Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2014-04-16

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
01:47 ilbot3 joined #openam
01:47 Topic for #openam is now Chat about the OpenAM project - http://download.forgerock.com - OpenAM 11.0.0 is out!!! - OpenAM 10.0.2 is out!!! Channel logs at: http://irclog.perlgeek.de/openam/today
03:57 aldaris joined #openam
06:41 pfreixes joined #openam
07:19 rghose joined #openam
07:39 rghose joined #openam
07:43 hos001 joined #openam
08:14 aldaris joined #openam
09:46 kala buh
09:46 kala anyone knows if the AuthLevel session attribute logic changed during the openam9.5.3 and openam11?
09:46 kala we have authentication chain, where the AuthLevel is set to 1 in the first module and then set to 0 in the next module.
09:47 kala and it seems that in the openam9.5 the resulting authlevel is 1 and in the openam11 the resulting authlevel is 0
09:47 kala however, we also have chains, where authlevel is set to 2 by the first module. and it seems that in that case the resulting authlevel is 2
09:48 kala so, its really weird
09:49 kala there's https://bugster.forgerock.o​rg/jira/browse/OPENAM-2421, but it seems to be unrelated to us
09:52 rghose joined #openam
09:59 aldaris joined #openam
10:33 rghose1 joined #openam
10:51 aldaris1 joined #openam
12:20 jjpp hi.
12:21 jjpp aldaris1: do you remember from the top of your head that if daui "sees" (and caches) session for any reason, should it register itself for session notifications as well?
12:21 aldaris pretty sure clientsdk registers listeners if notification mode is enabled
12:23 jjpp it seems that there is at least a race if not plain old bug related to that. with CDCClientServlet in DAUI and backend CDCServlet. if there is a stale session key in cookie, the request will be forwarded to backend where it fails with error 404, instead of redirecting user to authentication already from cdcclientservlet
12:24 aldaris 404 would be very strange
12:25 jjpp (that's what kala said, I haven't checked the logs myself..:)
12:27 jjpp I used to have a patch in cdcclientservlet that caused it to explicitly update the session before deciding what to do.
12:27 jjpp last night they (!:) upgraded to a version without that patch and it appears that something is still hm.. f*cky :)
12:28 aldaris well that should only happen if the notifications aren't correctly working
12:28 aldaris I would suggest look into your DAS configuration
12:28 aldaris and firewall rules..
12:30 jjpp okay, that is something for kala to do, I have to deal with my (1y2months old) main project for a while, now..
12:41 kala right
12:41 kala aldaris: and yes, we have openam 11.0 running in production. Other than our own mistakes, it seems to work fine ;-)
15:07 pfreixes joined #openam
15:52 aldaris1 joined #openam
15:59 aldaris joined #openam
16:25 aldaris joined #openam
18:05 hos001 left #openam
18:20 MegaMatt joined #openam
19:59 aldaris joined #openam
20:52 tsmalmbe joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary