Your session has timed out.

[eclypse]

One thing about Nagios XI that causes pain for my users is that if a user clicks on a link they have received (i.e. a link to a particular host sent via email), and they are not already logged into Nagios XI, this results in a page that simply displays "Your session has timed out."

What are my options? Aside from informing users to login first via a separate link to the main page, is there some way to have my instance automatically redirect the user to a login page if they are not authenticated, or perhaps have it automatically log them in as the guest user?

[slansing]

What version of Nagios XI are you using, and what browser have you tested this with?

[eclypse]

We are currently using 2012R1.2. Tested with Internet Explorer 9 and latest version of Google Chrome.

Here's an example link that greets you with a "Your session has timed out." message if I send it to someone who is not currently logged in.

http://mynagiosxihost/nagiosxi/includes ... w=services

[lmiltchev]

Do you copy the URL from the browser's address bar? You need to click on the "Get Permalink" icon - see below:

perma.PNG

Then, if the user is logged in, it would show it. It the user is not logged in, he/she will be taken to a login screen.

[eclypse]

Yes, I was copying from the address bar, and the Timeout message is not displayed when using that link. However, there is still one problem. Let's say for example I want to provide the user a link to a specific host, using the Permalink like this one.

Code: Select all

http://mynagiosxihost/nagiosxi/index.php?&xiwindow=http%3A%2F%2Fnagiosxi%2Fnagiosxi%2Fincludes%2Fcomponents%2Fxicore%2Fstatus.php%3F%26host%3Dlocalhost

If the user is already logged in, the link works great, and shows me the service page for that specific host. If the user is not already logged in, it logs them in (because auto-login is enabled), but it instead brings you to the user's Home page instead. Is that expected behavior?

[scottwilkerson]

It looks like you found a bug. I will pass this on to the developers

[mguthrie]

This is by design, otherwise unauthenticated users would be able to access these XI pages directly. Once the user logs in, they will be redirected to the permalinked page.

[eclypse]

If I understand what you are saying, the expected behavior is that upon login, the user will automatically be redirected to the specified permalink page. Is that correct?

If that is correct, I can see that the redirection to the permalinked is not occurring automatically upon login. Instead the user is sent to their home page. I have tested this scenario both with auto-login enabled and disabled.

[scottwilkerson]

I actually have replicated this situation and we are going to work on a fix in a future release.

[atuttle]

I can replicate this by using the short hostname in the landing page definition.
Once changed to the FQDN the problem disappears.
In fact the issue is that the hostname used in the landing page needs to be an exact match of the name defined in /Admin/Manage System Config/Program URL.
If you use FQDN in one setting, use FQDN in all settings...