Hi, after upgrading to oVirt 4.3.5 yesterday (which also brought ovirt-web-ui-1.5.3) users are immediately logged out after login to the "VM Portal" with "You have been logged out due to inactivity" displayed in the browser. The "Administration Portal" works as expected. This happens - for existing UserRole users/new UserRole users/Administrator users - with different browsers (Chrome/Firefox/IE) - also when creating new browser profiles Logs in engine.log are unsuspicious IMHO (see below for Administrator user login). /var/log/ovirt-engine/ui.log is completely quiet. Downgrade to 1.5.2 resolves the situation. Reading about "Added check for inactivity during session and logout after expiration" in 1.5.3 changelog suggests that something might have gone wrong. Has anybody seen this? Shall I file a bug report?

thx matthias 2019-08-07 12:51:45,556+02 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-8) [] User admin@internal successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2019-08-07 12:51:45,728+02 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-8) [2cb53d8d] Running command: CreateUserSessionCommand internal: false. 2019-08-07 12:51:45,768+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-8) [2cb53d8d] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz connecting from 'xxx.yyy.zzz.63' using session '+DY5GdQK35zrApbt971Df0nACY2o5qpT0ebX7zFnYj/SNnJACyH7nKKd5iJSshJZZo0TgkJUoSixB7StGq10VA==' logged in. 2019-08-07 12:51:48,385+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] START, GetFileStatsVDSCommand( GetFileStatsParameters:{storagePoolId='1285d24b-53d1-4b4d-bba4-4aa6264f0c4a', ignoreFailoverLimit='false'}), log id: cd6a0e4 2019-08-07 12:51:48,394+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] FINISH, GetFileStatsVDSCommand, return: {grml64-full_2018.12.iso={status=0, ctime=1553615947.0, size=704905216}, CentOS-7-x86_64-Minimal-1810.iso={status=0, ctime=1555410499.0, size=962592768}}, log id: cd6a0e4 2019-08-07 12:51:48,419+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] EVENT_ID: REFRESH_REPOSITORY_IMAGE_LIST_SUCCEEDED(998), Refresh image list succeeded for domain(s): ISOstar-DEV (All file type) 2019-08-07 12:51:49,478+02 INFO [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-8) [4f195583] Running command: LogoutSessionCommand internal: false. 2019-08-07 12:51:49,524+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-8) [4f195583] EVENT_ID: USER_VDC_LOGOUT(31), User admin@internal-authz connected from 'xxx.yyy.zzz.63' using session '+DY5GdQK35zrApbt971Df0nACY2o5qpT0ebX7zFnYj/SNnJACyH7nKKd5iJSshJZZo0TgkJUoSixB7StGq10VA==' logged out. 2019-08-07 12:51:49,581+02 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-14) [] User admin@internal successfully logged out 2019-08-07 12:51:49,675+02 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-11) [37daeccc] Running command: TerminateSessionsForTokenCommand internal: true. _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/LARRDLNCXGL...

Hi, @Scott Dickerson <sdickers(a)redhat.com&gt;, the session logout issue for VM portal 1.5.3 was handled in the following PRs: https://github.com/oVirt/ovirt-web-ui/pull/1014 https://github.com/oVirt/ovirt-web-ui/pull/1025 Any idea on what can be the problem?

