Hi, @Scott Dickerson <sdickers@redhat.com>, the session logout issue for VM portal 1.5.3 was handled in the following PRs: https://github.com/oVirt/ovirt-web-ui/pull/1014 https://github.com/oVirt/ovirt-web-ui/pull/1025 Any idea on what can be the problem? Thanks, Sharon On Wed, Aug 7, 2019 at 5:49 PM Sandro Bonazzola <sbonazzo@redhat.com> wrote:

Il giorno mer 7 ago 2019 alle ore 13:09 Matthias Leopold < matthias.leopold@meduniwien.ac.at> ha scritto:

...

Hi,

after upgrading to oVirt 4.3.5 yesterday (which also brought ovirt-web-ui-1.5.3) users are immediately logged out after login to the "VM Portal" with "You have been logged out due to inactivity" displayed in the browser. The "Administration Portal" works as expected.

This happens - for existing UserRole users/new UserRole users/Administrator users - with different browsers (Chrome/Firefox/IE) - also when creating new browser profiles

Logs in engine.log are unsuspicious IMHO (see below for Administrator user login). /var/log/ovirt-engine/ui.log is completely quiet. Downgrade to 1.5.2 resolves the situation. Reading about "Added check for inactivity during session and logout after expiration" in 1.5.3 changelog suggests that something might have gone wrong. Has anybody seen this? Shall I file a bug report?

+Sharon Gratch <sgratch@redhat.com> can you please have a look at this?

...

thx matthias

2019-08-07 12:51:45,556+02 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-8) [] User admin@internal successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2019-08-07 12:51:45,728+02 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-8) [2cb53d8d] Running command: CreateUserSessionCommand internal: false. 2019-08-07 12:51:45,768+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-8) [2cb53d8d] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz connecting from 'xxx.yyy.zzz.63' using session '+DY5GdQK35zrApbt971Df0nACY2o5qpT0ebX7zFnYj/SNnJACyH7nKKd5iJSshJZZo0TgkJUoSixB7StGq10VA=='

logged in. 2019-08-07 12:51:48,385+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] START, GetFileStatsVDSCommand( GetFileStatsParameters:{storagePoolId='1285d24b-53d1-4b4d-bba4-4aa6264f0c4a',

ignoreFailoverLimit='false'}), log id: cd6a0e4 2019-08-07 12:51:48,394+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] FINISH, GetFileStatsVDSCommand, return: {grml64-full_2018.12.iso={status=0, ctime=1553615947.0, size=704905216}, CentOS-7-x86_64-Minimal-1810.iso={status=0, ctime=1555410499.0, size=962592768}}, log id: cd6a0e4 2019-08-07 12:51:48,419+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-11) [92c5e178-324e-4407-a844-7d1cb67e71b0] EVENT_ID: REFRESH_REPOSITORY_IMAGE_LIST_SUCCEEDED(998), Refresh image list succeeded for domain(s): ISOstar-DEV (All file type) 2019-08-07 12:51:49,478+02 INFO [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-8) [4f195583] Running command: LogoutSessionCommand internal: false. 2019-08-07 12:51:49,524+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-8) [4f195583] EVENT_ID: USER_VDC_LOGOUT(31), User admin@internal-authz connected from 'xxx.yyy.zzz.63' using session '+DY5GdQK35zrApbt971Df0nACY2o5qpT0ebX7zFnYj/SNnJACyH7nKKd5iJSshJZZo0TgkJUoSixB7StGq10VA=='

logged out. 2019-08-07 12:51:49,581+02 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-14) [] User admin@internal successfully logged out 2019-08-07 12:51:49,675+02 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-11) [37daeccc] Running command: TerminateSessionsForTokenCommand internal: true.

_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/LARRDLNCXGLJPL...

