SESSION DROPS IN CAPM

[Cassio Pinheiro]

Hi,

When the session of the user in use in CA PM drops, his return logs in with admin.

Is there a way to get around this?
Or create/configure a session purge?

Cássio

[Jeffrey Pinard]

What version of PM are you using?

To invalidate all current user logins, restart the console service.   There is no way to invalidate 1 specific login.

When you say their session drops, do you mean, close the browser?
We use a cookie that's good for 20 mins.
When the browser closes, it should clear the cookie.

Is the user using a browser that's running ON the PC box?  If so, there is a SsoConfig SSO setting to auto login to admin account.  Make sure this is disabled to force local logins on PC box.

Localhost User Sign-In Page Enabled: Disabled
Localhost User Enabled: Disabled
Localhost User ID: 1

[Cassio Pinheiro]

Hey good afternoon.

I didn't understand. "Disable force local login".

Yes, authentication is based on the local PC user.

Cássio

[Jeffrey Pinard]

If you have a desktop on the PC linux box, you could run a browser on the PC box.  The localhost SsoConfig settings allow you to be automatically logged into a specific account ( admin by default ) when loading the PC web page.   It's was enabled by default, but has since been disabled by default.

If there is still a valid cookie to the browser session, and the PC server hasn't been restarted since the user got the cookie, they might be automatically logged in.

You could try repeating the steps and before loading the PC UI, bring up Chrome dev tools and goto Network tab. Enable preserve log checkbox.  Then try and go into PC and see if you are automatically logged in.  If so, then right click in network tab, and save to HAR file.  You can sent the file to me via communities email and I can review it to see what is going on.

[Cassio Pinheiro]

Hi Jeffrey.

I couldn't get to this configuration, can you tell me the way. Other than that, I'm doing the other orientation of saving the HAR.

Thanks
cassio

[Jeffrey Pinard]

SsoConfig is under /opt/CA/PerformanceCenter.

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/dx-netops/21-2/Performance-Monitoring-with-DX-Performance-Management/securing/single-sign-on/update-single-sign-on-website-settings.html