Symptoms
Users are unable to log in into SANnav, due to the following error:If the maximum number of sessions exceeds more than 25, the below alerts can be seen in the "authentication-rbac-mw" file on the SANnav.
authentication-rbac-mw - 2022-10-10 00:04:52.669 [http-nio-7089-exec-7] FFDC.Thr147 com.brocade.dcm.authentication.server.controller.AuthenticationController - Maximum session limit: 25, current session count: 25, current sessionLess count: 0 and totalSessionCount: 25
authentication-rbac-mw - 2022-10-10 00:04:52.669 [http-nio-7089-exec-7] FFDC.Thr147 com.brocade.dcm.authentication.server.controller.AuthenticationController - Maximum session limit reached for application
The user login attempts can be seen under the userlogintracker.log file.
[INFO ] 2022-10-10 05:14:53.565 [SessionValidationThread-1] User: Administrator logged out due to session expiry
[INFO ] 2022-10-10 05:19:57.084 [SessionValidationThread-1] User: Administrator logged out due to session expiry
Cause
SANnav allows you to manage up to 25 different user sessions simultaneously.If the number of sessions exceeds 25, the users are logged out.This issue can be seen when the user is trying to run some external scripts against the SANnav. For example: During a network scan, Vulnerability tools login to SANnav but potentially they do not 'log off' effectively, meaning there may be some sessions that are registered as 'open' in the system. They are not sessions 'left open' for illegal access but the session numbers (number of people who are logged in at any given time) seemed to not reset/reduce as a user would expect when a user logs out.
Resolution
Users can relogin to SANnav by restarting the services.Goto SANnav_install_home/bin folder and run restart-sannav.sh script to restart SANnav services.
[root@vm3124 /]# cd SANnav
[root@vm3124 SANnav]# ls
Portal_1.1.1_rc_bld51 Portal_1.srl sannav_portal_1.1.1-distribution.tar.gz
[root@vm3124 SANnav]# cd Portal_1.1.1_rc_bld51
[root@vm3124 Portal_1.1.1_rc_bld51]# ls
backuprestore compose data docker elasticsearch-worker jre lib report temp
bin conf database elasticsearch images kafka logs supportsave zookeeper
[root@vm3124 Portal_1.1.1_rc_bld51]# cd bin
[root@vm3124 bin]# ./restart-sannav.sh
NOTE: Users must check about the process that they use to log in into SANnav and exactly who or which user logs in and when.
