Opennebula 6.0.0.3 (docker) directly logs out after login

Please, describe the problem here and provide additional information below (if applicable) …


Versions of the related components and OS (frontend, hypervisors, VMs):

6.0.0.3 from docker

Steps to reproduce:

Setup a docker based env, connect sunstone + oned

Current results:

When logging in with a valid user, the following happens:

  • the login “succeeds”
  • the regular dashboard is shown and reloaded 3-4 times within about 1s
  • the login screen is shown again

I checked the serveradmin/oneadmin and they look good.
I tried with fireedge enabled and disabled, the result is the same.

I checked that the certs are valid, that passenger is running fine, that oned is up and running.

The logfiles of sunstone show the following access:

Sun Jul 03 22:37:06 2022 [I]: 2a0a:e5c0:10:1:224:81ff:fee0:e040 - - [03/Jul/2022:22:37:06 +0000] "POST /login HTTP/1.1" 204 - 0.7684
Sun Jul 03 22:37:06 2022 [I]: 2a0a:e5c0:10:1:224:81ff:fee0:e040 - - [03/Jul/2022:22:37:06 +0000] "GET / HTTP/1.1" 200 - 0.1575
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:224:81ff:fee0:e040 - - [03/Jul/2022:22:37:08 +0000] "GET /datastore?timeout=true&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 200 - 0.0233
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:224:81ff:fee0:e040 - - [03/Jul/2022:22:37:08 +0000] "GET /support/check?csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 400 - 0.0015
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d392 - - [03/Jul/2022:22:37:08 +0000] "GET /support/check/version?csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0008
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d392 - - [03/Jul/2022:22:37:08 +0000] "GET /vm?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0010
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d392 - - [03/Jul/2022:22:37:08 +0000] "GET /image?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0009
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d37a - - [03/Jul/2022:22:37:08 +0000] "GET /user?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0010
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d392 - - [03/Jul/2022:22:37:08 +0000] "GET /group?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0008
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d3ec - - [03/Jul/2022:22:37:08 +0000] "GET /vnet?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0011
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:b3ff:fe20:331e - - [03/Jul/2022:22:37:08 +0000] "GET /host?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0009
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:b3ff:fe20:331e - - [03/Jul/2022:22:37:08 +0000] "GET /cluster?timeout=false&pool_filter=-2&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0009
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d392 - - [03/Jul/2022:22:37:08 +0000] "GET /user/18?id=18&csrftoken=41f52012f1486c240fc903852b513f0ee839bc7fef1e5fc6ac09831339318d57 HTTP/1.1" 401 - 0.0009
Sun Jul 03 22:37:08 2022 [I]: 2a0a:e5c0:10:1:225:90ff:fe1a:d37a - - [03/Jul/2022:22:37:08 +0000] "GET /login HTTP/1.1" 200 - 0.0046

Oned lists the following:

Sun Jul  3 22:37:06 2022 [Z0][AuM][D]: _authenticate: -
Sun Jul  3 22:37:06 2022 [Z0][Lis][I]: Stopping 

fireedge (when enabled and sunstone configured to talk to it) seems not to log anything.

Expected results:

  • it is possible to login

I found a workaround:

  • stop opennebula-httpd
  • Start ruby /usr/lib/one/sunstone/sunstone-server.rb

It works!