Bug 1202327 - Relax the 1h minimum Session timeout validation
Summary: Relax the 1h minimum Session timeout validation
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: JBoss Operations Network
Classification: JBoss
Component: UI
Version: JON 3.3.1
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ER01
: JON 3.3.2
Assignee: Libor Zoubek
QA Contact: Filip Brychta
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-03-16 12:07 UTC by Thomas Heute
Modified: 2019-05-20 11:36 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-04-30 16:11:09 UTC
Type: Enhancement
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 857438 0 unspecified CLOSED Create a way to let GUI session timeout be configurable 2021-02-22 00:41:40 UTC
Red Hat Bugzilla 1211341 0 medium CLOSED Browser session timeouts on pages where autorefresh is enabled 2021-02-22 00:41:40 UTC
Red Hat Knowledge Base (Solution) 1306963 0 None None None Never
Red Hat Product Errata RHSA-2015:0920 0 normal SHIPPED_LIVE Moderate: Red Hat JBoss Operations Network 3.3.2 update 2015-04-30 20:09:30 UTC

Internal Links: 857438 1211341

Description Thomas Heute 2015-03-16 12:07:15 UTC
Description of problem:
A user would like to be able to set 15min as timeout session but in the UI (Administration -> System Settings) a user cannot set a session timeout below 1h.

In the form, the user is asked for a time in hours and it has to be an integer otherwise the form won't be submitted.

The input should be in minutes.

Comment 3 Thomas Heute 2015-03-16 12:16:05 UTC
Note: A workaround is to change the value directly in the database but the next time the form is opened (to change any value on it) it will show 0 and won't validate until the user set the value to 1h

Comment 4 Libor Zoubek 2015-03-17 16:04:44 UTC
Session timeout is stored in RHQ_SYSTEM_CONFIG table in milliseconds, to set it ie. to 15min following query had to be executed:

update table RHQ_SYSTEM_CONFIG set property_value=900000 where property_key='RHQ_SESSION_TIMEOUT';

Once done, restart JON server to take effect.

Comment 5 Libor Zoubek 2015-03-18 15:27:41 UTC
Actually .. I just found out the workaround won't work. There's a piece of code  with hardcoded session timeout minimum (equal to 1h) which prevents UI to enforce any value lower than 1h from settings.

Comment 8 Libor Zoubek 2015-03-23 09:25:02 UTC
branch:  master
link:    https://github.com/rhq-project/rhq/commit/24013f6ca
time:    2015-03-23 10:23:10 +0100
commit:  24013f6ca37fe8231bb8568be6d6779547b38dee
author:  Libor Zoubek - lzoubek
message: Bug 1202327 - Relax the 1h minimum Session timeout validation
         Show GUI Session Timeout in minutes, changed minimum acceptable
         timeout to 1 minute

Comment 10 Michael Burman 2015-04-02 14:41:12 UTC
Had to manually merge to the jon3.3.x:

commit 6dc2525efe787c50e027125088ac9996784059d7
Author: Michael Burman <miburman>
Date:   Thu Apr 2 17:40:13 2015 +0300

    Bug 1202327 - Relax the 1h minimum Session timeout validation
    
    Show GUI Session Timeout in minutes, changed minimum acceptable timeout to 1
    minute
    
     Conflicts:
        modules/enterprise/gui/coregui/src/main/resources/org/rhq/coregui/client/Messages.properties
        modules/enterprise/gui/coregui/src/main/resources/org/rhq/coregui/client/Messages_cs.properties
        modules/enterprise/gui/coregui/src/main/resources/org/rhq/coregui/client/Messages_de.properties
        modules/enterprise/gui/coregui/src/main/resources/org/rhq/coregui/client/Messages_ja.properties

Comment 11 Simeon Pinder 2015-04-13 04:14:39 UTC
Moving to ON_QA for testing with latest cumulative patch build:
https://brewweb.devel.redhat.com//buildinfo?buildID=429507

Note: Build maps to JON 3.3.2 ER01 build.

Comment 12 Filip Brychta 2015-04-13 16:33:32 UTC
Verified cases from comments 7 and 9.
Only one problem which was visible on JON 3.3.0.GA as well bz 1211341.
Created new bz for that and marking this as verified.

Comment 14 errata-xmlrpc 2015-04-30 16:11:09 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0920.html


Note You need to log in before you can comment on or make changes to this bug.