yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1214197] Re: Lots of data in session; easy to hit 4KB

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Wed, 22 Jan 2014 20:14:56 -0000
Reply-to: Bug 1214197 <1214197@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: horizon
       Status: Fix Committed => Fix Released

** Changed in: horizon
    Milestone: None => icehouse-2

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1214197

Title:
  Lots of data in session; easy to hit 4KB

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  The default session storage is signed cookies.  These are normally
  great, but we seem to be putting a lot of data into the session.  (I'm
  also using an alternative Keystone which produces bigger tokens, so I
  see the problem more often).

  When the cookie size goes over 4KB (on Chrome), then the cookie is
  silently dropped by Chrome.

  I suggest that if the cookie size is > 4KB that we at least log an
  error.

  Ideally we would switch the bigger cookies to Memcache / DB backend
  cookies automatically, and have the session cookie just be a pointer.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1214197/+subscriptions