Frequent log out after upgrading to 2.16-2

[czzarfrag]

Hi,

We encounter frequent log out to Thruk after upgrading to 2.16-2. Please advise if does anyone here encounter the same.

[sni]

Are you using the cookie auth? Or can you tell a bit more about your setup?

[ghost]

Hi, I'm experiencing the same issue, Using cookie auth with

cookie_auth_session_timeout = 604800
cookie_auth_session_cache_timeout = 5

Log out is happening usually within 2-3 hour after successful login.

Current version 2.18 installed on centos6 via RPM

[sni]

And do you get just the "session expired" popup or anything else?

[ghost]

That is correct, I'm looking at the log files and it seems that panorama is causing some issues with the session. I'll try to remove panorama tab from my browser and just use a standard web interface to see if this will "fix" the issue.

[ghost]

Ok, yes this is definitely panorama for me.

I have two tabs on one monitoring PC, one with panorama and one with regular service status details.
While panorama is active there will be occasional logouts.

When panorama tab is closed I got 3 days without single logout.

I've tried only panorama on other PC and problem is reproducible.

In panorama, I have 2 rotating dashboards, after a while rotating requests get canceled (chrome developers console), and I see XHR request from panorama to login.cgi?invalid.... URL but issue here is that this request is forwarded to HTTP and my entire Thruk is run on HTTPS so this request gets blocked by browser due to mixed content.

I've checked /var/log/thruk/thruk.log (nothing there).

Initiator for those requests was ext-all.js

I've gone through and downloaded older version (4.1.1) of ext-all.js and place it in panorama webroot to replace new version. It looks ugly and there are some errors in console however no logouts entire day. So I suspect the issue might be in this javascript file.

Hope this helps.

[sni]

does this still happen with the latest release? If not, there are plans to migrate to extjs 6, so that might fix this as well then.

[ghost]

Not sure. I haven't used panorama view in the past 8 months.

If I remember correctly you can just create simple panorama view on some host and let it refresh alongside another tab where you have standard service status details. After some time (within a day) you should be logged out.