Details

    • Bug
    • Resolution: Fixed
    • Minor
    • None
    • Professional Edition
    • Web Interface
    • None

    Description

      I recently enabled LDAP authentication and started seeing "302" redirects. This happens after a user closes the website and returns sometime later. 

      I've tried changing various auth settings such as "session lifetime" and "remember me" without improvement. Restarting httpd and the server doesn't work either. 

      Clearing session cookie "OBSID" does temporarily fix the problem. 

       

      Apache virtual host config:

      <VirtualHost *:443>
         SSLCertificateKeyFile /etc/ssl/certs/host.fake.com.pem
         SSLCertificateFile /etc/ssl/certs/host.fake.com.pub
         SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
         Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
         SSLHonorCipherOrder on
         SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSSDocumentRoot /opt/observium/html/
         ServerName host.fake.com:443
         CustomLog /opt/observium/logs/access_log combined
         ErrorLog /opt/observium/logs/error_log
         <Directory "/opt/observium/html/">
           AllowOverride All
           Options FollowSymLinks MultiViews
           Require all granted
         </Directory>
      </VirtualHost>

      Any thoughts are greatly appreciated. 

      Attachments

        Issue Links

          Activity

            [OBS-3109] 302 ERR_TOO_MANY_REDIRECTS
            landy Mike Stupalov made changes -
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]

            Looks like it's working as designed. When "Session bind to IP" is enabled, it shows an error when I change IP addresses. 

            martin.smith Martin Smith added a comment - Looks like it's working as designed. When "Session bind to IP" is enabled, it shows an error when I change IP addresses. 
            martin.smith Martin Smith made changes -
            Attachment New: Screen Shot 2019-10-21 at 11.17.44 AM.png [ 16801 ]

            Thanks Mike! I upgraded to 19.10.10133 and will report back if it still happens. The IP changes mostly happen when I jump from Ethernet at my desk to Wifi.

             

            martin.smith Martin Smith added a comment - Thanks Mike! I upgraded to 19.10.10133 and will report back if it still happens. The IP changes mostly happen when I jump from Ethernet at my desk to Wifi.  
            landy Mike Stupalov made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Open [ 1 ] New: Resolved [ 5 ]
            landy Mike Stupalov added a comment - - edited

            Fixed in r10128.

            landy Mike Stupalov added a comment - - edited Fixed in r10128.
            landy Mike Stupalov made changes -
            Assignee Original: Adam Armstrong [ adama ] New: Mike Stupalov [ landy ]
            landy Mike Stupalov made changes -
            Link New: This issue duplicates OBS-3060 [ OBS-3060 ]

            you use proxy in browser?
            or your browser over nat with randomly changed external ip?

            landy Mike Stupalov added a comment - you use proxy in browser? or your browser over nat with randomly changed external ip?

            Disabling "Session bind to IP" seems to fix this issue. 

            $config['web_session_ip']

             

            martin.smith Martin Smith added a comment - Disabling "Session bind to IP" seems to fix this issue.  $config['web_session_ip']  

            People

              landy Mike Stupalov
              martin.smith Martin Smith
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: