Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-13905

XUI Authentication - Switching realms is not possible

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Duplicate
    • Affects Version/s: 5.5.1, 6.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.0.4, 6.0.0.5, 6.5.0
    • Fix Version/s: None
    • Component/s: authentication, XUI
    • Labels:
    • Rank:
      1|hzx2db:
    • Sprint:
      AM Sustaining Sprint 60, AM Sustaining Sprint 61
    • Story Points:
      3
    • Support Ticket IDs:

      Description

      Bug description

      Switching from realmA to realmB is not possible via the XUI. When accepting to switch/leave realmA (by logging the user out), the authentication attempt in realmB fails.

      How to reproduce the issue

      1. Create two realms, e.g realmA & realmB
      2. Point the browser to http://openam.example.com:18080/openam/XUI/?realm=realmA#login
      3. Authenticate as demo
      4. Point the browser to http://openam.example.com:18080/openam/XUI/?realm=realmB#login
      5. Accept on switching the realms/logout from realmA
      6. Authenticate as demo. It fails with:
      "Session Upgrade fails since user is different than original authenticated user"
      Expected behaviour
      Authentication on realm B should be possible
      Current behaviour
      Switching from realmA to realmB is not possible
      

      Work around

      Re-try after the error, or refresh the page.

      Code Analysis

      Source code in 5.5.1:

      if (forceAuth && sessionUpgrade) {
          try {
              newSession = AuthD.getSessionService().getSessionMutator(oldSession.getID());
          } catch (SessionException e) {
              throw new AuthException(AMAuthErrorCode.SESSION_UPGRADE_FAILED, e);
          }
      }

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                kamal.sivanandam@forgerock.com Kamal Sivanandam
                Reporter:
                anastasios.kampas Anastasios Kampas
              • Votes:
                2 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: