Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-3274

DefaultSyncConfigImpl: add information to "user.membershipExpTime" about minimum expiration time

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Trivial
    • Resolution: Fixed
    • 1.3.5
    • 1.2.19, 1.3.16, 1.4
    • auth-external
    • None

    Description

      The user.membershipExpTime property cannot have a value which is less than the value of the user.expirationTime. Please add this information to the OSGi property description. Otherwise it is hard to debug issues here.

      The reason why user.expirationTime must be less or equal to user.membershipExpTime is in https://github.com/apache/jackrabbit-oak/blob/trunk/oak-auth-external/src/main/java/org/apache/jackrabbit/oak/spi/security/authentication/external/basic/DefaultSyncContext.java#L421.
      Since syncMembership is only called after the user.expirationTime guard, it cannot be updated more often than the user itself.

      Attachments

        1. OAK-3274.patch
          1 kB
          Angela Schreiber

        Issue Links

          is part of

          Bug - A problem which impairs or prevents the functions of the product. OAK-3275 DefaultSyncConfig: User membership expiration time not working under some circumstances

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              kwin Konrad Windszus
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: