管理员从 WebUI 成功登录后，会反复显示身份验证提示

3173

Created On 08/23/24 06:55 AM - Last Modified 02/11/25 21:44 PM

Symptom

对成功登录的管理员重复显示身份验证提示。

Environment

泛操作系统

Cause

Some kind of round-robin IP address condition affected the administrator user's access traffic.

The symptom can be checked on system log.
The same administrator 'testadmin' authenticated in short intervals from different IP addresses.

System logs

2024/08/23 15:57:58 info     auth           auth-su 0  authenticated for user 'testadmin'.   From: 10.0.0.100.
2024/08/23 15:58:15 info     auth           auth-su 0  authenticated for user 'testadmin'.   From: 10.0.0.100.
2024/08/23 16:00:20 info     auth           auth-su 0  authenticated for user 'testadmin'.   From: 10.0.0.100.
2024/08/23 16:00:39 info     auth           auth-su 0  authenticated for user 'testadmin'.   From: 10.0.0.102.
2024/08/23 16:00:55 info     auth           auth-su 0  authenticated for user 'testadmin'.   From: 10.0.0.104.
2024/08/23 16:01:15 info     auth           auth-su 0  authenticated for user 'testadmin'.   From: 10.0.0.105.

检查 WebUI 调试时，我们可以看到以下消息：

php.debug.log

#### "User is logged out due to isSameClient check failed

Resolution

检查网络环境并停止对访问 PAN-OS 管理IP 地址的流量进行循环IP 地址配置。

Additional Information