SE goes down when VS is accessed via oAuth.

Products

• VMware Avi Load Balancer

Issue/Introduction

Multiple crashes observed on the SE and the SE was going down "Fatal Error"

 

Environment

Avi Version : 31.1.1 and 31.1.1 2p3

 

 

Cause

The crash happens when an SSO Policy with authentication Policy is attached to VS with Oauth.

Commands to check :  show virtualservice <Vs_name> summary

oauth_vs_config under show virtualservice

Stack trace will look like as below: (Administration > Support > Crash report)

#1 0x0000563e6111a9de in ngx_http_set_vs_oauth_settings

#2 0x0000563e6111c5eb in ngx_http_set_vs_sso

Resolution

- With authentication rule, we run into a scenario where auth keys and cookie are not auto-generated, resulting in a crash. 

- Since Oauth auth profile is directly attached to VS - it does not need an authentication rule to be configured.

Workaround:

- The crash will not happen if we have an SSO policy without authentication rule. 

- It is suggested to add the authentication rule after completing the configuration, as adding it during the initial setup is not recommended.

Fix version : 31.2.1