Re: Admin won't stay logged in for more than a dozen seconds
Seriously impressive work there on your part. Good of you to report back.
If you want to pursue anything else with your WAC124, or get a message through to the Netgear minders who watch that device, you might like to drop by in the appropriate section for this hardware:
That's OK (when we finally get the right result). I realize these things can be troublesome, although it is easy to forget that when things are not going right. What is more interesting perhaps is what happens after a problem is figured out.
There are a some interesting findings in there, and it would be possible to do better. For example: re-authorization should be guardbanded with sanity checks to ensure it doesn't prematurely keep logging someone out. The current situation suggests that a naive perfect-world assumption drove the design. How exactly it failed may also be interesting to consider. Normally tokens are checked for expiration before advancing further. Yet the clocks were correct, and the NTP used was that from Netgear. Difficult to understand how that went wrong. I wonder if the normally short timeouts were actually intended, or represent some aspect of the same bug/issue related to this.
More difficult would be to figure out why some incorrect entries were kept active for an extremely long time (about a week) when they should have been history. Now I did reboot this thing early on, but didn't keep trying that after it turned out not to work. The main reason not to keep rebooting it was that I had people actively using it for work. So, without some indication it would fix the problem, it was an expensive option. Apart from the admin issue, it was working fine. Accordinging, I bought a new router and started transitioning clients there, but managed to come up with this solution before reaching the point of decommmisioning.
One comment in this thread sadly suggests that at least some do not take customer input seriously and/or simply do not care to address the issues.
One comment in this thread sadly suggests that at least some do not take customer input seriously and/or simply do not care to address the issues.
I don't know which comment that was, but most of the reponses here are from other users rather than anyone at Netgear.
There is a small team of official minders who do their best with limited resources. Like most people, though, they probably show more sympathy to people who come across as reasonable individuals. Hang around here for any time and it won't be long before you come across unacceptable behaviour and downright rudeness.
A lot depends on the problem and the device involved. That is why I should have been quicker off the mark.
Some products seem to get more attention that others. Perhaps it reflects the price tag. (For example, gaming routers have their own specialists who are quick to respond, as they should given the cost of those things.)
Pro devices like the WAC124 certainly have their own specialists and, when you hit the right section, less noise traffic to drown out the real signal.
Those gadgets are very different from the consumer stuff that usually comes up in this section which, let's face it, sits at the bottom of the food chain in technology, cost and consumer understanding. As you may have worked out, I've never been let loose on business devices.
Re: Admin won't stay logged in for more than a dozen seconds
Fair enough. It is hard to tell sarcasm from intention based upon text messages though, unless you happen to know the person well.
You could presume that my response was also sarcastic...
But no, not true, I got it wrong there. Oops. My mistake there.
Anyway, after a week or so of greatly improved behavior, I would take a fairly reasonable guess that the underlying admin timeout issue has a fundamental flaw or bug in it. This would be behind many of the other threads related to this issue. The fixes in those cases were more likely to be happen-stances that avoided running into the real bug.
Today for example, someone reported that the printer was inaccessible. I got into the router and found that I was getting about 5-6 clicks before logging me out. So it seemed to have regressed a bit. It was better than before when 2-3 clicks was the norm, so that was a little more workable. A few days earlier, it seemed there wasn't a limit.
What I also found was that the printer was listed as on-line, but without an IP address. Checked if we had run out of them (dhcp), no. Power cycled the printer, and it came back on line. Oddly, it was still listed as online even when it powered down, and everything refreshed in the router. Who originally created the problem isn't my issue (who knows). It seems that one apparently-unrelated problem triggers and/or exposes another.
The problem is that the admin should stay logged in long enough to find out where the problem might be.
Re: Admin won't stay logged in for more than a dozen seconds
And today, the problem is back again. Absolutely nothing has changed since it was last working.
Need to add another machine to the network, but the thing is logging me out before I can get there. What the heck is wrong with this thing? What basic bit of logic is in there that doesn't allow a session to exist for more than a handful of seconds?
It was a dumb idea to route all the logins this way in the first place -- a technology that Netgear have not either thought through or executed properly. Avoid ! as it doesn't seem they will either correctly identify or fix the issue
Re: Admin won't stay logged in for more than a dozen seconds
Thanks for the suggestion. It seems that it may make sense in that this appears to be a token issuing problem. Such things are time sensitive, and my thought is that there is some clock skew/drift going on. The apparent flaw in the design is that once a token is obtained, it should be valid for a reasonable period without being re-checked. Whatever they are doing seems to be resulting in incorrect attempts to obtain new and unncessary tokens.
My thought is that the clocks have drifted somewhere (even though they are supposed to be all sync'd) and that is a factor.
I haven't found anything suggesting mine was having some https issue, at this point. But I appreciate the suggestion.
One brute force approach would be to disconnect it from the internet and thus deny it the means to try to do sso over the internet. However, all users would then also be kicked out, unless I can figure out a more selective means of doing it. In the meantime, I have added another router to the network and added the device there instead.
Re: Admin won't stay logged in for more than a dozen seconds
Another thought, there is a discussion under way on the "Idea Exchange" section. It does not quite fit in with your problem, with a very short interval, but it is along the same lines.
Re: Admin won't stay logged in for more than a dozen seconds
wrt very short timeout link posted: Yep, it was always bad in that regard too.
Did they really mean it to be so short, or did it get messed up in some fundamental way that caused both of the problems? My guess is the latter. The timeout was always so ridiculously short that it is difficult to believe that anyone would have deliberately made it that way.
Re: Admin won't stay logged in for more than a dozen seconds
Well, not quite. There were 2 things that were done, and it seems undoing either of them brings the problem back again. The first is to disable mu-mimo, as noted previously, the other is to enable access to wired ports. I don't know if there is any rhyme or reason to that. But once the immediate problem is addressed, the other problem that others have spoken of (very short sessions before logout) also seems to be solved.
What I notice is that some requests, such as getting the current list of devices take many seconds to execute. It ought to be a simple local lookup, so not sure which scenic route it might be taking. Or what might be delaying it.
