Multiples sessions created in a second resulting in a "Two many active sessions" block

[Caillet]

Hello everyone,

I'm using Qlik Sense enterprise (september 2019)

This happened a few time : when i reopen a tab that had a Qlik Sense application open an hour ago or so, i get a "Two many active sessions" block.

When I look at the AuditSecurity_Repository.txt i see multiples lines like this  (full detail in attachment):

20191015T144740.587+0200 User 'COMPANY\acaillet' was synced
20191015T144740.627+0200 User access User: 'COMPANY\acaillet' Last used: '20191015T124740.000+02:00' OperationType: 'Update'
20191015T144740.629+0200 Professional access granted for User: 'COMPANY\acaillet' with UsageID: 'f3778774-a681-418e-9cd8-0c98b0be0a21' SessionID: '3287b40b-fe2b-4683-92b1-3e5694c823eb' SessionCount: '1' OperationType: 'UsageGranted'
20191015T144740.696+0200 User access User: 'COMPANY\acaillet' Last used: '20191015T124740.000+02:00' OperationType: 'Update'
20191015T144740.698+0200 Professional access granted for User: 'COMPANY\acaillet' with UsageID: 'bf107a70-006c-45aa-b9a3-8a1a3327c288' SessionID: '1501737f-4949-4cbc-84e8-7c55c986b119' SessionCount: '2' OperationType: 'UsageGranted'
20191015T144740.740+0200 Professional access granted for User: 'COMPANY\acaillet' with UsageID: '84da24fb-f10c-43ca-8339-6cfdc63597f8' SessionID: '00f13203-86de-4370-bbdd-e382f3eaced1' SessionCount: '2' OperationType: 'UsageGranted'
20191015T144740.788+0200 User access User: 'COMPANY\acaillet' Last used: '20191015T124740.000+02:00' OperationType: 'Update'
20191015T144740.790+0200 Professional access granted for User: 'COMPANY\acaillet' with UsageID: 'be2a30ee-81d0-4d1b-983d-54fd7266dea8' SessionID: '5174f149-cce5-489a-9aa4-2b968d4192ca' SessionCount: '4' OperationType: 'UsageGranted'
20191015T144740.831+0200 User access User: 'COMPANY\acaillet' Last used: '20191015T124740.000+02:00' OperationType: 'Update'
20191015T144740.833+0200 Professional access granted for User: 'COMPANY\acaillet' with UsageID: '730f6455-eb2b-4305-879f-ce7f907a87ef' SessionID: '25c8c538-8a50-4931-9fad-f8052680714c' SessionCount: '4' OperationType: 'UsageGranted'
20191015T144740.834+0200 User access User: 'COMPANY\acaillet' Last used: '20191015T124740.000+02:00' OperationType: 'Update'
20191015T144740.836+0200 Professional access granted for User: 'COMPANY\acaillet' with UsageID: 'ca94d358-a289-4d61-8550-f4f6717049a2' SessionID: 'b434ff46-74ed-4955-b24c-aa8f41b46bd0' SessionCount: '5' OperationType: 'UsageGranted'
20191015T144740.885+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: '24b32aa6-c63b-401d-9b78-a58071184087' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144740.933+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: '96813dc5-d7dd-4a71-9884-c960d172ab18' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144740.941+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: '2b2cc574-7e8e-470e-9c05-9f3862402c79' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144741.051+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: 'ae7102de-21bf-48ff-b2b4-89130a1a8cae' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144741.051+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: 'a770b967-53d2-446a-9ed9-b4bed54df266' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144741.071+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: '5547023e-a0c4-4cc5-81d5-91816f158719' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144741.084+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: '9485257f-de92-4b69-920c-b62ceecada11' SessionCount: '6' OperationType: 'UsageDenied'
20191015T144741.100+0200 Access was denied for User: 'COMPANY\acaillet' with AccessID '53d0e4ad-e570-41f6-963f-d3af6e92a476' SessionId: '327b0bdf-c5e7-478b-9270-850ff1215492' SessionCount: '6' OperationType: 'UsageDenied'

From what i can read it says it tries to open 13 sessions in less than a second, and the 'Last used' timestamp is not keeping up.

I use Chrome (up to date) as a browser and i don't have any intrusive extensions...

Anybody knows what the issue is and how to fix it ?

[martinpohl]

is your account the service account for the server?

You have to set a separate service account!

[Caillet]

It's not, we have a separate "sa_Qlik" user as a service account.

Also, it happend to another user two month ago.

[Giuseppe_Novello · Accepted solution]

This might be related to bug# QLIK-96217, this could be related about appcontent calls creating individual sessions, app content can be: front cover images of apps, when you select the stream it loads those images of those apps that it is displaying within that stream, and if you have more than 5 it will hit your 5 sessions against 1 token limitation. Now, I cannot say in certain this is your case, you need to compared the logs/ repository/ trace/ license_repository logs, check the session count down "session: 1" and so on, and it has the session ID and then compare it with the logs / proxy / audit / Auditsecurity_proxy and if you see and Appcontent/ XXX.png or jpg( etc) call against that session ID you identify early in the license_repository logs, then we can confirm this is the issue and case, if you are unsure, then I would suggest to open a support ticket and so we assist you to identify the issue and/or the bug above is in fact you issue. Now, bug, still under investigation by R&D, so no current fix or workaround. 

Best Regards,

Gio

[Caillet]

Hi Giuseppe and thank you for your reply !

I do have many front cover images in the apps in the streams, i'll look into that soon.

[Caillet]

So i've checked both files :

• logs/ repository/ trace/ license_repository
• logs / proxy / audit / Auditsecurity_proxy

And indeed they match, 13 sessions open for 13 files in /appcontent/[id]/[file].png, with the event on the licence log timed just before the proxy log.

Also,  the front cover images originate both from a stream and from the Personal/Work apps

I'm not sure it's related but so far the bug only occured when returning to a tab opened a while ago, so i'll try to avoid doing that and see if it happens again.

Thanks for the help ! And have a great day

[Giuseppe_Novello]

A possible workaround, that you can help to avoid this is, make sure to kill all the sessions / close the browser before you leave to do something for a long period time ( leaving for lunch or leaving for the day), it seems to be related in having the browser open with an app, and let the computer go to sleep mode and this creates an some sort of "ghost" session which thinks that each appcontent call is a new session.  Again, R&D is working on a fix, so no ETA of a fix yet. 

Best Regards,

Gio

[ken4runner]

This sounds like the issue described in https://support.qlik.com/articles/000087945
(Which lists a few versions where the fix is available)