<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.0.1">
</HEAD>
<BODY>
OK now that I have a stable 3.8.10 life is easier.<BR>
<BR>
Using a fresh browser and tcpdump we found that RT seems to be giving out RT_SID_ cookies at inappropriate times.<BR>
<BR>
<B>LOG</B><BR>
GET / HTTP/1.1<BR>
User-Agent: curl/7.19.7 (universal-apple-darwin10.0) libcurl/7.19.7 OpenSSL/0.9.8l zlib/1.2.3<BR>
Host: gsiticket.gspt.net<BR>
Accept: */*<BR>
HTTP/1.1 200 OK<BR>
Date: Tue, 21 Jun 2011 16:10:08 GMT<BR>
Server: Apache/2.2.3 (Red Hat)<BR>
Set-Cookie: <B>RT_SID_gsiticket.80=badf8277bff46da285a9a4d9b7418d92</B>; path=/<BR>
...<BR>
<B>/LOG</B><BR>
<BR>
The problem is that this RT_SID already exists for another user, which is why this happens. If I fire up firebug in firefox and set this, I can be basically anyone who is actively logged in. <BR>
<BR>
Ideas?<BR>
<BR>
On Tue, 2011-06-21 at 11:23 -0400, Joshua Knarr wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
OK I know the wiki isn't official - what's the official source for the mailing list archives?<BR>
<BR>
On Tue, 2011-06-21 at 11:03 -0400, Kevin Falcone wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
On Tue, Jun 21, 2011 at 10:33:54AM -0400, Joshua Knarr wrote:
> We have a very infrequent problem with RT 3.8.10 where users can sometimes get another users
> session. I have not been able to reproduce this for my user account. Out of maybe 300 people
> who look at RT every day, 2 of them have this problem.
>
> Anyone seen this before?
If you search the mailing list archives, this always seems to be a
proxy or mod_cache misbehaving
-kevin
--------
2011 Training: <A HREF="http://bestpractical.com/services/training.html">http://bestpractical.com/services/training.html</A>
</PRE>
</BLOCKQUOTE>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>
--------
2011 Training: <A HREF="http://bestpractical.com/services/training.html">http://bestpractical.com/services/training.html</A>
</PRE>
<BR>
<BR>
</TD>
</TR>
</TABLE>
</BLOCKQUOTE>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
-- <BR>
<FONT SIZE="1">Joshua Knarr</FONT><BR>
<FONT SIZE="1">Systems Engineer</FONT><BR>
<FONT SIZE="1">GSI Commerce, Inc. <A HREF="http://www.gsicommerce.com/">http://www.gsicommerce.com</A></FONT><BR>
<FONT SIZE="1">E-Mail: <A HREF="mailto:hellerk@gsicommerce.com">knarrj@gsicommerce.com</A></FONT><BR>
<FONT SIZE="1">Office: 610-491-7110</FONT><BR>
<FONT SIZE="1">Mobile: 484-636-7371</FONT><BR>
<BR>
<FONT SIZE="1">The information contained in this electronic mail transmission is intended only for the use of the individual or entity named in this transmission. If you are not the intended recipient of this transmission, you are hereby notified that any disclosure, copying or distribution of the contents of this transmission is strictly prohibited and that you should delete the contents of this transmission from your system immediately. Any comments or statements contained in this transmission do not necessarily reflect the views or position of GSI Commerce, Inc. or its subsidiaries and/or affiliates.</FONT>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>