Bug #21806: Rudder sessions never expire when the browser stays connected - Rudder - Issue Tracker

Actions

Copy link

Bug #21806

closed

Rudder sessions never expire when the browser stays connected

Added by Alexis Mousset almost 3 years ago. Updated over 2 years ago.

Status:

Released

Priority:

N/A

Assignee:

François ARMAND

Category:

Security

Target version:

7.3.0~beta1

Pull Request:

https://github.com/Normation/rudder/p...

Severity:

UX impact:

User visibility:

Effort required:

Priority:

Name check:

To do

Fix check:

To do

Regression:

Description

The comet ajax request every two minutes prevents session timeout (which is set to 30 minutes by both jetty and lift by default).

Subtasks 1 (0 open — 1 closed)

Related issues 1 (0 open — 1 closed)

Updated by Vincent MEMBRÉ over 2 years ago

Target version changed from 7.2.0 to 7.2.1

Updated by Alexis Mousset over 2 years ago

Status changed from New to In progress
Assignee set to Alexis Mousset

Updated by Alexis Mousset over 2 years ago

Status changed from In progress to New
Assignee deleted (~~Alexis Mousset~~)
Target version changed from 7.2.1 to 7.3.0~beta1

Updated by Alexis Mousset over 2 years ago

Status changed from New to In progress
Assignee set to Alexis Mousset

Updated by Alexis Mousset over 2 years ago

Status changed from In progress to Pending technical review
Assignee changed from Alexis Mousset to François ARMAND
Pull Request set to https://github.com/Normation/rudder/pull/4514

Updated by Alexis Mousset over 2 years ago

[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: SessionInfo(net.liftweb.http.LiftSession@1e012137,Full(Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36),Full(127.0.0.1),1,1664230100695)
[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: 733348
[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: 733348: 300000
[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: DELETE
[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 155060
[2022-09-26 22:08:27+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 155060: 300000
[2022-09-26 22:08:37+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:08:37+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 165058
[2022-09-26 22:08:37+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 165058: 300000
[2022-09-26 22:08:47+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:08:47+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 175059
[2022-09-26 22:08:47+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 175059: 300000
[2022-09-26 22:08:57+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:08:57+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 185060
[2022-09-26 22:08:57+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 185060: 300000
[2022-09-26 22:09:07+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:09:07+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 195060
[2022-09-26 22:09:07+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 195060: 300000
[2022-09-26 22:09:17+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:09:17+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 205061
[2022-09-26 22:09:17+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 205061: 300000
[2022-09-26 22:09:27+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:09:27+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 215063
[2022-09-26 22:09:27+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 215063: 300000
[2022-09-26 22:09:35+0000] WARN  application - URL: /lift/ajax/F94049259371KJCKRP/
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: SessionInfo(net.liftweb.http.LiftSession@5b9dd435,Full(Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36),Full(127.0.0.1),1,1664230175715)
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: 803351
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: 803351: 300000
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node010upctymx6vzb1hhyl11y0mabu1: DELETE
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 225063
[2022-09-26 22:09:37+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 225063: 300000
[2022-09-26 22:09:47+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:09:47+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 235062
[2022-09-26 22:09:47+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 235062: 300000
[2022-09-26 22:09:57+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: SessionInfo(net.liftweb.http.LiftSession@684d619c,Full(curl/7.76.1),Full(127.0.0.1),0,1664229951959)
[2022-09-26 22:09:57+0000] WARN  application - TIMEOUT: node0oge9wdt26p7whe85ljxgecqr10: 245063