[Rt-devel] cycled login patch propose

Gunnett, Eric egunnett at qualcomm.com
Fri Jun 23 16:04:40 EDT 2006


	For us we have seen this problem randomly occur. Our users will be closing or opening a ticket and then they will be logged out. The only log entry we receive is a failed login attempt. We have experienced this under Firefox and IE but not Opera. Our CGI module is up to date. We are currently experiencing this on 3.6.0 and 3.5.7 installs we have.

Thanks,
--Eric Gunnett

-----Original Message-----
From: rt-devel-bounces at lists.bestpractical.com [mailto:rt-devel-bounces at lists.bestpractical.com] On Behalf Of Ruslan Zakirov
Sent: Thursday, June 22, 2006 3:37 PM
To: Alexey G Misyurenko
Cc: rt-devel at lists.bestpractical.com
Subject: Re: [Rt-devel] cycled login patch propose

On 6/14/06, Alexey G Misyurenko <mag at caravan.ru> wrote:
> Hello!
>
> After upgrade from rt 3.4.4 to rt.3.6.0rc3 we got problems with
> login to the system.
>
> >From Firefox or IE user after logout and logon procedure
> redirected by rt to Login page at any step.
Could you please give us step-by-step instructions how to reproduce problem?

>
> Opera is not affected.
>
> Next one patch resolve problems
Patch is wrong as components in NoAuth may need session hash too. Try
to update CGI perl module and check if problem still reproducible.

