Bug 1913580 - [Ceph dashboard] Unable to login to ceph dashboard until clearing cookies
Summary: [Ceph dashboard] Unable to login to ceph dashboard until clearing cookies
Keywords:
Status: CLOSED CANTFIX
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Ceph-Dashboard
Version: 5.0
Hardware: Unspecified
OS: Unspecified
medium
high
Target Milestone: ---
: 5.1
Assignee: Ernesto Puerta
QA Contact: Sunil Angadi
Ranjini M N
URL:
Whiteboard:
Depends On:
Blocks: 1959686 1962133
TreeView+ depends on / blocked
 
Reported: 2021-01-07 07:42 UTC by Sunil Angadi
Modified: 2021-10-06 11:04 UTC (History)
10 users (show)

Fixed In Version: ceph-16.2.0-8.el8cp
Doc Type: Known Issue
Doc Text:
.Users cannot log in to the {storage-product} Dashboard with chrome extensions or plugins Users cannot log into the {storage-product} Dashboard if there are Chrome extensions for the plugins used in the browser. To work around this issue, either clear the cookies for a specific domain name in use or use the Incognito mode to access the {storage-product} Dashboard.
Clone Of:
: 1962133 (view as bug list)
Environment:
Last Closed: 2021-10-06 11:04:53 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github ceph ceph pull 40240 0 None open mgr/dashboard: Unable to login to ceph dashboard until clearing cookies 2021-03-19 13:05:48 UTC
Python 31456 0 None None None 2021-10-05 09:22:26 UTC
Red Hat Issue Tracker RHCSDASH-294 0 None None None 2021-08-24 13:00:22 UTC

Comment 16 Veera Raghava Reddy 2021-05-24 16:59:37 UTC 
Having challenge accessing Dashboard for second time in Google chrome, incognito mode.
When trying to login using correct credentials, get login page.
Also it does not give any hint that this may be issue with cookies.
This is an Usability issue.
Comment 17 avan 2021-05-25 12:46:22 UTC 
(In reply to Veera Raghava Reddy from comment #16)
> Having challenge accessing Dashboard for second time in Google chrome,
> incognito mode.
> When trying to login using correct credentials, get login page.
> Also it does not give any hint that this may be issue with cookies.
> This is an Usability issue.

I was successfully able to login using magna081 cluster provided by Sunil in Chrome, incognito mode.
Comment 19 Veera Raghava Reddy 2021-05-26 06:00:59 UTC 
https://extensa003.ceph.redhat.com:8443/#/login
admin/admin@123
Comment 21 Veera Raghava Reddy 2021-05-26 06:58:27 UTC 
Crome browser Version 90.0.4430.93 (Official Build) (64-bit)

Just speculating, is the issue because in the same browser we have launched previous version of dashboard in the previous release?
Comment 27 Ernesto Puerta 2021-10-04 17:48:21 UTC 
Reproduced and debugged.

The issue has to do with a malformed cookie `cmapi_cookie_privacy=permit 1 required` which contains whitespaces in the cookie-value (see RFC 6265 2.2). This is reported to Python 3.6 http.cookies SimpleCookie (https://bugs.python.org/issue31456).

Reproduced:
```py
>>> from http.cookies import SimpleCookie

>>> SimpleCookie('cmapi_cookie_privacy=permit 1 required')
<SimpleCookie: >

>>> SimpleCookie('cmapi_cookie_privacy=permit 1')
<SimpleCookie: >

>>> SimpleCookie('cmapi_cookie_privacy=permit')
<SimpleCookie: cmapi_cookie_privacy='permit'>
```

A work-around would consist on deleting that specific cookie "cmapi_cookie_privacy" or all cookies for the problematic domain.
Note You need to log in before you can comment on or make changes to this bug.