From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id C3B0F5BF04 for ; Wed, 8 Jul 2020 14:44:28 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id B2CE6A189 for ; Wed, 8 Jul 2020 14:43:58 +0200 (CEST) Received: from pve.proxmox.com (pve.proxmox.com [79.133.36.252]) by firstgate.proxmox.com (Proxmox) with ESMTP id DE560A17F for ; Wed, 8 Jul 2020 14:43:57 +0200 (CEST) Received: by pve.proxmox.com (Postfix) id 74C73B514E; Wed, 8 Jul 2020 14:34:53 +0200 (CEST) Received: from icewarp.tuxis.nl (icewarp.tuxis.net [31.3.104.151]) by pve.proxmox.com (Postfix) with ESMTP id 6B06BB514D for ; Wed, 8 Jul 2020 14:34:53 +0200 (CEST) DKIM-Signature: a=rsa-sha256; t=1594211563; x=1594816363; s=icewarp; d=tuxis.nl; c=relaxed/relaxed; v=1; bh=gyLuAT4d8FWXXlv3eB+s8gudk5Mi3+vnVIvgRGyxf6s=; h=From:Subject:Date:Message-ID:To:MIME-Version:Content-Type:In-Reply-To:References; b=G12DHN7Ne0h/1g1ElGDjff/QSoXppMEmbVjWMA+OmRpH2ECu7zA/xXTT9bqCtg5dZxOmf1UXCBdRfat1cJ4xvkf6tQ8ejE3OMCkl9xf7XtcZ1s0nDYh4GtcOgo9Q+mpNHQVzCwIyRfhT7rScNbnRBAIrzTlD8leNXBgDRDFuDll8zMPbzL3uzuUb5dSLa4bUKmH03Z59B/6EDDROoQ+/SCYh+cUG6TlWub8F2Z10um5o5Sfgp7YFg1Qe37XyCFti8DiiTnq7Ag6Z1a6Q0unX5+WzznbAGurQUQdShnUulINZQgLnrB1Bt3f3uKqD9GfF4RnWy8vDx3bnR+8DjnhDIw== Received: from shell.tuxis.net ([2a03:7900:2:0:31:3:104:134]) by icewarp.tuxis.nl (12.1.1 build 4 DEB9 x64) with SMTP (SSL) id 202007081432424232 for ; Wed, 08 Jul 2020 14:32:42 +0200 Received: (nullmailer pid 14523 invoked by uid 1000); Wed, 08 Jul 2020 12:32:42 -0000 Date: Wed, 8 Jul 2020 14:32:42 +0200 From: Mark Schouten To: PVE User List Message-ID: <20200708123242.u6mzoa4yyb5qnwem@shell.tuxis.net> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Ripe-Handle: MS8714-RIPE User-Agent: NeoMutt/20170113 (1.7.2) X-CTCH: RefID="str=0001.0A782F25.5F05B814.0017,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0"; Spam="Unknown"; VOD="Unknown" X-SPAM-LEVEL: Spam detection results: 0 DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain HEADER_FROM_DIFFERENT_DOMAINS 0.249 From and EnvelopeFrom 2nd level mail domains are different RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust RCVD_IN_MSPIKE_H4 0.001 Very Good reputation (+4) RCVD_IN_MSPIKE_WL 0.001 Mailspike good senders SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF Record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [proxmox.com, tuxis.nl] Subject: Re: [PVE-User] pve webgui auto logoff (5m) X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 12:44:28 -0000 Hi all, We're still having this issue. I'm trying to find the place where the timestamp used for verification is coming from, but I can't figure it out. Obviously the issue originated from the incorrect time while installing, but that is fixed now: root@node01:~# timedatectl status Local time: Wed 2020-07-08 14:31:42 CEST Universal time: Wed 2020-07-08 12:31:42 UTC RTC time: Wed 2020-07-08 12:31:42 Time zone: Europe/Amsterdam (CEST, +0200) System clock synchronized: yes NTP service: active RTC in local TZ: no root@node02:~# timedatectl status Local time: Wed 2020-07-08 14:31:43 CEST Universal time: Wed 2020-07-08 12:31:43 UTC RTC time: Wed 2020-07-08 12:31:43 Time zone: Europe/Amsterdam (CEST, +0200) System clock synchronized: yes NTP service: active RTC in local TZ: no root@node03:~# timedatectl status Local time: Wed 2020-07-08 14:31:43 CEST Universal time: Wed 2020-07-08 12:31:43 UTC RTC time: Wed 2020-07-08 12:31:43 Time zone: Europe/Amsterdam (CEST, +0200) System clock synchronized: yes NTP service: active RTC in local TZ: no Please advise.. On Wed, Apr 01, 2020 at 02:41:24PM +0200, Richard Hopman wrote: > > Looking on some input on this: > 3 node cluster running pve 6.1-7, users logged into the webgui get logged out after 5 minutes. > systemd-timesyncd is running on all 3 machines, time is in sync. > /var/log/pveproxy/access.log is just reporting a 401 at the time of auto logoff > /var/log/syslog not reporting any issues > > Time was probably off on one node when i installed the cluster as 1 node > had a certificate becoming valid in the future. Based on this i replaced all node certificates > > after creating a new /etc/pve/pve-root-ca. > > Any help in this matter is greatly appreciated. > -- > BR, > > Richard > > > _______________________________________________ > pve-user mailing list > pve-user@pve.proxmox.com > https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user -- Mark Schouten | Tuxis B.V. KvK: 74698818 | http://www.tuxis.nl/ T: +31 318 200208 | info@tuxis.nl