5 Replies Latest reply on Jun 19, 2009 6:06 AM by Vladimir Seprak

    Problem with cach when a user modifies his password on JBoss

    marilyn kol Newbie

      Hi,

      I use JBoss AS 4.05, JBoss Portal 2.6.3 and OpenLDAP. When a user logs on the portal, JBoss Portal verifies if the login exists in OpenLDAP, and it verifies if the password is the same too.
      It works but I created a portlet to modify the password of the loggued user. And I have the problem below :

      My user "toto" has the password "password1". My user "toto" logs on the portal with the password "password1". He uses the portlet to modify his password. The new password is "password2". He logs out on the portal.
      In OpenLDAP, the password has been correctly updated. But when the user "toto" logs on the portal, he is able to be logged with the old password and with the new password.

      It's not a cookie problem. Because I have this problem even if I use another browser on another computer.

      I have to restart Jboss to resolve this problem. When I restart JBoss, only the new password works.

      So I think it's a cach problem with JBoss Portal. I saw the link below:
      http://wiki.jboss.org/wiki/CachingLoginCredentials

      But even if I did "Disabling Caching", "Crendential Cache with Client Login Module Propogation", and "Flush the Credential Cache" with the JMX consol, the probleme didn't resolve.

      Do you know how I can resolve it?
      Thank you.

        • 1. Re: Problem with cach when a user modifies his password on J
          marilyn kol Newbie

          Nobody knows? I really need some help...

          Do you think that it's the same problem with this bug? : https://jira.jboss.org/jira/browse/JBPORTAL-2025

          I use JBoss Portal 2.6.3.
          When I logout on JBoss Portal, what happens with the different sessions? The jboss session timeout is launched, isn't it?

          And very important, how long do I have to wait to be sure that the cach is flushed?

          • 2. Re: Problem with cach when a user modifies his password on J
            Prabhat Jha Master

            You should try using the latest version for JBoss Portal 2.6 series.

            • 3. Re: Problem with cach when a user modifies his password on J
              marilyn kol Newbie

              Well, the application which uses JBoss Portal was delivered a long time ago. I can't tell to my customer to replace the application with a new version of Jboss Portal if I don't know where is the problem, and if I'm not sure that the problem will be resolved with a new version.

              I just want to know where is the problem...

              • 4. Re: Problem with cach when a user modifies his password on J
                Gautam Wadhwani Newbie

                I am having similar problem, when i change roles of a user, he logs out and logs in back, he still has access to the modules which were mapped to his earlier roles.

                When i tried to delete that user i got this error:

                2009-02-17 16:37:30,904 WARN [org.hibernate.util.JDBCExceptionReporter] SQL Error: 2292, SQLState: 23000
                2009-02-17 16:37:30,905 ERROR [org.hibernate.util.JDBCExceptionReporter] ORA-02292: integrity constraint (B2BPORTALADMIN26.FKF410173866F4DA65) violated - child record found

                2009-02-17 16:37:30,905 WARN [org.hibernate.util.JDBCExceptionReporter] SQL Error: 2292, SQLState: 23000
                2009-02-17 16:37:30,906 ERROR [org.hibernate.util.JDBCExceptionReporter] ORA-02292: integrity constraint (B2BPORTALADMIN26.FKF410173866F4DA65) violated - child record found

                2009-02-17 16:37:30,907 ERROR [org.hibernate.event.def.AbstractFlushingEventListener] Could not synchronize database state with session
                org.hibernate.exception.ConstraintViolationException: Could not execute JDBC batch update
                at org.hibernate.exception.SQLStateConverter.convert(SQLStateConverter.java:71)
                at org.hibernate.exception.JDBCExceptionHelper.convert(JDBCExceptionHelper.java:43)
                at org.hibernate.jdbc.AbstractBatcher.executeBatch(AbstractBatcher.java:253)


                when i tried to delete the user second time, the user got deleted.

                I created the user again and now his new roles are working, but i have lost confidence in the Role based access provided by portal.

                Any remedies for this kind of issue ..

                • 5. Re: Problem with cach when a user modifies his password on J
                  Vladimir Seprak Newbie

                  Hello,

                  I'm having the same problem with JBoss Portal 2.7.1 authenticating with OpenLDAP. Im using user administration portlet (shipped with portal) for changing user password, but I can access portal with old password as well. Even http://www.jboss.org/community/wiki/CachingLoginCredentials didn't help. Is there some other way or setting that can solve this problem.

                  Thanks.