UI interface access always comes with Unauthorized (session expired, authorization verification failed)

[smarydj]

problem

When we acess the cloudstack UI interface always it comes with Unauthorized
Session expired, authorization verification failed.

versions

We are Using apache cloudstack 4.21 version.
Operating system = Ubuntu 24.04.3 LTS
Kernal-version-->Linux cs 6.8.0-84-generic #84-Ubuntu SMP PREEMPT_DYNAMIC Fri Sep 5 22:36:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
mysql Ver 8.0.43-0ubuntu0.24.04.2 for Linux on x86_64 ((Ubuntu))

The steps to reproduce the bug

1.Just needs to refresh browser.
2.
3.
...

What to do about it?

No response

[boring-cyborg[bot]]

Thanks for opening your first issue here! Be sure to follow the issue template!

[DaanHoogland]

have you tried logging in?

[smarydj]

Yes I''m able to login in..

[DaanHoogland]

Ok, this is a know issue/feature. I think it is not going to get much traction as a bug as it has no functional consequences. It is a valid issue though.

[daviftorres]

One problem I’ve noticed with the CloudStack UI is that if I stay logged in for a while and the session times out, logging back in does not return me to the page I was previously on. It is hard to get back to what I was doing if I loose the reference.

[DaanHoogland]

@daviftorres , how about logging in and then going back to the page you were at in the history. Does that work?

[davift]

@daviftorres , how about logging in and then going back to the page you were at in the history. Does that work?

I hope it does, as long as it effectively takes to where we were. I currently treat any tab or window left behind and expired as useless to remind me what work I was doing and I simply start over. The technique is up to you ;-)

[DaanHoogland]

this was a question about the current functionality, ;) not about howto implement any fix or so.

So if you login and then go to the last activity that you did before the timeout in your browser history. That would bring you back to the right page, would it? I am just thinking of a workaround. I know getting a link and then having to log on first does work (iirc? starting to doubt myself now)

[kiranchavala]

Reopening the discusssion

I believe this a valid issue, and a pretty annoying message that comes up when a user tries to login to cloudstack

[sudo87]

@smarydj @kiranchavala could you try to test the fix and give feedback if it solves the issue #14054.

[andrijapanicsb]

mgmt is probably behind the LB and there is no source IP stickiness, If you log in via mgmt1, but 1min later you again access CloudStack, but this time via mgmt2, you will be logged out.
Othersiuse default mgmt server session time is 60min if not mistaken.

I vote for LB with no sticky sessions,.