Fusion no-auth issue across several xi servers

Post by **lmiltchev** » Wed Jun 11, 2014 2:27 pm

Update: Roughly an hour later, it is working again.

Is it still working correctly or the issue resurfaced again? We haven't been able to recreate the issue in house.

TBT · Post by **TBT** » Wed Jun 11, 2014 2:34 pm

lmiltchev wrote: Is it still working correctly or the issue resurfaced again? We haven't been able to recreate the issue in house.

Currently, yes. I'll keep an eye on it over the next week or two. Lets keep this open for now.

tmcdonald · Post by **tmcdonald** » Wed Jun 11, 2014 2:42 pm

Will do.

TBT · Post by **TBT** » Mon Jun 16, 2014 2:44 pm

To further our discussion this issue remains as initially reported, however, one new observation. After exactly 15 minutes all failed attempts mysteriously begin to work.

Is there anything you can think of within Fusion or xi causing this?

scottwilkerson · Post by **scottwilkerson** » Tue Jun 17, 2014 10:12 am

@TBT - I'm going to have our Fusion developer take a look at this when he get in today, we'll let you know what we find.

Thanks for keeping on top of this.

jomann · Post by **jomann** » Tue Jun 17, 2014 12:17 pm

Hello TBT,

Is there a specific xi server that this happens for or is it all of them? The way it authenticates it could be having issues if there is already a user authenticated using that browser in the xi server it's trying to connect to. It may also be a problem in fusion not actually creating a proper session. There was some fixes to the session creation in 2014 but it may still have an issue.

TBT · Post by **TBT** » Wed Jun 18, 2014 9:24 am

jomann wrote:Hello TBT,

Is there a specific xi server that this happens for or is it all of them? The way it authenticates it could be having issues if there is already a user authenticated using that browser in the xi server it's trying to connect to. It may also be a problem in fusion not actually creating a proper session. There was some fixes to the session creation in 2014 but it may still have an issue.

It is not a specific xi server. I've had several of our users test this out and observed mixed results. If you would like to discuss this further I can call you.

jomann · Post by **jomann** » Wed Jun 18, 2014 1:22 pm

Okay well we are still working on internal testing for issues with the session problems however the sessions are being replaced and there has already been developments on this - so when we have time we will be replacing how Fusion actually connects with xi. However, for the time being since it hasn't been able to be reproduced in house we will have to wait and see if the new updates fix these intermittent issues.

jomann · Post by **jomann** » Wed Jun 18, 2014 2:17 pm

Can you confirm that the original issue with only 1 xi server authenticating is fixed? When you say that it's not a specific server you mean that any of your 8 xi server's in Fusion may not authenticate correctly when you click to log into them? It would be helpful to know what you are clicking on exactly so we can try to replicate it here.

Unfortunately authenticating on a session is not the best way to do this which is why we plan on changing it. If you open a new browser, make sure all sessions have been deleted from the browser cache and log into Fusion without going to any xi server it "should" work - if it doesn't then there is definitely something wrong with how it is connecting to the xi server's and creating a session.

TBT · Post by **TBT** » Wed Jun 18, 2014 3:12 pm

jomann wrote:Can you confirm that the original issue with only 1 xi server authenticating is fixed? When you say that it's not a specific server you mean that any of your 8 xi server's in Fusion may not authenticate correctly when you click to log into them? It would be helpful to know what you are clicking on exactly so we can try to replicate it here.

Unfortunately authenticating on a session is not the best way to do this which is why we plan on changing it. If you open a new browser, make sure all sessions have been deleted from the browser cache and log into Fusion without going to any xi server it "should" work - if it doesn't then there is definitely something wrong with how it is connecting to the xi server's and creating a session.

1. No, the original issue was not fixed. Please see my post dated June 16th:

TBT wrote:To further our discussion this issue remains as initially reported, however, one new observation. After exactly 15 minutes all failed attempts mysteriously begin to work.

Is there anything you can think of within Fusion or xi causing this?

2. Login? The session should pass-through, no login required. Please see original post dated May 6th:

TBT wrote:Our users have individual accounts (UID1, UID2, UID3, etc) to log into Nagios Fusion. The Managed Fused Servers authenticate via Session using a general user roll account (fusionX), account credentials for this roll are the same across all Nagios xi servers.

Logged into Fusion as any user and navigating to the Tactical Overview, we see all xi servers with their respective network elements. The problem is, only 1 of the 7 xi servers successfully passes no-auth sessions when clicked to navigate to the xi server. For example:

Successful session
Logged in as UID1, navigate to Tactical Overview in Fusion, click xi-server1: Result = Successful pass-through, displays Home Screen, shows logged in as fusionX, URL reads https://domain/nagiosxi/

Failed sessions
Logged in as UID1, navigate to Tactical Overview in Fusion, click xi-server2: Result = Failed pass-through, displays login screen, URL reads https://doamin/nagiosxi/login.php?redir ... f&noauth=1

Looking at httpd logs there isn't anything that stands out.

Please advise,

3. Prior to reporting the issue all browser data and caches were cleared. Issue is still present. I can setup a remote session and show you first hand what's going on if these explanations aren't adding up.

Nagios Support Forum

Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers

Re: Fusion no-auth issue across several xi servers