Re: [PVE-User] pve webgui auto logoff (5m)

Re: [PVE-User] pve webgui auto logoff (5m)

[Mark Schouten]

Hi all,

We're still having this issue. I'm trying to find the place where the
timestamp used for verification is coming from, but I can't figure it
out.

Obviously the issue originated from the incorrect time while installing,
but that is fixed now:

root@node01:~# timedatectl status
               Local time: Wed 2020-07-08 14:31:42 CEST
           Universal time: Wed 2020-07-08 12:31:42 UTC
                 RTC time: Wed 2020-07-08 12:31:42
                Time zone: Europe/Amsterdam (CEST, +0200)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no
root@node02:~# timedatectl status
               Local time: Wed 2020-07-08 14:31:43 CEST
           Universal time: Wed 2020-07-08 12:31:43 UTC
                 RTC time: Wed 2020-07-08 12:31:43
                Time zone: Europe/Amsterdam (CEST, +0200)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no
root@node03:~# timedatectl status
               Local time: Wed 2020-07-08 14:31:43 CEST
           Universal time: Wed 2020-07-08 12:31:43 UTC
                 RTC time: Wed 2020-07-08 12:31:43
                Time zone: Europe/Amsterdam (CEST, +0200)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no

Please advise..




On Wed, Apr 01, 2020 at 02:41:24PM +0200, Richard Hopman wrote:
> 
> Looking on some input on this:
> 3 node cluster running pve 6.1-7, users logged into the webgui get logged out after 5 minutes.
> systemd-timesyncd is running on all 3 machines, time is in sync.
> /var/log/pveproxy/access.log is just reporting a 401 at the time of auto logoff
> /var/log/syslog not reporting any issues
> 
> Time was probably off on one node when i installed the cluster as 1 node
> had a certificate becoming valid in the future. Based on this i replaced all node certificates
> 
> after creating a new /etc/pve/pve-root-ca.
> 
> Any help in this matter is greatly appreciated.
> --
> BR,
> 
> Richard
> 
> 
> _______________________________________________
> pve-user mailing list
> pve-user@pve.proxmox.com
> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user

-- 
Mark Schouten     | Tuxis B.V.
KvK: 74698818     | http://www.tuxis.nl/
T: +31 318 200208 | info@tuxis.nl

Re: [PVE-User] pve webgui auto logoff (5m)

[Fabian Grünbichler]

> Mark Schouten <mark@tuxis.nl> hat am 08.07.2020 14:32 geschrieben:
> 
>  
> Hi all,
> 
> We're still having this issue. I'm trying to find the place where the
> timestamp used for verification is coming from, but I can't figure it
> out.
> 
> Obviously the issue originated from the incorrect time while installing,
> but that is fixed now:
> 
> root@node01:~# timedatectl status
>                Local time: Wed 2020-07-08 14:31:42 CEST
>            Universal time: Wed 2020-07-08 12:31:42 UTC
>                  RTC time: Wed 2020-07-08 12:31:42
>                 Time zone: Europe/Amsterdam (CEST, +0200)
> System clock synchronized: yes
>               NTP service: active
>           RTC in local TZ: no
> root@node02:~# timedatectl status
>                Local time: Wed 2020-07-08 14:31:43 CEST
>            Universal time: Wed 2020-07-08 12:31:43 UTC
>                  RTC time: Wed 2020-07-08 12:31:43
>                 Time zone: Europe/Amsterdam (CEST, +0200)
> System clock synchronized: yes
>               NTP service: active
>           RTC in local TZ: no
> root@node03:~# timedatectl status
>                Local time: Wed 2020-07-08 14:31:43 CEST
>            Universal time: Wed 2020-07-08 12:31:43 UTC
>                  RTC time: Wed 2020-07-08 12:31:43
>                 Time zone: Europe/Amsterdam (CEST, +0200)
> System clock synchronized: yes
>               NTP service: active
>           RTC in local TZ: no
> 
> Please advise..

either wait, or touch the authkey files, or remove them.

fixed in git already: https://git.proxmox.com/?p=pve-access-control.git;a=commit;h=9de25de807b6843c971f1863e811cf76ee4c9b23

;)

Re: [PVE-User] pve webgui auto logoff (5m)

[Mark Schouten]

On Wed, Jul 08, 2020 at 03:04:58PM +0200, Fabian Grünbichler wrote:
> either wait, or touch the authkey files, or remove them.

You mean:
       61      1 -rw-------   1 root     www-data     1679 Dec 10  2020 /etc/pve/priv/authkey.key
       28      1 -rw-r-----   1 root     www-data      451 Dec 10  2020 /etc/pve/authkey.pub

?

> fixed in git already: https://git.proxmox.com/?p=pve-access-control.git;a=commit;h=9de25de807b6843c971f1863e811cf76ee4c9b23
> 
> ;)

That's just cheating :)

-- 
Mark Schouten     | Tuxis B.V.
KvK: 74698818     | http://www.tuxis.nl/
T: +31 318 200208 | info@tuxis.nl

Re: [PVE-User] pve webgui auto logoff (5m)

[Fabian Grünbichler]

On July 8, 2020 3:48 pm, Mark Schouten wrote:
> On Wed, Jul 08, 2020 at 03:04:58PM +0200, Fabian Grünbichler wrote:
>> either wait, or touch the authkey files, or remove them.
> 
> You mean:
>        61      1 -rw-------   1 root     www-data     1679 Dec 10  2020 /etc/pve/priv/authkey.key
>        28      1 -rw-r-----   1 root     www-data      451 Dec 10  2020 /etc/pve/authkey.pub
> 
> ?

yes :)

>> fixed in git already: https://git.proxmox.com/?p=pve-access-control.git;a=commit;h=9de25de807b6843c971f1863e811cf76ee4c9b23
>> 
>> ;)
> 
> That's just cheating :)

Probably it fixed itself in the meantime anyway - unless your clock was 
really really off into the future ;)

Re: [PVE-User] pve webgui auto logoff (5m)

[Mark Schouten]

On Thu, Jul 09, 2020 at 09:42:01AM +0200, Fabian Grünbichler wrote:
> On July 8, 2020 3:48 pm, Mark Schouten wrote:
> Probably it fixed itself in the meantime anyway - unless your clock was 
> really really off into the future ;)

Dec 10, 2020. So we're not there yet. But I touched the files and now
the customer is very happy. Thanks!

-- 
Mark Schouten     | Tuxis B.V.
KvK: 74698818     | http://www.tuxis.nl/
T: +31 318 200208 | info@tuxis.nl