Description of problem: The key UserSessionTimeOutInterval for engine-config is used to set timeout interval in minutes, after which inactive user sessions expire. It doesn't take effect for VM Portal, but works perfectly for Administrator Portal. Version-Release number of selected component (if applicable): 4.2.7 How reproducible: always Steps to Reproduce: 1. engine-config --set UserSessionTimeOutInterval=1 2. systemctl restart ovirt-engine 3. in 2 annonymous windows log into VM portal and Administrator Portal 4. Wait more than 1 minute and see that the user is logged out from Admin but not VM Portal Actual results: User in VM Portal is never logged out Expected results: the parameter takes effect for both Portals Additional info: Most likely the difference is due to the fact that in ovirt-web-ui we have JS frontend and there are perdiocal REST API requests, while in Admin Portal it is handled in a different way? Maybe we should resolve it providing some counter/observer in ovirt-web-ui? Justification from a customer why it is a bug: "From the perspective of the user and the administrator: - one product feature has been lost - the behavior is no longer consistent to the documentation - there is a big security risk because the VM_Portal remains logged in. Since the VM portal is hidden when the console is opened, the user does not log off the portal while working with his VM. As a result, hundreds of VM portals remain active throughout the day and noticeably burden the RHV management server. This is what I can notice during my work on Management-Portal. "
https://github.com/oVirt/ovirt-web-ui/pull/968
(In reply to Michal Skrivanek from comment #3) > https://github.com/oVirt/ovirt-web-ui/pull/968 Merged 16-Apr: https://github.com/oVirt/ovirt-web-ui/pull/968#event-2279267505 smacko tested and approved 16-Apr: https://github.com/oVirt/ovirt-web-ui/pull/968#issuecomment-483598228
Note: Logout components were refactored [1] and touched the SessionActivityTracker in PR 868. This caused regression [2]. Regression is fixed in [3]. [1] https://github.com/oVirt/ovirt-web-ui/pull/1014 [2] https://github.com/oVirt/ovirt-web-ui/issues/1024 [3] https://github.com/oVirt/ovirt-web-ui/pull/1025
Verified on ovirt-engine 4.3.5.3-0.1.el7. Verified by following the reproducer.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2449
sync2jira