Allowing concurrent logins

[Raghu Mittal]

Hi

OpenXdata server has been currently configured to allow only 1 login session per user. So if I have logged in with my user, and somebody else logs in from a different machine, I get logged out and have to enter my password again.

In our case, we want to allow multiple logins of the same user. Can anyone point out how to configure Spring security so that concurrent logins are allowed? 

Thanks in advance,

Raghu

[Ronald Kayondo]

In the file WEB-INF/openxdata-dashboard-applicationContext-security.xml

Change the the max-sessions attribute to whatever number in the concurrency-control tag.    

<http auto-config="true" realm="openXdata" access-decision-manager-ref="accessDecisionManager">

        <session-management>

            <concurrency-control max-sessions="10" session-registry-ref="sessionRegistry" />

        </session-management>

--
You received this message because you are subscribed to the Google Groups "openXdata Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openxdata-de...@googlegroups.com.
To post to this group, send email to openxd...@googlegroups.com.
Visit this group at http://groups.google.com/group/openxdata-dev.
For more options, visit https://groups.google.com/d/optout.

--
Ronald. K

[Raghu Mittal]

Hi Ronald,

Thanks for the really quick reply. I will try changing this attribute and see how it works.

Thanks again,

Raghu

[Raghu Mittal]

Hi,

So what I did was - I commented out the session-management tag in WEB-INF/openxdata-dashboard-applicationContext-security.xml and now I don't have any limits on number of sessions allowed per user. Works great.

Thanks and regards,

Raghu

[Ronald Kayondo]

Great that it worked. 

One side effect though is that runtime kicking of already logged in users won't be possible anymore due to the way it was implemented in OXD(it uses the OpenXDataSessionRegistryImpl which is referenced in that tag).

[Raghu Mittal]

Oh, does it mean that: 

If I am logged in to the server, and the admin disables my user, I will still be allowed to do things on the server until i logout and only when I login again, will I see that my user has been disabled?

Regards,

Raghu Mittal

Co-founder & Tech Lead

Handheld Solutions & Research Labs Pvt Ltd

+91 9740743209

handsrel.com

[Ronald Kayondo]

True.

[Raghu Mittal]

Ok, thanks, will keep that in mind.