[ 
https://jira.nuxeo.org/browse/NXP-4916?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Thierry Delprat updated NXP-4916:
---------------------------------

    Status: Open  (was: Triage)

> NullPointerException in NuxeoAuthenticationFilter with 
> nuxeo-platform-login-mod_sso when accessing a WebEngine site
> -------------------------------------------------------------------------------------------------------------------
>
>                 Key: NXP-4916
>                 URL: https://jira.nuxeo.org/browse/NXP-4916
>             Project: Nuxeo Enterprise Platform
>          Issue Type: Bug
>          Components: Security / Rights
>            Reporter: Thomas Roger
>             Fix For: 5.3.2
>
>
> If the parameter 'ssoNeverRedirect' is not set to true in the PROXY_AUTH 
> configuration, we get the following stacktrace using the wget command:
> wget --header='remote_user: U00001' http://localhost:8080/nuxeo/site/orange
> java.lang.NullPointerException
>       at 
> org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter.isStartPageValid(NuxeoAuthenticationFilter.java:649)
>       at 
> org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter.saveRequestedURLBeforeRedirect(NuxeoAuthenticationFilter.java:585)
>       at 
> org.nuxeo.ecm.platform.ui.web.auth.proxy.ProxyAuthenticator.handleRedirectToValidStartPage(ProxyAuthenticator.java:135)
>       at 
> org.nuxeo.ecm.platform.ui.web.auth.proxy.ProxyAuthenticator.handleRetrieveIdentity(ProxyAuthenticator.java:118)
>       at 
> org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter.handleRetrieveIdentity(NuxeoAuthenticationFilter.java:815)
>       at 
> org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter.doFilter(NuxeoAuthenticationFilter.java:376)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>       at 
> org.nuxeo.ecm.platform.web.common.requestcontroller.filter.NuxeoRequestControllerFilter.doFilter(NuxeoRequestControllerFilter.java:132)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>       at 
> org.nuxeo.ecm.platform.web.common.exceptionhandling.NuxeoExceptionFilter.doFilter(NuxeoExceptionFilter.java:80)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>       at 
> org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>       at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>       at 
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
>       at 
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
>       at 
> org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)
>       at 
> org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
>       at 
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>       at 
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>       at 
> org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
>       at 
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>       at 
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
>       at 
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
>       at 
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
>       at 
> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
>       at java.lang.Thread.run(Thread.java:637)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
https://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets

Reply via email to