--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA <https://www.redhat.com/>

sbonazzo@redhat.com <https://www.redhat.com/>*Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*

Am 08.08.19 um 07:49 schrieb Scott Dickerson:

On Wed, Aug 7, 2019 at 11:06 AM Sharon Gratch <sgratch@redhat.com <mailto:sgratch@redhat.com>> wrote:

Hi, @Scott Dickerson <mailto:sdickers@redhat.com>,  the session logout issue for VM portal 1.5.3 was handled in the following PRs: https://github.com/oVirt/ovirt-web-ui/pull/1014 https://github.com/oVirt/ovirt-web-ui/pull/1025

Any idea on what can be the problem?

That is very strange.  We saw a problem similar to that where, when web-ui is starting up, the time it took for the app to fetch the "UserSessionTimeOutInterval" config value was longer than the time it took to load the auto-logout component.  In that case the value was considered to be 0 and auto logged the user out right away.  That issue was dealt with in PR 1025 and the whole login data load process was synchronized properly in PR 1049.

I need some additonal info:   - The browser console logs from when the page loads to when they're logged out   - the "yum info ovirt-web-ui"

I'll be able to better triage the problem with that info.

Thanks to all for replies. I sent the requested info directly to Scott Dickerson. Matthias

Thank you very much! I indeed set this to "-1" in the past and forgot about it. Now everything works as expected. Matthias Am 08.08.19 um 16:13 schrieb Scott Dickerson:

From the browser console log: "09:54:32.004  debug  http GET[7] -> url: "/ovirt-engine/api/options/UserSessionTimeOutInterval", headers: {"Accept":"application/json","Authorization":"*****","Accept-Language":"en_US","Filter":true} transport.js:74:9" "09:54:32.141  debug  Reducing action: {"type":"SET_USER_SESSION_TIMEOUT_INTERVAL","payload":{"userSessionTimeoutInterval":-1}} utils.js:48:13"

Your engine "UserSessionTimeOutInterval" is set to -1.  VM Portal is interpreting this as "auto-logout a second ago" instead of "do not auto-logout".

The simple fix is to set that value to something >0 in your engine configs.

I filed https://github.com/oVirt/ovirt-web-ui/issues/1085 to account for a -1 value properly in VM Portal.

On Thu, Aug 8, 2019 at 4:07 AM Matthias Leopold <matthias.leopold@meduniwien.ac.at <mailto:matthias.leopold@meduniwien.ac.at>> wrote:

Am 08.08.19 um 07:49 schrieb Scott Dickerson: > > > On Wed, Aug 7, 2019 at 11:06 AM Sharon Gratch <sgratch@redhat.com <mailto:sgratch@redhat.com> > <mailto:sgratch@redhat.com <mailto:sgratch@redhat.com>>> wrote: > >     Hi, >     @Scott Dickerson <mailto:sdickers@redhat.com <mailto:sdickers@redhat.com>>,  the session logout >     issue for VM portal 1.5.3 was handled in the following PRs: > https://github.com/oVirt/ovirt-web-ui/pull/1014 > https://github.com/oVirt/ovirt-web-ui/pull/1025 > >     Any idea on what can be the problem? > > > That is very strange.  We saw a problem similar to that where, when > web-ui is starting up, the time it took for the app to fetch the > "UserSessionTimeOutInterval" config value was longer than the time it > took to load the auto-logout component.  In that case the value was > considered to be 0 and auto logged the user out right away.  That issue > was dealt with in PR 1025 and the whole login data load process was > synchronized properly in PR 1049. > > I need some additonal info: >    - The browser console logs from when the page loads to when they're > logged out >    - the "yum info ovirt-web-ui" > > I'll be able to better triage the problem with that info. >

Thanks to all for replies. I sent the requested info directly to Scott Dickerson.

Matthias

-- Scott Dickerson Senior Software Engineer RHV-M Engineering - UX Team Red Hat, Inc

-- Matthias Leopold IT Systems & Communications Medizinische Universität Wien Spitalgasse 23 / BT 88 /Ebene 00 A-1090 Wien Tel: +43 1 40160-21241 Fax: +43 1 40160-921200