# ZAC login always prompts that the Session has expired

**URL:** <https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267>\
**Category:** Uncategorized\
**Created:** [October 17, 2024, 12:40pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267 "2024-10-17T12:40:29Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![yolk23321](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/yolk23321/32/2554_2.png) [@yolk23321](https://openziti.discourse.group/u/yolk23321)\
**Post date:** [October 17, 2024, 12:40pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/1 "2024-10-17T12:40:29Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/b/bf789b532223c62ddf6de840cfbb60377f1df973.jpeg)

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [October 17, 2024, 12:45pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/2 "2024-10-17T12:45:35Z")

</div>

@rgalletto - I've not seen this myself but I've not deployed a whole install in the last couple of days/week. Is this expected?

---

<div class="post-metadata">

**Author:** ![rgalletto](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/rgalletto/32/1508_2.png) [@rgalletto](https://openziti.discourse.group/u/rgalletto)\
**Post date:** [October 17, 2024, 1:16pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/3 "2024-10-17T13:16:08Z")

</div>

It looks like this is a presentation bug in the node server hosted implementation of ZAC. If you enter the wrong password the growler that props up shows "Session Expired" which is obviously incorrect.

@yolk23321 can you confirm that the username/password you're entering is correct?

---

<div class="post-metadata">

**Author:** ![yolk23321](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/yolk23321/32/2554_2.png) [@yolk23321](https://openziti.discourse.group/u/yolk23321)\
**Post date:** [October 17, 2024, 1:32pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/4 "2024-10-17T13:32:17Z")

</div>

> [@rgalletto](#):
>
> can you confirm that the username/password you're entering is correct?

I deployed it in native Docker Compose, which should only have username and no password

 ![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/3/3824427365c8d3eb78cec1942fb285faa25d9fe7.jpeg)

---

<div class="post-metadata">

**Author:** ![yolk23321](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/yolk23321/32/2554_2.png) [@yolk23321](https://openziti.discourse.group/u/yolk23321)\
**Post date:** [October 17, 2024, 1:34pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/6 "2024-10-17T13:34:58Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/1/18561d7d8105e43d5aaa81a4424037b9e8078511.png)

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [October 17, 2024, 4:52pm UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/7 "2024-10-17T16:52:51Z")

</div>

Oh, it's empty with the expectation that you'll fill it in 😉 It's not explicitly stated in the doc, so I can understand why you didn't fill it out. If you look at the controller logs though, right at the beginning it would have generated one for you

for example:

```auto
$ docker logs docker-ziti-controller-1 2>&1 | grep ZITI_PWD
Do you want to keep the generated admin password 'g7_wdq4LG-xKgYYIeLHZM_EV0kwhi3Sb'? (Y/n) INFO: using ZITI_PWD=g7_wdq4LG-xKgYYIeLHZM_EV0kwhi3Sb
NOT OVERRIDING: env var ZITI_PWD already set. using existing value
ZITI_PWD overridden: g7_wdq4LG-xKgYYIeLHZM_EV0kwhi3Sb
controller initialized. unsetting ZITI_USER/ZITI_PWD from env

```

You'll want to go run that command and get your password (and probably change it)

---

<div class="post-metadata">

**Author:** ![yolk23321](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/yolk23321/32/2554_2.png) [@yolk23321](https://openziti.discourse.group/u/yolk23321)\
**Post date:** [October 18, 2024, 2:34am UTC](https://openziti.discourse.group/t/zac-login-always-prompts-that-the-session-has-expired/3267/9 "2024-10-18T02:34:05Z")

</div>

Thank you, solved, can you add to the quick guide so that others do not encounter this error