Tickets :: Comment on [#12271] gollem ftp login performed while not needed

* Your Email Address
* Spam protection	Enter the letters below: ._.. ,._.. . __. \| \./ \| \| \|(__ _\|_ \| _\|_\|__\|.__)
Comment	>> Until now application permissions, although defined, are not checked. > > This doesn't sound right. > > transparent authentication shouldn't require any application > permission checks, since transparent auth does not require a user > and, therefore, permission checks may be impossible. > > Example: gollem might have no permissions for guest users. But > transparent authentication is setup so that, if connecting from a > certain IP address, the user is automatically logged in. Obviously, > we can't check for application permissions here or else transparent > authentication would never occur. > > Seems to me that if you are seeing multiple failing transparent > authentication requests to gollem, either 1) your config is wrong or > 2) gollem's transparent authentication is incorrect. But I don't see > any issue here with the registry's handling of authentication (maybe > an optimization - failing authentication requests in a session can be > cached - but that's not a bug).
Attachment
Watch this ticket