Details

    • Bug
    • Resolution: Fixed
    • Minor
    • None
    • Professional Edition
    • Web Interface
    • None

    Description

      I recently enabled LDAP authentication and started seeing "302" redirects. This happens after a user closes the website and returns sometime later. 

      I've tried changing various auth settings such as "session lifetime" and "remember me" without improvement. Restarting httpd and the server doesn't work either. 

      Clearing session cookie "OBSID" does temporarily fix the problem. 

       

      Apache virtual host config:

      <VirtualHost *:443>
         SSLCertificateKeyFile /etc/ssl/certs/host.fake.com.pem
         SSLCertificateFile /etc/ssl/certs/host.fake.com.pub
         SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
         Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
         SSLHonorCipherOrder on
         SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSSDocumentRoot /opt/observium/html/
         ServerName host.fake.com:443
         CustomLog /opt/observium/logs/access_log combined
         ErrorLog /opt/observium/logs/error_log
         <Directory "/opt/observium/html/">
           AllowOverride All
           Options FollowSymLinks MultiViews
           Require all granted
         </Directory>
      </VirtualHost>

      Any thoughts are greatly appreciated. 

      Attachments

        Issue Links

          Activity

            [OBS-3109] 302 ERR_TOO_MANY_REDIRECTS

            Looks like it's working as designed. When "Session bind to IP" is enabled, it shows an error when I change IP addresses. 

            martin.smith Martin Smith added a comment - Looks like it's working as designed. When "Session bind to IP" is enabled, it shows an error when I change IP addresses. 

            Thanks Mike! I upgraded to 19.10.10133 and will report back if it still happens. The IP changes mostly happen when I jump from Ethernet at my desk to Wifi.

             

            martin.smith Martin Smith added a comment - Thanks Mike! I upgraded to 19.10.10133 and will report back if it still happens. The IP changes mostly happen when I jump from Ethernet at my desk to Wifi.  
            landy Mike Stupalov added a comment - - edited

            Fixed in r10128.

            landy Mike Stupalov added a comment - - edited Fixed in r10128.

            you use proxy in browser?
            or your browser over nat with randomly changed external ip?

            landy Mike Stupalov added a comment - you use proxy in browser? or your browser over nat with randomly changed external ip?

            Disabling "Session bind to IP" seems to fix this issue. 

            $config['web_session_ip']

             

            martin.smith Martin Smith added a comment - Disabling "Session bind to IP" seems to fix this issue.  $config['web_session_ip']  

            People

              landy Mike Stupalov
              martin.smith Martin Smith
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: