Hi! I built in iManager portlet from "Roles and Tasks" -> "Novell
Certificate Access" -> "User Certificates" to UserApplication according
to this TID http://www.novell.com/support/kb/doc.php?id=7007403 .
Everything is fine but except one issue with session. I will describe
the sequence of steps needed to repeat my case.
1. Open the browser (FF or Chrome)
2. Login to UA as adminuserapp
3. Click on "User Certificates" potlet.
4. Portlet ask me to enter login-name and pass.
5. Fill out login and pass.
6. Now I am in "User Certificates" potlet. If I open the tab with
iManager then iManager will log in automatically as adminuserapp user.

7. Then I log out from UA. Close tabs with UA and iManager.
Then I repeat steps 1-4 but in this time I can fill out any (!!!)
information to login-name and pass, any random information! Then I
appear at portlet page as adminuserapp. If I open the iManager tab then
I automatically log in as adminuserapp.

8. Then I log out from UA. Close tabs with UA and iManager.
9. Login as tester1 user.
10. Click on "User Certificates" potlet.
11. Portlet ask me to enter login-name and pass.
12. I fill out any random information to this login/pass fields. (I
tried to fill out tester1 login/pass, but it doesn't matter). Then I
appear on "User Certificates" potlet by adminuserapp user. If I open
iManager tab then i log in automatically by adminuserapp.
-------------------------------
I can login by tester1 user first, login to portlet. Then If I log out
and log in by any another user then portlet page will be log in by
tester1 user.
-------------------------------
I noticed then browser (or server) anyhow keep session. When I log out
from UA and even close all tabs it doesn't terminate session. Next time
any user log in to portlet it will take the session login/pass.
The only one method as how to terminate the session is to close the
browser. If do this then next time any user log in to portlet, portlet
will realy check user/pass values.
-------------------------------
SO, THE FIRST QUESTION IS HOW TO TERMINATE THE IMANAGER SESSION WHEN I
LOG OUT FROM UA. HOW TO PREVENT THE MENTIONED CASE?

================================================== ==

*The second question is how to get rid of portlet authentication
question?* I tried to set ${Application/login-pass} param using Scope
Path in Administration->Page Admin. I also tried to not enter any
information to Password field. It doesn't matter. The portlet
authentication question (like in step 4) appears any time. It behaves
equally.


--
hello_amigo
------------------------------------------------------------------------
hello_amigo's Profile: https://forums.netiq.com/member.php?userid=211
View this thread: https://forums.netiq.com/showthread.php?t=46070