Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

identity blocked by auth policy emits connect/disconnects events frequently #505

Open
dovholuknf opened this issue Apr 15, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@dovholuknf
Copy link
Member

see openziti/desktop-edge-ui#115 for initial bug report and steps to reproduce
see openziti/ziti-tunnel-sdk-c#632 for tunneler bug

When an identity that was connected to a controller is updated with a new auth policy requiring MFA, the c sdk will continuously connect/disconnect from the controller and events are emitted the whole time:

[2023-04-15T15:39:35.962Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.160Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.202Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.403Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.448Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.650Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.695Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.894Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.938Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:37.137Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:37.179Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:37.381Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:37.430Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:37.639Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:37.687Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant