuseum.nl QAContact|koha-bugs@lists.koha-commun |m.de.rooy@rijksmuseum.nl |ity.org | --- Comment #5 from M. de Rooy <m.de.rooy@rijksmuseum.nl> 2012-01-10 15:05:14 UTC --- QA Question: I did not dive into the cas specs (yet..) but does anyone of you know some external users of cas willing to test/sign this (small) patch too? -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Paul Poulain <paul.poulain@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |paul.poulain@biblibre.com --- Comment #6 from Paul Poulain <paul.poulain@biblibre.com> 2012-01-16 17:39:50 UTC --- (In reply to comment #5)
QA Question: I did not dive into the cas specs (yet..) but does anyone of you know some external users of cas willing to test/sign this (small) patch too?
Marcel, we have this in production at our libraries using CAS. You should QA only for code quality & that there is no change when CAS=OFF It's a simple patch, i'm for passed QA, but as it's a BibLibre written & signed I won't do it & let you do. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 --- Comment #7 from M. de Rooy <m.de.rooy@rijksmuseum.nl> 2012-01-18 13:01:50 UTC --- QA Comment: Code looks good. But couldn't test it. So I mark it as Passed QA relying on the signoff. For the record, I also note that writer and signer are from the same company, but that should not be a problem for a patch of a few lines. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 M. de Rooy <m.de.rooy@rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|PATCH-Sent (DO NOT USE) |P3 Status|Signed Off |Passed QA -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Paul Poulain <paul.poulain@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master Version|master |rel_3_6 -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Tom Hanstra <tom@nd.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tom@nd.edu --- Comment #8 from Tom Hanstra <tom@nd.edu> 2012-02-29 14:50:01 UTC --- For the record and for future reference, I would be willing to test such CAS related patches if I can get an understanding of how to obtain the changed code and how to properly test so that it helps with the QA signoff. We use CAS and I should have a development environment available for testing. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 --- Comment #9 from Paul Poulain <paul.poulain@biblibre.com> 2012-03-01 10:34:32 UTC --- (In reply to comment #8)
For the record and for future reference, I would be willing to test such CAS related patches if I can get an understanding of how to obtain the changed code and how to properly test so that it helps with the QA signoff. We use CAS and I should have a development environment available for testing.
Tom, is your setup of Koha using git or debian package/released tarball ? If you're not using git, that will be hard (impossible ?) to test yourself. If you're using git, you can head to: http://wiki.koha-community.org/wiki/Git_bz_configuration once git bz is installed, just do git bz apply 6694, the patch attached to this bug will be added, and you can test it. note that you may find some interesting informations also on http://wiki.koha-community.org/wiki/Sign_off_on_patches -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 --- Comment #10 from Tom Hanstra <tom@nd.edu> 2012-03-01 18:14:53 UTC --- At this point, I've only been installing using the packages. We are actually running RHEL5 rather than Debian, but I'm still using the packaged version. I may try to set up a server using the git version as I get more familiar with and further into our support of Koha. But that could be a while. So, if there are ways for me to test with a package and a code update or two, I'm willing. But if that is going to be prohibitive, then it might be a while before I can be of assistance. Tom -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6694 Julian Maurice <julian.maurice@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to Master |RESOLVED Resolution|--- |FIXED --- Comment #11 from Julian Maurice <julian.maurice@biblibre.com> --- patch is in master and 3.6.x branches, marking as resolved. -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org