ziti-sdk-c icon indicating copy to clipboard operation
ziti-sdk-c copied to clipboard

identity blocked by auth policy emits connect/disconnects events frequently

Open dovholuknf opened this issue 1 year ago • 0 comments

see https://github.com/openziti/desktop-edge-ui/issues/115 for initial bug report and steps to reproduce see https://github.com/openziti/ziti-tunnel-sdk-c/issues/632 for tunneler bug

When an identity that was connected to a controller is updated with a new auth policy requiring MFA, the c sdk will continuously connect/disconnect from the controller and events are emitted the whole time:

[2023-04-15T15:39:35.962Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.160Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.202Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.403Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.448Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.650Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.695Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:36.894Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:36.938Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:37.137Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:37.179Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:37.381Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:37.430Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized
[2023-04-15T15:39:37.639Z]    INFO tunnel-cbs:ziti_tunnel_ctrl.c:726 on_ziti_event() ziti_ctx[test_mfa] connected to controller
[2023-04-15T15:39:37.687Z]    WARN tunnel-cbs:ziti_tunnel_ctrl.c:739 on_ziti_event() ziti_ctx controller connections failed: Not Authorized

dovholuknf avatar Apr 15 '23 15:04 dovholuknf