Logged out after saving mailing

Use this forum for questions regarding adoption and functionality of OpenEMM

Moderator: moderator

mfx
Posts: 2
Joined: Tue Feb 04, 2020 6:40 pm

Logged out after saving mailing

Post by mfx » Tue Feb 04, 2020 6:45 pm

Hi,

each time I save a mailing I'm getting logged out after the saving process completes successfully. The Catalina.log shows:

Code: Select all

2020-02-04 06:22:25,342: WARN  [ajp-nio-8009-exec-9] com.agnitas.emm.core.sessionhijacking.web.GroupingSessionHijackingPreventionFilter - IP address of client is not allowed for current session - invalidating session 35636EB5ECB290A27F48349252EAB970 (session: /84.0.1.26, client: /13.0.1.106, URL: https://newsletter.faux.at/mailingsend.do;jsessionid=35636EB5ECB290A27F48349252EAB970, referer: null)
04-Feb-2020 06:22:25.895 INFO [ajp-nio-8009-exec-5] org.apache.tomcat.util.http.parser.Cookie.logInvalidHeader A cookie header was received ["menu_state\":\"\\"open\\"\"}"] that contained an invalid cookie. That cookie will be ignored.
 Note: further occurrences of this error will be logged at DEBUG level.
Any hints on further troubleshooting?

Thanks and BR
Manuel

maschoff
Site Admin
Posts: 2478
Joined: Thu Aug 03, 2006 10:20 am
Location: Munich, Germany
Contact:

Re: Logged out after saving mailing

Post by maschoff » Thu Feb 06, 2020 8:13 am

Looks like you are using different IP addresses in the same session. To prevent session hijacking, OpenEMM ends your session. You can enter your "safe" IP addresses in table sessionhijackingprevention_tbl in column IP, so that they are ignored in the future.
OpenEMM Maintainer

mfx
Posts: 2
Joined: Tue Feb 04, 2020 6:40 pm

Re: Logged out after saving mailing

Post by mfx » Thu Feb 06, 2020 8:52 am

Thanks for your reply!
I'm using the same IP address for all queries to the OpenEMM. For all forms and pages the request are processed successfully, except for submitting the mailing forms. Each time I submit such a form the described behavior occurs.

I've installed a Apache httpd as a reverse proxy in front of Tomcat via AJP, if this might be relevant.

Post Reply