Details
-
Bug
-
Resolution: Fixed
-
Minor
-
None
-
Professional Edition
-
None
-
```
Version Information
Observium 19.9.10009 (3rd September 2019)
OS Linux 3.10.0-957.12.1.el7.x86_64 [amd64] (CentOS 7)
Apache 2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.18
PHP 7.2.18 (OPcache: ENABLED)
Python 2.7.5
MySQL 10.4.6-MariaDB (extension: mysqli 5.0.12-dev)
SNMP NET-SNMP 5.7.2
RRDtool 1.6.0 (rrdcached remote: 127.0.0.1:42217)
Fping 3.10 (IPv4 only)
`````` Version Information Observium 19.9.10009 (3rd September 2019) OS Linux 3.10.0-957.12.1.el7.x86_64 [amd64] (CentOS 7) Apache 2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.18 PHP 7.2.18 (OPcache: ENABLED) Python 2.7.5 MySQL 10.4.6-MariaDB (extension: mysqli 5.0.12-dev) SNMP NET-SNMP 5.7.2 RRDtool 1.6.0 (rrdcached remote: 127.0.0.1:42217) Fping 3.10 (IPv4 only) ```
Description
I recently enabled LDAP authentication and started seeing "302" redirects. This happens after a user closes the website and returns sometime later.
I've tried changing various auth settings such as "session lifetime" and "remember me" without improvement. Restarting httpd and the server doesn't work either.
Clearing session cookie "OBSID" does temporarily fix the problem.
Apache virtual host config:
<VirtualHost *:443>
|
SSLCertificateKeyFile /etc/ssl/certs/host.fake.com.pem
|
SSLCertificateFile /etc/ssl/certs/host.fake.com.pub
|
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
|
Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
|
SSLHonorCipherOrder on
|
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSSDocumentRoot /opt/observium/html/
|
ServerName host.fake.com:443
|
CustomLog /opt/observium/logs/access_log combined
|
ErrorLog /opt/observium/logs/error_log
|
<Directory "/opt/observium/html/">
|
AllowOverride All
|
Options FollowSymLinks MultiViews
|
Require all granted
|
</Directory>
|
</VirtualHost>
|
Any thoughts are greatly appreciated.
Attachments
Issue Links
- duplicates
-
OBS-3060 Ejects from the web interface by cookies
- Closed