>
> --- share/html/autohandler      2006-03-31 05:41:00.000000000 +0400
> +++ local/html/autohandler      2006-06-14 18:41:44.000000000 +0400
> @@ -104,23 +104,23 @@
>
>  $m->{'rt_base_time'} = [ Time::HiRes::gettimeofday() ];
>
> +# If it's a noauth file, don't ask for auth.
> +if ( $m->base_comp->path =~ $RT::WebNoAuthRegex ) {
> +    $m->call_next(%ARGS);
> +    $m->abort;
> +}
> +
>  $m->comp( '/Elements/SetupSessionCookie', %ARGS );
>
>  unless ( $session{'CurrentUser'} && $session{'CurrentUser'}->Id ) {
>      $session{'CurrentUser'} = RT::CurrentUser->new();
> -}
> +}
>
>  # Set the proper encoding for the current language handle
>  $r->content_type("text/html; charset=utf-8");
>
> -# If it's a noauth file, don't ask for auth.
> -if ( $m->base_comp->path =~ $RT::WebNoAuthRegex ) {
> -    $m->call_next(%ARGS);
> -    $m->abort;
> -}
> -
>  # If RT is configured for external auth, let's go through and get REMOTE_USER
> -elsif ($RT::WebExternalAuth) {
> +if ($RT::WebExternalAuth) {
>
>      # do we actually have a REMOTE_USER equivlent?
>      if ( RT::Interface::Web::WebCanonicalizeInfo() ) {
> @@ -221,7 +221,7 @@
>
>  delete $session{'CurrentUser'}
>      unless $session{'CurrentUser'}
> -    and $session{'CurrentUser'}->Id;
> +    and defined $session{'CurrentUser'}->Id;
>
>  # Process per-page authentication callbacks
>  $m->comp( '/Elements/Callback', %ARGS, _CallbackName => 'Auth' );
>
>
> ==========
> RT work environment
> ==========
>
>
>
>
>     Загруженные модули perl
>
> Perl v5.8.7 under linux
>   Apache2::Access v2.000001;
>   Apache2::Connection v2.000001;
>   Apache2::Const v2.000001;
>   Apache2::Log v2.000001;
>   Apache2::RequestIO v2.000001;
>   Apache2::RequestRec v2.000001;
>   Apache2::RequestUtil v2.000001;
>   Apache2::Response v2.000001;
>   Apache2::ServerRec v2.000001;
>   Apache2::ServerUtil v2.000001;
>   Apache2::Status v3.00;
>   Apache::DBI v0.94;
>   Apache::Session v1.81;
>   Apache::Session::File v1.54;
>   Apache::Session::Generate::MD5 v2.1;
>   Apache::Session::Lock::File v1.02;
>   Apache::Session::Serialize::Storable v1.00;
>   Apache::Session::Store::File v1.02;
>   APR v0.009000;
>   APR::Const v0.009000;
>   APR::Pool v0.009000;
>   APR::Status v0.009000;
>   APR::Table v0.009000;
>   AutoLoader v5.60;
>   base v2.07;
>   Benchmark v1.07;
>   bytes v1.02;
>   Cache::Simple::TimedExpiry v0.23;
>   Calendar::Simple v1.13;
>   capitalization v0.03;
>   Carp v1.04;
>   CGI v3.10;
>   CGI::Cookie v1.25;
>   CGI::Util v1.5;
>   Class::Container v0.12;
>   Class::Data::Inheritable v0.04;
>   Class::ReturnValue v0.53;
>   Clone v0.18;
>   constant v1.05;
>   Cwd v3.05;
>   Data::Dumper v2.121_04;
>   DBD::Oracle v1.16;
>   DBI v1.48;
>   DBIx::SearchBuilder v1.43;
>   DBIx::SearchBuilder::Union v0;
>   DBIx::SearchBuilder::Unique v0.01;
>   Devel::StackTrace v1.12;
>   Devel::StackTraceFrame v0.6;
>   Devel::Symdump v2.0601;
>   Digest::base v1.00;
>   Digest::MD5 v2.33;
>   DynaLoader v1.05;
>   Encode v2.10;
>   Encode::Alias v2.03;
>   Encode::Byte v2.00;
>   Encode::Config v2.00;
>   Encode::Encoding v2.02;
>   Encode::Guess v2.00;
>   Encode::Unicode v2.02;
>   Errno v1.0901;
>   Exception::Class v1.22;
>   Exception::Class::Base v1.2;
>   Exporter v5.58;
>   Exporter::Heavy v5.58;
>   Fcntl v1.05;
>   File::Basename v2.73;
>   File::Glob v1.04;
>   File::Path v1.06;
>   File::Spec v3.05;
>   File::Spec::Functions v1.3;
>   File::Spec::Unix v1.5;
>   File::Temp v0.16;
>   FileHandle v2.01;
>   GD v2.25;
>   GD::Graph v1.43;
>   GD::Graph::axestype v1.44;
>   GD::Graph::bars v1.25;
>   GD::Graph::colour v1.10;
>   GD::Graph::Data v1.21;
>   GD::Graph::Error v1.8;
>   GD::Graph::utils v1.7;
>   GD::Text v0.85;
>   GD::Text::Align v1;
>   HTML::Element v3.16;
>   HTML::Entities v1.29;
>   HTML::Formatter v2.04;
>   HTML::FormatText v2.04;
>   HTML::Mason v1.3101;
>   HTML::Mason::ApacheHandler v1.69;
>   HTML::Mason::Exception v1.1;
>   HTML::Mason::Exception::Abort v1.1;
>   HTML::Mason::Exception::Compilation v1.1;
