ci.linaro.org has very short login session and "remember me" doesn't work

Bug #1325925 reported by Paul Sokolovsky
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Linaro CI
Confirmed
Medium
Unassigned

Bug Description

From previously submitted ITS request:

> ##- Please type your reply above this line -##
>
> You are registered as a CC on this support request (
> linaroithelp.zendesk.com/requests/2459).
> Reply to this email to add a comment to the request.
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> May 30 15:35
>
> CC'ing Milo so that he & Fathi can advise/discuss on how to proceed with
> this. Since you got logged out that quickly, I think attention needs to
> focus on the ci platform in the first instance.
>
> [image: Mark Brown]
>
> *Mark Brown*
>
> May 30 15:24
>
> Hi,
>
> So, I was logged in this morning and just found I was logged out a moment
> ago. I can well believe this is something either on the Jenkins side or in
> some interaction between Jenkins and Crowd but it needs debugging.
>
> Thanks,
> Mark
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> May 30 08:43
>
> Mark
>
> If you are rarely finding yourself logged out of cards, I suspect the
> problem is with the authentication logic on ci. cards uses Crowd for
> authentication and so will be subject to the same 7.5 hour session timeout.
>
> I think that this will need to be investigated further by the Systems team
> so that they can check how they are evaluating when a session expires. Just
> because we've got Crowd set to 7.5 hours doesn't necessarily mean that the
> authentication code on ci is honouring that.
>
> Regards
>
> Philip
>
> [image: Mark Brown]
>
> *Mark Brown*
>
> May 27 17:43
>
> Hi,
>
> I just logged in using Chromium. Mainly I use that and
> validation.linaro.org(which doesn't use Crowd), plus less often cards
> - I rarely find myself
> logged out of cards.
>
> Note that even 7.5 hours is rather short, it's going to expire overnight.
>
> Thanks,
> Mark
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> May 27 09:22
>
> Hi Mark
>
> In your original email, you said that the session appears to be well under
> 6 hours. I've confirmed that the session duration is set to 7.5 hours.
>
> Can you please give me more information such as when you believe you are
> starting a session and when you believe the session is ending so that I can
> investigate further? Please also let me know which browser you are using
> and the other Linaro sites you are visiting with that same browser during
> your ci session.
>
> Thanks.
>
> Philip
>
> [image: Mark Brown]
>
> *Mark Brown*
>
> May 24 14:14
>
> Hi,
>
> This still appears to be an issue.
>
> Thanks,
> Mark
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> May 23 15:12
>
> Can this ticket be closed or is the problem ongoing?
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> Apr 25 11:13
>
> The session timeout in Crowd is set to 7.5 hours which is a working day.
> If you are saying that your session on ci isn't lasting that long, it isn't
> Crowd.
>
> Please confirm the timing of when the session is expiring.
>
> Philip
>
> [image: Mark Brown]
>
> *Mark Brown*
>
> Apr 25 11:08
>
> Hi Philip,
>
> Fathi has always said that this is due to the integration with Crowd.
>
> Thanks,
> Mark
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> Apr 25 11:05
>
> OK, in which case this is something that will need to be taken up with the
> Systems team as they manage the code that is the application. You've copied
> Fathi so I'm going to close this ticket as there isn't anything ITS can do
> to help, I'm afraid.
>
> [image: Mark Brown]
>
> *Mark Brown*
>
> Apr 25 10:43
>
> Hi,
>
> ci.linaro.org is a web application. I don't know how I could configure SSH
> for it...
>
> Thanks,
> Mark
>
> [image: Philip Col]
>
> *Philip Colmer* (IT Services)
>
> Apr 25 09:24
>
> Hi Mark
>
> Have you tried enabling keep-alive? To enable the keep alive, edit
> ~/.ssh/config (create the file if it doesn't exist). Insert the following:
>
> Host *
> ServerAliveInterval 300
> ServerAliveCountMax 2
>
> Regards
>
> Philip
>
> [image: Mark Brown]
>
> *Mark Brown*
>
> Apr 24 17:26
>
> Hi,
>
> The login session expiration on ci.linaro.org appears to be absurdly low -
> I'm not sure what the exact number is but it's well under six hours. This
> makes the CI system very annoying to use.
>
> Thanks,
> Mark

Changed in linaro-ci:
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
Paul Sokolovsky (pfalcon) wrote :

Previously, there was also report that "Remember me" feature during login on ci.linaro.org doesn't work (ticking the box leads to exception). Unfortunately, at this time, I cannot find the original report (was via email).

Revision history for this message
Paul Sokolovsky (pfalcon) wrote :

So, based on the above, Jenkins Crown plugin on ci.l.o definitely doesn't work completely well, and might be suspected of timeout issue too (on other Jenkins servers, ticking "remember me" doesn't lead to exception, actually, on staging clone of ci.l.o I did testing migration, there was no such issue either).

On the other hand, there're few other issues being pursued on ci.l.o, and overall it's scheduled for migration, so any upgrades/investigations like this may interfere with that work.

So, what should be done depends on priority of this issue, and should require Fathi's feedback.

Revision history for this message
Chase Qi (chase-qi) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.