Skip to content

When using Single Sign-on Frameworks, revocation is not always detected in callbacks #4418

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
TheWitness opened this issue Oct 7, 2021 · 2 comments
Labels
enhancement General tag for an enhancement resolved A fixed issue
Milestone

Comments

@TheWitness
Copy link
Member

Describe the bug

When using SiteMinder, if the site minder ticket is revoked, and Cacti attempts to do a callback, the callback will fail and Cacti will not detect it.

Instead, the Cacti administrator should be able to add a detection string that can parse the callback response or redirect attempt and take the approximate action, like setting and error and displaying it.

To Reproduce

Steps to reproduce the behavior:

  1. Login to Cacti via your SSO

  2. Sit on a page long enough for the SSO token to be invalidated

  3. Try to goto another page

  4. Look at the Debug console for the error message

Expected behavior

Cacti should detect the message that was sent in the callback and set an error message and force a full page refresh in these cases.

@TheWitness TheWitness added the bug Undesired behaviour label Oct 7, 2021
@TheWitness TheWitness added this to the v1.2.20 milestone Oct 11, 2021
@TheWitness TheWitness removed this from the v1.2.20 milestone Dec 10, 2021
@TheWitness TheWitness added the enhancement General tag for an enhancement label Dec 10, 2021
@TheWitness
Copy link
Member Author

Pushing this one out.

@TheWitness TheWitness removed the bug Undesired behaviour label Dec 10, 2021
TheWitness added a commit that referenced this issue Oct 16, 2022
When using Single Signon Frameworks like SiteMinder Cacti does not properly detect ticket revocation in callbacks.

Resolved in this commit:

b7a7638
@TheWitness TheWitness added the resolved A fixed issue label Oct 16, 2022
@TheWitness
Copy link
Member Author

This issue was resolved here:

b7a7638

@TheWitness TheWitness added this to the v1.2.23 milestone Oct 16, 2022
@netniV netniV changed the title When using Single Signon Frameworks like SiteMinder Cacti does not properly detect ticket revocation in callbacks When using Single Sign-on Frameworks, revocation is not always detected in callbacks Dec 31, 2022
@github-actions github-actions bot locked and limited conversation to collaborators Apr 2, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement General tag for an enhancement resolved A fixed issue
Projects
None yet
Development

No branches or pull requests

1 participant