Page 1 of 2
Your session has timed out.
Posted: Thu Jan 24, 2013 2:55 pm
by eclypse
One thing about Nagios XI that causes pain for my users is that if a user clicks on a link they have received (i.e. a link to a particular host sent via email), and they are not already logged into Nagios XI, this results in a page that simply displays "Your session has timed out."
What are my options? Aside from informing users to login first via a separate link to the main page, is there some way to have my instance automatically redirect the user to a login page if they are not authenticated, or perhaps have it automatically log them in as the guest user?
Re: Your session has timed out.
Posted: Thu Jan 24, 2013 3:56 pm
by slansing
What version of Nagios XI are you using, and what browser have you tested this with?
Re: Your session has timed out.
Posted: Fri Jan 25, 2013 2:40 pm
by eclypse
We are currently using 2012R1.2. Tested with Internet Explorer 9 and latest version of Google Chrome.
Here's an example link that greets you with a "Your session has timed out." message if I send it to someone who is not currently logged in.
http://mynagiosxihost/nagiosxi/includes ... w=services
Re: Your session has timed out.
Posted: Fri Jan 25, 2013 2:57 pm
by lmiltchev
Do you copy the URL from the browser's address bar? You need to click on the "Get Permalink" icon - see below:
perma.PNG
Then, if the user is logged in, it would show it. It the user is not logged in, he/she will be taken to a login screen.
Re: Your session has timed out.
Posted: Fri Jan 25, 2013 3:08 pm
by eclypse
Yes, I was copying from the address bar, and the Timeout message is not displayed when using that link. However, there is still one problem. Let's say for example I want to provide the user a link to a specific host, using the Permalink like this one.
Code: Select all
http://mynagiosxihost/nagiosxi/index.php?&xiwindow=http%3A%2F%2Fnagiosxi%2Fnagiosxi%2Fincludes%2Fcomponents%2Fxicore%2Fstatus.php%3F%26host%3Dlocalhost
If the user is already logged in, the link works great, and shows me the service page for that specific host. If the user is not already logged in, it logs them in (because auto-login is enabled), but it instead brings you to the user's Home page instead. Is that expected behavior?
Re: Your session has timed out.
Posted: Fri Jan 25, 2013 5:28 pm
by scottwilkerson
It looks like you found a bug. I will pass this on to the developers
Re: Your session has timed out.
Posted: Sun Jan 27, 2013 3:31 pm
by mguthrie
This is by design, otherwise unauthenticated users would be able to access these XI pages directly. Once the user logs in, they will be redirected to the permalinked page.
Re: Your session has timed out.
Posted: Mon Jan 28, 2013 1:57 pm
by eclypse
If I understand what you are saying, the expected behavior is that upon login, the user will automatically be redirected to the specified permalink page. Is that correct?
If that is correct, I can see that the redirection to the permalinked is not occurring automatically upon login. Instead the user is sent to their home page. I have tested this scenario both with auto-login enabled and disabled.
Re: Your session has timed out.
Posted: Mon Jan 28, 2013 3:20 pm
by scottwilkerson
I actually have replicated this situation and we are going to work on a fix in a future release.
Re: Your session has timed out.
Posted: Tue Dec 03, 2013 2:32 pm
by atuttle
I can replicate this by using the short hostname in the landing page definition.
Once changed to the FQDN the problem disappears.
In fact the issue is that the hostname used in the landing page needs to be an exact match of the name defined in /Admin/Manage System Config/Program URL.
If you use FQDN in one setting, use FQDN in all settings...