-1

When attempting to view the console for a virtual machine instance, the connection to the server fails. This issue prevents users from accessing the console interface of their VMs.

Recently we have updated the apache cloudstack version from 4.15.0 to 4.19.1.0 . After updating the version we are facing the issue that when user attempting to view the console for a virtual machine instance , the message shows on the browser “Access is denied for the console session. Please close the window and retry again”.

We also checked the /var/log/cloud.log of the consolepoxy vm. the logs are given as follows:

2024-08-03 06:59:17,552 INFO [cloud.consoleproxy.ConsoleProxy] (Console-Proxy-Main:null) Listening for HTTP CMDs on port 8001 2024-08-03 06:59:28,565 INFO [cloud.consoleproxy.ConsoleProxy] (Thread-12:null) Session null has already been used, cannot connect 2024-08-03 06:59:28,576 WARN [cloud.consoleproxy.ConsoleProxy] (Thread-12:null) External authenticator failed authentication request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g 2024-08-03 06:59:28,578 WARN [cloud.consoleproxy.ConsoleProxyAjaxHandler] (Thread-12:null) Failed to create viewer due to External authenticator failed request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g com.cloud.consoleproxy.AuthenticationException: External authenticator failed request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g at com.cloud.consoleproxy.ConsoleProxy.authenticationExternally(ConsoleProxy.java:564) at com.cloud.consoleproxy.ConsoleProxy.getAjaxVncViewer(ConsoleProxy.java:494) at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.doHandle(ConsoleProxyAjaxHandler.java:142) at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.handle(ConsoleProxyAjaxHandler.java:51) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77) at jdk.httpserver/sun.net.httpserver.AuthFilter.doFilter(AuthFilter.java:82) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:80) at jdk.httpserver/sun.net.httpserver.ServerImpl$Exchange$LinkHandler.handle(ServerImpl.java:848) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77) at jdk.httpserver/sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:817) at java.base/java.lang.Thread.run(Thread.java:829) 2024-08-03 06:59:35,505 INFO [cloud.consoleproxy.ConsoleProxy] (Thread-15:null) Session null has already been used, cannot connect 2024-08-03 06:59:35,513 WARN [cloud.consoleproxy.ConsoleProxy] (Thread-15:null) External authenticator failed authentication request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g 2024-08-03 06:59:35,514 WARN [cloud.consoleproxy.ConsoleProxyAjaxHandler] (Thread-15:null) Failed to create viewer due to External authenticator failed request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g com.cloud.consoleproxy.AuthenticationException: External authenticator failed request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g at com.cloud.consoleproxy.ConsoleProxy.authenticationExternally(ConsoleProxy.java:564) at com.cloud.consoleproxy.ConsoleProxy.getAjaxVncViewer(ConsoleProxy.java:494) at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.doHandle(ConsoleProxyAjaxHandler.java:142) at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.handle(ConsoleProxyAjaxHandler.java:51) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77) at jdk.httpserver/sun.net.httpserver.AuthFilter.doFilter(AuthFilter.java:82) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:80) at jdk.httpserver/sun.net.httpserver.ServerImpl$Exchange$LinkHandler.handle(ServerImpl.java:848) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77) at jdk.httpserver/sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:817) at java.base/java.lang.Thread.run(Thread.java:829) 2024-08-03 06:59:42,995 INFO [cloud.consoleproxy.ConsoleProxy] (Thread-18:null) Session null has already been used, cannot connect 2024-08-03 06:59:43,006 WARN [cloud.consoleproxy.ConsoleProxy] (Thread-18:null) External authenticator failed authentication request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g 2024-08-03 06:59:43,009 WARN [cloud.consoleproxy.ConsoleProxyAjaxHandler] (Thread-18:null) Failed to create viewer due to External authenticator failed request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g com.cloud.consoleproxy.AuthenticationException: External authenticator failed request for vm 225aa5cd-a218-4c21-80a2-07615a03325f with sid SAJxPJ7i1KWCsiMJXCWA3g at com.cloud.consoleproxy.ConsoleProxy.authenticationExternally(ConsoleProxy.java:564) at com.cloud.consoleproxy.ConsoleProxy.getAjaxVncViewer(ConsoleProxy.java:494) at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.doHandle(ConsoleProxyAjaxHandler.java:142) at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.handle(ConsoleProxyAjaxHandler.java:51) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77) at jdk.httpserver/sun.net.httpserver.AuthFilter.doFilter(AuthFilter.java:82) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:80) at jdk.httpserver/sun.net.httpserver.ServerImpl$Exchange$LinkHandler.handle(ServerImpl.java:848) at jdk.httpserver/com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77) at jdk.httpserver/sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:817) at java.base/java.lang.Thread.run(Thread.java:829)

steps tried:

1. Navigate to the VM instances page.
2. Select a specific VM instance.
3. Attempt to open the console view for the selected VM.

EXPECTED RESULTS
The console should load and allow interaction with the VM instance.