Project

General

Profile

Actions
Copy link

Bug #25469

closed

Users from external providers manage to log in but their session is invalidated instantly

Bug #25469: Users from external providers manage to log in but their session is invalidated instantly

Added by Clark ANDRIANASOLO over 1 year ago. Updated 5 months ago.

Status:
Released
Priority:
N/A
Assignee:
François ARMAND
Category:
Security
Target version:
8.1.7
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
I hate Rudder for that
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
156
Name check:
To do
Fix check:
Checked
Regression:
No

Description

After installing the auth-backends plugin, I could log in using OIDC, but I directly get a log that my session is invalidated (since the parent ticket implementation) : 

2024-09-13 13:16:40+0000 INFO  application.authorization - Principal 'me@example.com' role list extended with OIDC provided roles: [rudder_admin(administrator)] (override: true)
2024-09-13 13:16:40+0000 INFO  application - Rudder authentication attempt for principal 'me@example.com' with backend 'oidc': success
2024-09-13 13:16:40+0000 INFO  application - User session for user 'me@example.com' is invalidated because : user is unknown

OIDC and LDAP users from external providers session should be treated the same as file users

Subtasks 2 (0 open — 2 closed)

User management - Bug #25472: Impact of session invalidation in user-management test on userrepositoryReleasedFrançois ARMANDActions
Bug #25473: Impact of session invalidation in user-management test on userrepository in 8.2ReleasedFrançois ARMANDActions

Updated by Clark ANDRIANASOLO over 1 year ago Actions
Copy link
 #1

  • Target version set to 8.1.7

Updated by Clark ANDRIANASOLO over 1 year ago Actions
Copy link
 #2

  • Status changed from New to In progress

Updated by Clark ANDRIANASOLO over 1 year ago Actions
Copy link
 #3

  • Subtask #25472 added

Updated by Clark ANDRIANASOLO over 1 year ago Actions
Copy link
 #4

  • Status changed from In progress to Pending technical review
  • Assignee changed from Clark ANDRIANASOLO to François ARMAND
  • Pull Request set to https://github.com/Normation/rudder/pull/5878

Updated by Clark ANDRIANASOLO over 1 year ago Actions
Copy link
 #5

  • Status changed from Pending technical review to Pending release

Updated by Clark ANDRIANASOLO over 1 year ago Actions
Copy link
 #6

  • Subtask #25473 added

Updated by François ARMAND over 1 year ago Actions
Copy link
 #7

  • Fix check changed from To do to Checked

Updated by Vincent MEMBRÉ over 1 year ago Actions
Copy link
 #8

This bug has been fixed in Rudder 8.1.7 which was released today.

Updated by Vincent MEMBRÉ 5 months ago Actions
Copy link
 #9

  • Status changed from Pending release to Released
  • Priority changed from 187 to 156
Actions
Copy link

Also available in: PDF Atom