[Home]

Summary:ASTERISK-11780: Cannot keep authentication over http -> manager
Reporter:Brandon Kruse (bkruse)Labels:
Date Opened:2008-04-03 13:15:34Date Closed:2011-06-07 14:03:11
Priority:MajorRegression?No
Status:Closed/CompleteComponents:Core/ManagerInterface
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:If you enable the http interface (http.conf) and manager.conf webenabled=yes, go to http://ip/rawman?

You can type these commands:

http://ip/rawman?action=login&username=user&password=pass

You will see you were authenticated.

http://ip/rawman?action=ping

You get "permission denied"

Trying this on asterisk 1.4 works fine, you get a "Pong"

You can also easily reproduce this by trying to login to the GUI if you have it installed.


If you need anymore information, let me know.

-bk
Comments:By: Brandon Kruse (bkruse) 2008-04-03 15:16:14

mmichelson helped me figure this out.

It is a problem with how the GUI stores cookies, they are not always erased on logout/session loss.

I will have to do some more debugging, but it is not an asterisk problem.

Thanks Mark!

Sorry for wasting your time!

-bk