Change in user management

[Lauri]

Hi

I wonder what could cause this kind of behaviour. Approximately in every 2 seconds I get notice from security system that there is user login. I tried to stop PLC and still it continues so that can't be the reason. Any suggestions how to get rid of these?

 

[CodeShepherd · Accepted solution]

It seems someone is using the user "boschrexroth" to access the control frequently. Are you using any other functions accessing the ctrlX CORE like browsers, other communication clients (e.g. Node-RED) or remote data management systems?

[Lauri]

Hi. Yea, found it. It surely was the Node-Red application where I fetch token from Datalayer with HTTP request. It does apparently a logining every time. I put an interval there because I experienced that the token was forgotten sometimes but the interval doesn't need to bee so frequent. 

Thank you.

[CodeShepherd]

Tokens do get invalid by purpose, so that an usage for attacks to the ctrlX CORE is limited. Please see the settings of the session policies to change this. (See online documentation).

ctrlX CORE web UI - session policies