topic Re: not able to set session timeout with mgmt_cli in API / CLI Discussion

not able to set session timeout with mgmt_cli

Richard_Carson — Thu, 01 Aug 2019 05:16:55 GMT

I can't seem to set a longer then default session timeout using management cli at the moment. For example, if i wanted to increase it to 1200 second over the default 600 seconds i am using the command

mgmt_cli --root true login session-name test-session-timeout session-description test-session-timeout session-timeout 1200 --format json

But after logging in if i run a show session using the returned session id - session timeout still shows as 600seconds. Has anyone else experienced this? i also tried with mgmt_cli --conn-timeout, same result

mgmt_cli --session-id $SID show session

uid: "819cd746-8cd7-4263-bc9b-773ee0a56f65"
name: "test-session-timeout"
type: "session"
domain:
uid: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxxxx"
name: "System Data"
domain-type: "mds"
state: "open"
user-name: "WEB_API"
description: "test-session-timeout"
last-login-time:
posix: 1564636139402
iso-8601: "2019-08-01T06:08+0100"
expired-session: false
application: "WEB_API"
changes: 0
in-work: true
ip-address: "127.0.0.1"
locks: 0
email: ""
phone-number: ""
connection-mode: "read write"
session-timeout: 600
comments: ""
color: "black"
icon: "Objects/worksession"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1564636140597
iso-8601: "2019-08-01T06:09+0100"
last-modifier: "WEB_API"
creation-time:
posix: 1564636139796
iso-8601: "2019-08-01T06:08+0100"
creator: "WEB_API"
read-only: true

Re: not able to set session timeout with mgmt_cli

Maik — Thu, 01 Aug 2019 06:40:31 GMT

Hey Richard,

I have also experienced this in the past. My guess is that it's related to bug which occurs when somebody is using the "--root true" parameter. If you do not specify this part and instead log in "manually" with a user who has the required set of permissions it is working as expected. Once you want to use the root user - w/o further login steps - the session-timeout defaults to 600. If you still want to use the the root argument you could add the "keepalive" command after a while in order to not let the session time out.

Regards,

Maik

Re: not able to set session timeout with mgmt_cli

Richard_Carson — Thu, 01 Aug 2019 07:12:25 GMT

Thank Maik you are correct it works with a username and password. I see the session timeout is set correctly then.

I was actually testing with a certificate user and password rather then -r true using the mgmt_cli -c -p option - it would appear that this mechanism is also blighted by the same bug:( and does not set the session time out to the given length.

Re: not able to set session timeout with mgmt_cli

Maik — Thu, 01 Aug 2019 07:15:11 GMT

Hm, maybe @Robert_Decker can help us in this case? 🙂

Re: not able to set session timeout with mgmt_cli

Tommy_Forrest — Thu, 01 Aug 2019 13:42:45 GMT

I've just made it a habit to issue "unset TMOUT" when I first log into a CLI.

My fingers remember it down even though my brain doesn't always remember.

Re: not able to set session timeout with mgmt_cli

PhoneBoy — Fri, 02 Aug 2019 19:08:06 GMT

What version are you trying this with?

Re: not able to set session timeout with mgmt_cli

Richard_Carson — Sat, 03 Aug 2019 00:23:29 GMT

This is on R80.10 jumbo take 203. Support have confirmed replication now to.

Re: not able to set session timeout with mgmt_cli

PhoneBoy — Sun, 04 Aug 2019 17:52:49 GMT

Looks like it is also an issue on R80.20.
Support ticket the way to go here.