topic Re: ASDM asks for re-login in Network Security

ASDM asks for re-login

Florin Barhala — Fri, 21 Feb 2020 17:23:02 GMT

Hi guys,

I have two 5506 boxes running 9.8.3 patch 29. I login first time with ASDM and perform whatever tasks.

I left ASDM open and move to other windows (probably a browser); after couple minutes a pop up from ASDM login credetials shows up.

Obviously if I return to ASDM to make any other change I have to again enter my password.

Any idea how can I avoid re-login until next time I close/open ASDM?

Here's AAA config:

show run aaa
aaa authentication serial console LOCAL
aaa authentication http console RADIUS_GROUP LOCAL
aaa authentication ssh console RADIUS_GROUP LOCAL
aaa authentication enable console RADIUS_GROUP LOCAL
aaa authorization command LOCAL
aaa accounting serial console RADIUS_GROUP
aaa accounting enable console RADIUS_GROUP
aaa accounting ssh console RADIUS_GROUP
aaa local authentication attempts max-fail 5
aaa authorization exec authentication-server auto-enable

Thanks,

Florin.

Re: ASDM asks for re-login

Ben Walters — Fri, 09 Aug 2019 17:35:18 GMT

I believe this is related to the idle timeout, the command would be http server idle-timeout x and you would specify a value in minutes.

Hopefully this is helpful.

Re: ASDM asks for re-login

Florin Barhala — Tue, 13 Aug 2019 18:50:32 GMT

It might be - I ll try tomorrow; before that I have two questions:
idle-timeout Idle timeout in minutes (single routed mode only in case of ASDM)
session-timeout Session timeout in minutes (single routed mode only)

I am clear about idle-timeout, but what exactly does session-timeout means?
2nd: If I have another firewall like this
asa01/admin/pri/act#show mode
Security context mode: multiple
asa01/admin/pri/act# show firewall
Firewall mode: Router

Does this means none of the two settings do apply?

Re: ASDM asks for re-login

Ben Walters — Tue, 13 Aug 2019 20:05:49 GMT

The session timeout is a hard limit on the connection time, even if the session is being used, if you had it set to say 10 min the ASA would end the session after 10 minutes even if you were actively using it.

As for multi context mode I'm not too familiar with it but according to the config guide you should be able to use the commands.

In multiple context mode, complete this procedure in the context execution space. To change from the system to a context configuration, enter changeto context name.

Re: ASDM asks for re-login

Florin Barhala — Fri, 16 Aug 2019 07:46:06 GMT

I asked that because under same ASDM I have these two single routed mode FWs which keep asking for re-login.
But there are several context mode FWs with same settings for "show run all http" which don't care about re-login/don't ask for password once I logged on, no matter how much time.

Thoughts?
P.S. all FWs OS version.

Re: ASDM asks for re-login

Reez — Mon, 22 Apr 2024 04:07:41 GMT

its been a while, but did you find solution to your problem?

I am facing same issue on ASA 5525 running in multiple context mode