Thanks, Sharon On Wed, Aug 7, 2019 at 5:49 PM Sandro Bonazzola <sbonazzo(a)redhat.com&gt; wrote: > > > Il giorno mer 7 ago 2019 alle ore 13:09 Matthias Leopold < > matthias.leopold(a)meduniwien.ac.at&gt; ha scritto: > >> Hi, >> >> after upgrading to oVirt 4.3.5 yesterday (which also brought >> ovirt-web-ui-1.5.3) users are immediately logged out after login to the >> "VM Portal" with "You have been logged out due to inactivity" displayed >> in the browser. The "Administration Portal" works as expected. >> >> This happens >> - for existing UserRole users/new UserRole users/Administrator users >> - with different browsers (Chrome/Firefox/IE) >> - also when creating new browser profiles >> >> Logs in engine.log are unsuspicious IMHO (see below for Administrator >> user login). >> /var/log/ovirt-engine/ui.log is completely quiet. >> Downgrade to 1.5.2 resolves the situation. >> Reading about "Added check for inactivity during session and logout >> after expiration" in 1.5.3 changelog suggests that something might have >> gone wrong. >> Has anybody seen this? >> Shall I file a bug report? >> > > +Sharon Gratch <sgratch(a)redhat.com&gt; can you please have a look at this? > > > >> >> thx >> matthias >> >> 2019-08-07 12:51:45,556+02 INFO >> [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-8) >> [] User admin@internal successfully logged in with scopes: >> ovirt-app-admin ovirt-app-api ovirt-app-portal >> ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all >> ovirt-ext=token-info:authz-search >> ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate >> ovirt-ext=token:password-access >> 2019-08-07 12:51:45,728+02 INFO >> [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default >> task-8) [2cb53d8d] Running command: CreateUserSessionCommand internal: >> false. >> 2019-08-07 12:51:45,768+02 INFO >> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >> (default task-8) [2cb53d8d] EVENT_ID: USER_VDC_LOGIN(30), User >> admin@internal-authz connecting from 'xxx.yyy.zzz.63' using session >> '+DY5GdQK35zrApbt971Df0nACY2o5qpT0ebX7zFnYj/SNnJACyH7nKKd5iJSshJZZo0TgkJUoSixB7StGq10VA==' >> >> logged in. >> 2019-08-07 12:51:48,385+02 INFO >> [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] >> (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] START, >> GetFileStatsVDSCommand( >> GetFileStatsParameters:{storagePoolId='1285d24b-53d1-4b4d-bba4-4aa6264f0c4a', >> >> ignoreFailoverLimit='false'}), log id: cd6a0e4 >> 2019-08-07 12:51:48,394+02 INFO >> [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] >> (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] FINISH, >> GetFileStatsVDSCommand, return: {grml64-full_2018.12.iso={status=0, >> ctime=1553615947.0, size=704905216}, >> CentOS-7-x86_64-Minimal-1810.iso={status=0, ctime=1555410499.0, >> size=962592768}}, log id: cd6a0e4 >> 2019-08-07 12:51:48,419+02 INFO >> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >> (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] EVENT_ID: >> REFRESH_REPOSITORY_IMAGE_LIST_SUCCEEDED(998), Refresh image list >> succeeded for domain(s): ISOstar-DEV (All file type) >> 2019-08-07 12:51:49,478+02 INFO >> [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-8) >> [4f195583] Running command: LogoutSessionCommand internal: false. >> 2019-08-07 12:51:49,524+02 INFO >> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >> (default task-8) [4f195583] EVENT_ID: USER_VDC_LOGOUT(31), User >> admin@internal-authz connected from 'xxx.yyy.zzz.63' using session >> '+DY5GdQK35zrApbt971Df0nACY2o5qpT0ebX7zFnYj/SNnJACyH7nKKd5iJSshJZZo0TgkJUoSixB7StGq10VA==' >> >> logged out. >> 2019-08-07 12:51:49,581+02 INFO >> [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default >> task-14) [] User admin@internal successfully logged out >> 2019-08-07 12:51:49,675+02 INFO >> [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] >> (default task-11) [37daeccc] Running command: >> TerminateSessionsForTokenCommand internal: true. >> >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LARRDLNCXGL... >> > > > -- > > Sandro Bonazzola > > MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV > > Red Hat EMEA <https://www.redhat.com/> > > sbonazzo(a)redhat.com > <https://www.redhat.com/>*Red Hat respects your work life balance. > Therefore there is no need to answer this email out of your office hours. > <https://mojo.redhat.com/docs/DOC-1199578>* >

Am 08.08.19 um 07:49 schrieb Scott Dickerson: > > > On Wed, Aug 7, 2019 at 11:06 AM Sharon Gratch <sgratch(a)redhat.com > <mailto:sgratch@redhat.com>> wrote: > > Hi, > @Scott Dickerson <mailto:sdickers@redhat.com>, the session logout > issue for VM portal 1.5.3 was handled in the following PRs: > https://github.com/oVirt/ovirt-web-ui/pull/1014 > https://github.com/oVirt/ovirt-web-ui/pull/1025 > > Any idea on what can be the problem? > > > That is very strange. We saw a problem similar to that where, when > web-ui is starting up, the time it took for the app to fetch the > "UserSessionTimeOutInterval" config value was longer than the time it > took to load the auto-logout component. In that case the value was > considered to be 0 and auto logged the user out right away. That issue > was dealt with in PR 1025 and the whole login data load process was > synchronized properly in PR 1049. > > I need some additonal info: > - The browser console logs from when the page loads to when they're > logged out > - the "yum info ovirt-web-ui" > > I'll be able to better triage the problem with that info. > Thanks to all for replies. I sent the requested info directly to Scott Dickerson. Matthias