¯\(ツ)/¯

Just tried it out here and it seems to do it properly...

Maybe check out /var/log/daemon.log? I see this in mine

Nov 29 08:37:32 p4xcp1701 qemu-dm-7[406]: qemu-dm-7: -serial tcp::7001,server,nodelay: info: QEMU waiting for connection on: disconnected:tcp:0.0.0.0:7001,server

[root@p4xcp1701 ~]# ps aux | grep [7]001
root       406  0.0  0.3 137856 12336 ?        Sl   08:37   0:00 qemu-dm-7 -machine pc-0.10,accel=xen,max-ram-below-4g=4026531840,allow-unassigned=true,trad_compat=true -vnc unix:/var/run/xen/vnc-7,lock-key-sync=off -monitor null -xen-domid 7 -m size=18432 -boot order=c -usb -device usb-tablet,port=2 -smp 8,maxcpus=8 -serial tcp::7001,server,nodelay -display none -nodefaults -trace enable=xen_platform_log -sandbox on,obsolete=deny,elevateprivileges=allow,spawn=deny,resourcecontrol=deny -S -global PIIX4_PM.revision_id=0x1 -global ide-hd.ver=0.10.2 -global piix3-ide-xen.subvendor_id=0x5853 -global piix3-ide-xen.subsystem_id=0x0001 -global piix3-usb-uhci.subvendor_id=0x5853 -global piix3-usb-uhci.subsystem_id=0x0001 -global rtl8139.subvendor_id=0x5853 -global rtl8139.subsystem_id=0x0001 -parallel null -qmp unix:/var/run/xen/qmp-libxl-7,server,nowait -qmp unix:/var/run/xen/qmp-event-7,server,nowait -device xen-platform,addr=3,device-id=0x0001,revision=0x2,class-id=0x0100,subvendor_id=0x5853,subsystem_id=0x0001 -drive file=/dev/sm/backend/a6591e01-0f2b-7174-8d4c-34d0954b77d6/63c6875c-c6d8-4e46-9ddc-c35ad58b2dc4,if=ide,index=2,media=disk,force-lba=on,format=raw -drive file=/dev/sm/backend/a6591e01-0f2b-7174-8d4c-34d0954b77d6/4d10ccbf-3fa8-428f-8deb-c40cb8f4862a,if=ide,index=1,media=disk,force-lba=on,format=raw -drive file=/dev/sm/backend/a6591e01-0f2b-7174-8d4c-34d0954b77d6/0ba1d703-3c30-4b76-979b-927f92a1f86b,if=ide,index=0,media=disk,force-lba=on,format=raw -device rtl8139,netdev=tapnet0,mac=5e:9c:7e:4c:f6:62,addr=4 -netdev tap,id=tapnet0,fd=7 -device cirrus-vga,vgamem_mb=4,rombar=1,romfile=,subvendor_id=0x5853,subsystem_id=0x0001,addr=2 -vnc-clipboard-socket-fd 4 -xen-domid-restrict -chroot /var/xen/qemu/root-7 -runas 65542.1000
[root@p4xcp1701 ~]# netstat -tulpn | grep 7001
tcp        0      0 0.0.0.0:7001            0.0.0.0:*               LISTEN      406/qemu-dm-7     

It's just a way of doing token expiration. One solution to this is to have a button on the user's page to retract all tokens for a user after changing the password.

tcpdump it? Or check netstat while it's running and see what it is.

What is that UI? Who honestly knows what it's counting as a 'connection'. I seriously doubt it's individual flows. More than likely, this is related to websockets (in my opinion).

But again... a pcap would help in diagnosing.

This thread reminds me I should think about open sourcing our ruby implementation of the XO API...

¯\(ツ)/¯

Just tried it out here and it seems to do it properly...

Maybe check out /var/log/daemon.log? I see this in mine

Nov 29 08:37:32 p4xcp1701 qemu-dm-7[406]: qemu-dm-7: -serial tcp::7001,server,nodelay: info: QEMU waiting for connection on: disconnected:tcp:0.0.0.0:7001,server

[root@p4xcp1701 ~]# ps aux | grep [7]001
root       406  0.0  0.3 137856 12336 ?        Sl   08:37   0:00 qemu-dm-7 -machine pc-0.10,accel=xen,max-ram-below-4g=4026531840,allow-unassigned=true,trad_compat=true -vnc unix:/var/run/xen/vnc-7,lock-key-sync=off -monitor null -xen-domid 7 -m size=18432 -boot order=c -usb -device usb-tablet,port=2 -smp 8,maxcpus=8 -serial tcp::7001,server,nodelay -display none -nodefaults -trace enable=xen_platform_log -sandbox on,obsolete=deny,elevateprivileges=allow,spawn=deny,resourcecontrol=deny -S -global PIIX4_PM.revision_id=0x1 -global ide-hd.ver=0.10.2 -global piix3-ide-xen.subvendor_id=0x5853 -global piix3-ide-xen.subsystem_id=0x0001 -global piix3-usb-uhci.subvendor_id=0x5853 -global piix3-usb-uhci.subsystem_id=0x0001 -global rtl8139.subvendor_id=0x5853 -global rtl8139.subsystem_id=0x0001 -parallel null -qmp unix:/var/run/xen/qmp-libxl-7,server,nowait -qmp unix:/var/run/xen/qmp-event-7,server,nowait -device xen-platform,addr=3,device-id=0x0001,revision=0x2,class-id=0x0100,subvendor_id=0x5853,subsystem_id=0x0001 -drive file=/dev/sm/backend/a6591e01-0f2b-7174-8d4c-34d0954b77d6/63c6875c-c6d8-4e46-9ddc-c35ad58b2dc4,if=ide,index=2,media=disk,force-lba=on,format=raw -drive file=/dev/sm/backend/a6591e01-0f2b-7174-8d4c-34d0954b77d6/4d10ccbf-3fa8-428f-8deb-c40cb8f4862a,if=ide,index=1,media=disk,force-lba=on,format=raw -drive file=/dev/sm/backend/a6591e01-0f2b-7174-8d4c-34d0954b77d6/0ba1d703-3c30-4b76-979b-927f92a1f86b,if=ide,index=0,media=disk,force-lba=on,format=raw -device rtl8139,netdev=tapnet0,mac=5e:9c:7e:4c:f6:62,addr=4 -netdev tap,id=tapnet0,fd=7 -device cirrus-vga,vgamem_mb=4,rombar=1,romfile=,subvendor_id=0x5853,subsystem_id=0x0001,addr=2 -vnc-clipboard-socket-fd 4 -xen-domid-restrict -chroot /var/xen/qemu/root-7 -runas 65542.1000
[root@p4xcp1701 ~]# netstat -tulpn | grep 7001
tcp        0      0 0.0.0.0:7001            0.0.0.0:*               LISTEN      406/qemu-dm-7