无法限制 WSO2 身份服务器上的最大会话 [英] Unable to limit maximum session on WSO2 Identity Server

问题描述

我正在使用在官方 Docker 映像中运行的 WSO2 IS 5.10.0 并遵循指南 此处 为具有定义角色的用户设置会话限制.我尝试使用文章中描述的主要方法(使用 active-session-limit-handler)，以及第 2 节中描述的替代方法(使用自适应身份验证 Javascript 函数).两种方法都不适合我.

I am using WSO2 IS 5.10.0 running in the official Docker image and followed the guide here to setup session limiting for users with defined roles. I have attempted to use the main way described in the article (using the active-session-limit-handler), as well as the alternative method described in section 2 (using adaptive authentication Javascript functions). Neither method has worked for me.

通过错误日志，我能够将问题追溯到以下查询:

Through error logs I was able to trace the issue back to the following query:

SELECT USER_ID FROM IDN_AUTH_USER WHERE USER_NAME =? AND TENANT_ID =? AND DOMAIN_NAME =?

此查询未返回任何结果，导致 JS 函数失败/认为用户没有活动会话.

This query is returning no results, which causes the JS function to fail/believe there are no active sessions for the user.

我认为这可能是因为我没有明确打开会话持久性，所以我遵循文档 并修改了我的 deployment.toml 以保留会话.使用修改后的 deployment.toml 重新启动 WSO2 IS 后，我仍然以同样的方式失败.即使用户有多个活动会话，查询也不会返回任何结果.

I assumed this was possibly because I wasn't explicitly turning on session persistence, so I followed the docs and modified my deployment.toml to persist sessions. After restarting WSO2 IS with the modified deployment.toml I am still failing in the same way. The query returns no results even if the user has multiple active sessions.

如何启用限制最大会话数?

How do I enable limiting the maximum number of sessions?

推荐答案

有一个已经报告的问题[1] 因为限制活动用户会话功能在 IS-5.10.0 GA 包中没有按预期工作.它已在 5.10 WUM 更新包和最新版本的 IS-5.11.0 中得到修复.您可以切换到最新版本或其他版本，您可以使用 修复.

There is an already reported issue[1] as limiting active user sessions feature is not working as expected in the IS-5.10.0 GA pack. It has been fixed in the 5.10 WUM updated pack and the latest release of IS-5.11.0. You can switch to the latest version or otherwise, you can apply a patch with the fix.

这篇关于无法限制 WSO2 身份服务器上的最大会话的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！