[asterisk-bugs] [Asterisk 0012365]: Cannot keep authentication over http -> manager

[noreply at bugs.digium.com]

The following issue has been CLOSED 
====================================================================== 
http://bugs.digium.com/view.php?id=12365 
====================================================================== 
Reported By:                bkruse
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   12365
Category:                   Core/ManagerInterface
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     closed
Asterisk Version:           1.6.0-beta5 
SVN Branch (only for SVN checkouts, not tarball releases): 1.6.0 
SVN Revision (number only!): 112519 
Disclaimer on File?:        N/A 
Request Review:              
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             04-03-2008 13:15 CDT
Last Modified:              04-03-2008 15:16 CDT
====================================================================== 
Summary:                    Cannot keep authentication over http -> manager
Description: 
If you enable the http interface (http.conf) and manager.conf
webenabled=yes, go to http://ip/rawman?

You can type these commands:

http://ip/rawman?action=login&username=user&password=pass

You will see you were authenticated.

http://ip/rawman?action=ping

You get "permission denied"

Trying this on asterisk 1.4 works fine, you get a "Pong"

You can also easily reproduce this by trying to login to the GUI if you
have it installed.


If you need anymore information, let me know.

-bk
====================================================================== 

---------------------------------------------------------------------- 
 bkruse - 04-03-08 15:16  
---------------------------------------------------------------------- 
mmichelson helped me figure this out.

It is a problem with how the GUI stores cookies, they are not always
erased on logout/session loss.

I will have to do some more debugging, but it is not an asterisk problem.

Thanks Mark!

Sorry for wasting your time!

-bk 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
04-03-08 15:16  bkruse         Note Added: 0085014                          
======================================================================