Bug ID 874941: HTTP authentication in the access policy times out after 60 seconds

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1

Fixed In:
16.1.2.2, 15.1.6.1, 14.1.5

Opened: Jan 31, 2020
Severity: 3-Major

Symptoms

HTTP authentication in the access policy times out after 60 seconds, where previously, the timeout was 90 seconds.

Impact

HTTP authentication times out 30 seconds earlier than it did in previous versions. There is no way to configure this timeout value, so authentication fails for operations that require greater than 60 seconds to complete.

Conditions

Encountering the timeout of HTTP authentication in the access policy in this version of the software.

Workaround

None.

Fix Information

Added options to configure the HTTP connection and request timeouts in HTTP authentication. 1. A db key to configure Connection Timeout for HTTP Server configuration: +[APM.HTTP.ConnectionTimeout] +default=10 +type=integer +min=0 +max=300 +realm=common +scf_config=true +display_name=APM.HTTP.ConnectionTimeout 2. A db key to configure Request Timeout for HTTP Server configuration: +[APM.HTTP.RequestTimeout] +default=60 +type=integer +min=0 +max=600 +realm=common +scf_config=true +display_name=APM.HTTP.RequestTimeout

Behavior Change

Added db variables APM.HTTP.ConnectionTimeout and APM.HTTP.RequestTimeout as options to configure the HTTP connection and request timeouts in HTTP authentication. The APM.HTTP.ConnectionTimeout defaults to 10 seconds, and the APM.HTTP.RequestTimeout defaults to 60 seconds. Note: These defaults are the same as the values in earlier releases, so there is no effective functional change in behavior.