Uploaded image for project: 'OpenAM Agents'
  1. OpenAM Agents
  2. AMAGENTS-223

redirect loop if 'com.sun.identity.agents.config.access.denied.url' is set to absolute URL

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 4.0.1
    • Fix Version/s: 4.1.0
    • Component/s: Web Agents
    • Environment:
      Ubuntu 12.0.4
      Apache http server 2.2
      URL policy agent 4.0.1-11

      Description

      configure agent and set com.sun.identity.agents.config.access.denied.url to be an absolute URL but hosted by the agent protected server.

      Authenticate at OpenAM and try to request a protected resource which the user is not allow to access.

      This results in a redirect loop because the agent does not automatically un-enforce the URL configured for com.sun.identity.agents.config.access.denied.url

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              spareyc Charles Sparey
              Reporter:
              bthalmayr Bernhard Thalmayr
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: