Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-2316

Knox Token State Eviction Must Consider Maximum Token Lifetime

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.4.0
    • Fix Version/s: None
    • Component/s: Server
    • Labels:
      None

      Description

      The evaluation for determining when to evict Knox token state, when server-managed state is enabled, is based on the token's expiration without consideration for the maximum token lifetime.

      This evaluation should be based on the maximum token lifetime to avoid the premature eviction of token state due to irregular renewers which may not request renewal prior to expiration.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                pzampino Philip Zampino
                Reporter:
                pzampino Philip Zampino
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m