Forum Discussion

SSell's avatar
SSell
Icon for Altostratus rankAltostratus
Jun 04, 2018

AUTHCACHE Error processing cookie - Cookie user mismatch

We are attempting to set up monitoring our F5's using Solarwinds NPM with logging into iControl. The NPM is able to log in and it appears monitoring is working, however once we enable logging into iControl, the F5 generates thousands (7000 over 3 hours) of the following message

 

warning httpd[30345]: [warn] [client IP of Solarwinds Server] AUTHCACHE Error processing cookie 2281266DF6CCD61F330DEE8056B2B77FBBD38B22 - Cookie user mismatch

 

My research seems to indicate the source IP is changing, however I have not found any evidence that it is occurring. Doing captures on the F5, I never see any other traffic other than from the single Solarwinds server. We are running BIG-IP 12.1.2 Build 1.266.271 Engineering Hotfix HF1. If we turn off iControl usage in Solarwinds, the log messages stop.

 

Any suggestions would be greatly appreciated.

 

  • I just asked basically the same question, but through the python sdk. I've read a couple of items in this site that kinda talk around tokens, but nothing that explicitly says this is how you deal with cookies. A coworker who uses php to query the rest api uses CURLOPT_COOKIESESSION set to true, but going through the sdk code I don't see how I pass something in to effect the same outcome. Sorry this doesn't help much.

     

  • I figured out how to make these error messages go away in python:

     

    ManagementRoot(hostname='host',username='user',password='pass',token=True)

     

    By adding token=True I see no more unfriendly httpd_errors messages. So, if you can configure solarwinds to handle cookies differently it might fix your problem.

     

  • Thank you for your update. We found we did not need to use iControl to accomplish what we were attempting. Once we stopped using that, the errors went away. If we go back to using that in the future though, I will check with the Solarwinds team if it can handle cookies differently.

     

    Thanks