If ServiceEnabled is set to "False", the user cannot create

malathi
Minnow

Posts: 2

If ServiceEnabled is set to "False", the user cannot create Nov 27, 2023 6:55:13 GMT

Quote

Post by malathi on Nov 27, 2023 6:55:13 GMT

If true , this service is enabled. If false , it is disabled, and new sessions cannot be created, old sessions cannot be deleted, and established sessions can continue operating.

Now I have service enabled set to false Next I have created a session via Redfish and the session cannot be created because the enabled service is false.

172.20.48.110/redfish/v1/SessionService/Sessions/

{
"UserName" : "root2",
"Password":"SuperUser123"
}

Next, the user deletes an already created session when the enabled service is set to false, the session cannot be deleted because the enabled service is false.

Next, I have already created a user account as root2. A new session is created when I am logged in to the user account in the WebUI, when ServiceEnabled is set to false.

My question is, I can't create a new session in this Redfish, the service enabled is wrong.

When I have the user account logged in as WebUI, the session is created when service enabled is false.

Last Edit: Nov 28, 2023 4:41:06 GMT by malathi

mraineri
Administrator

Posts: 1,056

Member is Online

If ServiceEnabled is set to "False", the user cannot create Nov 27, 2023 15:24:40 GMT

Quote

Post by mraineri on Nov 27, 2023 15:24:40 GMT

We may need to clarify the intent is to show that Redfish operations to create/delete sessions are disabled when ServiceEnabled is set to false. I wouldn't expect this setting to necessarily impact other interfaces, but I'll ask others to see if they agree/disagree with me.

malathi
Minnow

Posts: 2

If ServiceEnabled is set to "False", the user cannot create Nov 28, 2023 4:35:30 GMT

Quote

Post by malathi on Nov 28, 2023 4:35:30 GMT

Hi,
My doubt is when the service enabled property of Session Service is set to false, and the corresponding new session is not created by redfish action,
but when on login openbmc webui, i could able to see a new session is getting created - please confirm if this behaviour is correct ?

Thanks,
Malathi.

mraineri
Administrator

Posts: 1,056

Member is Online

If ServiceEnabled is set to "False", the user cannot create Nov 28, 2023 13:49:19 GMT

Quote

Post by mraineri on Nov 28, 2023 13:49:19 GMT

Yes, that's what I'm suggesting here. The intent of the property is to specifically prevent a user from performing a POST operation on the SessionCollection and a DELETE operation on the Session resource; there can be other paths to create sessions depending on the interfaces available, such as logging in via a web UI where the user is not performing these Redfish operations. I'll need others to weigh in on this (and potentially propose changes to clarify the property), but this behavior looks correct to me.