GitHub user DerekHarter closed a discussion: Upgrade from 4.19.1.0 to 4.19.1.2 
login issues "Unauthorized Session expired"

Usually I defer upgrading cloudstack-management packages until ready, but 
wasn't paying attention on last `apt upgrade` and the `cloudstack-management` 
package was upgraded from 4.19.1.0 to 4.19.1.2.

The `cloudstack-management` service came up successfully.  However we are 
experiencing an error when attempting to login to the management gui.  We get 
the following error message in the web browser on login:

```
Unauthorized
Session expired, authorization verification failed.
```

And the following is I believe the relevant output from the 
`cloudstack/management/management-server.log` file.  It appears that the login 
initally succeeds, but then on `listZones` when doing service discovery, we are 
getting a "Session destroyed" from some unspecified javax servlet error 
happenning.  Any help or suggestions to clear or debug this would be 
appreciated.

```
2024-10-30 14:52:19,743 DEBUG [o.a.c.s.a.PBKDF2UserAuthenticator] 
(qtp364604394-595:ctx-3248c904) (logid:cc51d465) Retrieving user: admin
2024-10-30 14:52:20,240 DEBUG [c.c.u.AccountManagerImpl] 
(qtp364604394-595:ctx-3248c904) (logid:cc51d465) CIDRs from which account 
'Account 
[{"accountName":"admin","id":2,"uuid":"089520b8-19f5-11ef-9062-62ce04319667"}]' 
is allowed to perform API calls: 0.0.0.0/0,::/0
2024-10-30 14:52:20,240 DEBUG [c.c.u.AccountManagerImpl] 
(qtp364604394-595:ctx-3248c904) (logid:cc51d465) User: admin in domain 1 has 
successfully logged in
2024-10-30 14:52:20,253 INFO  [c.c.a.ApiServer] (qtp364604394-595:ctx-3248c904) 
(logid:cc51d465) Current user logged in under America/Chicago timezone
2024-10-30 14:52:20,253 INFO  [c.c.a.ApiServer] (qtp364604394-595:ctx-3248c904) 
(logid:cc51d465) Timezone offset from UTC is: -5.0

2024-10-30 14:52:20,390 DEBUG [c.c.a.ApiServlet] 
(qtp364604394-318:ctx-40905d41) (logid:cb70f222) ===START===  10.8.0.1 -- GET  
command=listZones&response=json
2024-10-30 14:52:20,391 DEBUG [c.c.a.ApiServlet] 
(qtp364604394-318:ctx-40905d41) (logid:cb70f222) Two factor authentication is 
already verified for the user 2, so skipping
2024-10-30 14:52:20,393 DEBUG [c.c.a.ApiSessionListener] 
(qtp364604394-318:ctx-40905d41) (logid:cb70f222) Session destroyed by Id : 
node0ujszoa88moju1brtuz34u2paj1 , session: 
Session@632d4db3{id=node0ujszoa88moju1brtuz34u2paj1,x=node0ujszoa88moju1brtuz34u2paj1.node0,req=1,res=true}
 , source: 
Session@632d4db3{id=node0ujszoa88moju1brtuz34u2paj1,x=node0ujszoa88moju1brtuz34u2paj1.node0,req=1,res=true}
 , event: 
javax.servlet.http.HttpSessionEvent[source=Session@632d4db3{id=node0ujszoa88moju1brtuz34u2paj1,x=node0ujszoa88moju1brtuz34u2paj1.node0,req=1,res=true}]
2024-10-30 14:52:20,397 DEBUG [c.c.a.ApiServlet] 
(qtp364604394-318:ctx-40905d41) (logid:cb70f222) ===END===  10.8.0.1 -- GET  
command=listZones&response=json
2024-10-30 14:52:20,401 DEBUG [c.c.a.ApiServlet] 
(qtp364604394-323:ctx-481244f3) (logid:7289069a) ===START===  10.8.0.1 -- GET  
command=listApis&response=json
2024-10-30 14:52:20,402 DEBUG [c.c.a.ApiServer] (qtp364604394-323:ctx-481244f3 
ctx-9502fd34) (logid:7289069a) Expired session, missing signature, or missing 
apiKey -- ignoring request. Signature: null, apiKey: null
2024-10-30 14:52:20,402 DEBUG [c.c.a.ApiServlet] (qtp364604394-323:ctx-481244f3 
ctx-9502fd34) (logid:7289069a) ===END===  10.8.0.1 -- GET  
command=listApis&response=json

```

GitHub link: https://github.com/apache/cloudstack/discussions/9876

----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscr...@cloudstack.apache.org

Reply via email to