topic Re: Tomcat sessions and Alfresco tickets, is it the same ? in Alfresco Archive

Tomcat sessions and Alfresco tickets, is it the same ?

zomurn — Thu, 26 Feb 2009 13:01:06 GMT

Hello,I would say no because I have a problem with that :I'd like to prevent two connections of the same user in alfresco.For this, in the login() method I check all tickets with et<String> lTickets = authenticationServiceImpl.getUsersWithTickets( true );‍If the user who attempt to login has

Re: Tomcat sessions and Alfresco tickets, is it the same ?

zomurn — Thu, 26 Feb 2009 13:12:35 GMT

I saw the method public void setOneOff(boolean oneOff) in InMemoryTicketComponentImpl which might be interesting….
..I just tested, but this method doesn't prevent double login

Re: Tomcat sessions and Alfresco tickets, is it the same ?

zomurn — Thu, 26 Feb 2009 15:13:39 GMT

In fact, we don't have to touch at tomcat session. Parameters need to be set inside the XML file directly authentication-services-context.xml :

<!– The ticket component.                                              –>
    <!– Used for reauthentication                                          –>
    <bean id="ticketComponent" class="org.alfresco.repo.security.authentication.InMemoryTicketComponentImpl">
        <property name="ticketsCache">
            <ref bean="ticketsCache"/>
        </property>
        <!– The period for which tickets are valid in XML duration format. –>
        <!– The default is P1H for one hour.                               –>
        <property name="validDuration">
            <value>P20M</value>
        </property>
        <!– Do tickets expire or live for ever?                            –>
        <property name="ticketsExpire">
            <value>true</value>
        </property>
        <!– Are tickets only valid for a single use?                       –>
        <property name="oneOff">
            <value>false</value>
        </property>
    </bean>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The problem is that, setting like this below, means after 20 minutes of inactivity or activity and *not* only inactivity, the ticket (= session) is expired.

  <property name="validDuration">
            <value>P20M</value>
        </property>
        <!– Do tickets expire or live for ever?                            –>
        <property name="ticketsExpire">
            <value>true</value>
        </property>‍‍‍‍‍‍‍

Re: Tomcat sessions and Alfresco tickets, is it the same ?

zomurn — Thu, 26 Feb 2009 15:18:32 GMT

Exactly my problem here :

https://issues.alfresco.com/jira/browse/ETWOONE-74