-
Bug
-
Resolution: Not a bug
-
Low
All users are being logged out every 1 minute on instances that are integrated with JIVE
https://www.jivesoftware.com/
It started happening on April 21st and affects all users, all browsers, all connections.
The apache access_log records:
165.254.226.241 204.93.64.4 - [28/Apr/2015:04:47:17 -0400] "POST /rest/auth/latest/session HTTP/1.0" 200 234 410634 "-" "Apache-HttpClient/4.2.4 (java 1.5)"
The IP: 204.93.64.4 belongs to JIVE Software: whois
Workaround:
Disable JIVE integration or ask Cloud Support team to block all content from that IP until there is a permanent solution.
- derived from
-
CWD-4271 As an admin, I want to bulk-expire SSO sessions
- Closed
- is caused by
-
CWD-4342 Don't try to invalidate a session ID of an empty string
- Closed
- is related to
-
JRASERVER-41559 Some REST calls return 200 with no body and AUTHENTICATED_FAILED
- Gathering Impact
- relates to
-
JRACLOUD-65853 Upgrade Crowd to 2.8.3+
- Closed
-
CWD-4342 Don't try to invalidate a session ID of an empty string
- Closed