topic Check of IP address on authentication ticket in Alfresco Archive

Check of IP address on authentication ticket

anweber — Thu, 15 Feb 2007 13:47:24 GMT

Hi, When Alfresco receives a ticket for authentication, do you check if the IP address of the caller is the same as the IP address used to obtain this ticket? In other words, have I the possibility to do the following scenario : - I ask for a connection ticket from a web application calling Alfresco

Re: Check of IP address on authentication ticket

andy — Fri, 16 Feb 2007 16:22:12 GMT

Hi

Basically. no.

Andy

Re: Check of IP address on authentication ticket

anweber — Tue, 20 Feb 2007 10:37:16 GMT

Hi,

   Effectively, if you create a ticket on an open Alfresco session (via the webServices layer) and you transfer this ticket on an other machine, then you can use a direct URL with this ticket (by example http://myHost:8080/alfresco/navigate/browse?ticket=TICKET_22e1e335-c0c9-11db-975d-0f1cf114d590) on this second machine. You will inherit the open session.

   Just a remark: if you put such URL with a ticket in your browser when you are already using the webClient, you wonâ€™t inherit the session referenced by this ticket but you will keep your previous session : it seems that the session ID stored in your cookies has priority.

       Regards,

                Andre