EDR: Browser sessions persist after service restart

[#1]

Environment

• EDR Server: 7.7

Symptoms

Users are still able to browse webpages without re-authentication after a restart of EDR services

Cause

An update in one of the services has caused persistence across sessions

Resolution

Workaround

1. Stop cb-enterprise

   • /usr/share/cb/cbservice cb-enterprise stop

2. Delete file /var/cb/redis/dump.rdb

   • rm /var/cb/redis/dump.rd

3. Update /etc/cb/redis.conf and /etc/cb/redis.conf.template by removing the '#' at the start of the line for 

   • save ""

4. Start cb-enterprise

   • /usr/share/cb/cbservice cb-enterprise start

Additional Notes

To test fix, connect to the UI and then restart services. The session should be closed and require the user to sign in

/usr/share/cb/cbservice cb-enterprise restart

 

Related Content

EDR: Does the Console Return to Login After Timeout?