>   HTML::Mason::Exception::Compilation::IncompatibleCompiler v1.1;
>   HTML::Mason::Exception::Compiler v1.1;
>   HTML::Mason::Exception::Decline v1.1;
>   HTML::Mason::Exception::Params v1.1;
>   HTML::Mason::Exception::Syntax v1.1;
>   HTML::Mason::Exception::System v1.1;
>   HTML::Mason::Exception::TopLevelNotFound v1.1;
>   HTML::Mason::Exception::VirtualMethod v1.1;
>   HTML::Mason::Exceptions v1.43;
>   HTML::Parser v3.45;
>   HTML::Scrubber v0.08;
>   HTML::Tagset v3.04;
>   HTML::TreeBuilder v3.13;
>   I18N::LangTags v0.35;
>   I18N::LangTags::Detect v1.03;
>   integer v1.00;
>   IO v1.21;
>   IO::File v1.11;
>   IO::Handle v1.24;
>   IO::InnerFile v2.110;
>   IO::Lines v2.110;
>   IO::Scalar v2.110;
>   IO::ScalarArray v2.110;
>   IO::Seekable v1.09;
>   IO::Wrap v2.110;
>   IO::WrapTie v2.110;
>   IPC::Open2 v1.01;
>   IPC::Open3 v1.0106;
>   lib v0.5565;
>   List::Util v1.14;
>   locale v1.00;
>   Locale::Maketext v1.09;
>   Locale::Maketext::Fuzzy v0.02;
>   Locale::Maketext::Lexicon v0.50;
>   Locale::Maketext::Lexicon::Gettext v0.14;
>   Log::Dispatch v2.11;
>   Log::Dispatch::Base v1.09;
>   Log::Dispatch::Output v1.26;
>   Log::Dispatch::Screen v1.17;
>   Log::Dispatch::Syslog v1.18;
>   Mail::Address v1.67;
>   Mail::Field v1.67;
>   Mail::Field::AddrList v1.67;
>   Mail::Header v1.67;
>   Mail::Internet v1.67;
>   MIME::Base64 v3.05;
>   MIME::Body v5.418;
>   MIME::Decoder v5.418;
>   MIME::Decoder::Base64 v5.418;
>   MIME::Decoder::NBit v5.418;
>   MIME::Decoder::QuotedPrint v5.418;
>   MIME::Entity v5.418;
>   MIME::Field::ContDisp v5.418;
>   MIME::Field::ConTraEnc v5.418;
>   MIME::Field::ContType v5.418;
>   MIME::Field::ParamVal v5.418;
>   MIME::Head v5.418;
>   MIME::Parser v5.418;
>   MIME::QuotedPrint v3.03;
>   MIME::Tools v5.418;
>   MIME::Words v5.418;
>   mod_perl v2.000001;
>   mod_perl2 v2.000001;
>   ModPerl::Const v2.000001;
>   ModPerl::Global v2.000001;
>   ModPerl::Registry v1.99;
>   ModPerl::RegistryCooker v1.99;
>   ModPerl::Util v2.000001;
>   Module::Versions::Report v1.02;
>   overload v1.03;
>   Params::Validate v0.78;
>   POSIX v1.08;
>   re v0.04;
>   Regexp::Common v2.120;
>   Regexp::Common::delimited v2.104;
>   RT v3.6.0rc3;
>   RT::Interface::Email v1.02;
>   Scalar::Util v1.14;
>   SelectSaver v1.01;
>   Socket v1.77;
>   Storable v2.13;
>   strict v1.03;
>   Symbol v1.06;
>   Sys::Hostname v1.11;
>   Sys::Syslog v0.06;
>   Text::Autoformat v1.13;
>   Text::Quoted v1.8;
>   Text::Reform v1.11;
>   Text::Tabs v98.112801;
>   Text::Template v1.44;
>   Text::Wrapper v1.000;
>   Time::HiRes v1.66;
>   Time::JulianDay v2003.1125;
>   Time::Local v1.11;
>   Time::ParseDate v2003.1126;
>   Time::Timezone v2003.0211;
>   Tree::Simple v1.15;
>   UNIVERSAL v1.01;
>   URI v1.35;
>   URI::Escape v3.28;
>   URI::URL v5.03;
>   URI::WithBase v2.19;
>   utf8 v1.05;
>   vars v1.01;
>   warnings v1.03;
>   warnings::register v1.00;
>   XSLoader v0.02;
>
>
>
>
>     Переменные RT
>
> RT::AmbiguousDayInPast  1
> RT::BasePath    /usr/local/rt36
> RT::BinPath     /usr/local/rt36/bin
> RT::CORE_CONFIG_FILE    /usr/local/rt36/etc/RT_Config.pm
> RT::CommentAddress      support-cmt at caravan.ru
> RT::CorrespondAddress   support at caravan.ru
> RT::DatabaseHost        localhost
> RT::DatabaseName        RT_INT
> RT::DatabasePassword    /Password not printed/
> RT::DatabaseRTHost      localhost
> RT::DatabaseType        Oracle
> RT::DatabaseUser        rtadmin
> RT::DateDayBeforeMonth  1
> RT::DefaultSearchResultFormat   '<B><A
> HREF="/Ticket/Display.html?id=__id__">__id__</a></B>/TITLE:#', '<B><A
> HREF="/Ticket/Display.html?id=__id__">__Subject__</a></B>/TITLE:Subject',
> Status, QueueName, OwnerName, Priority, '__NEWLINE__', '',
> '<small>__Requestors__</small>', '<small>__CreatedRelative__</small>',
> '<small>__ToldRelative__</small>',
> '<small>__LastUpdatedRelative__</small>', '<small>__TimeLeft__</small>'
> RT::DefaultSummaryRows  10
> RT::EmailOutputEncoding         utf-8
> RT::EtcPath     /usr/local/rt36/etc
> RT::FriendlyFromLineFormat      "%s via RT" <%s>
> RT::FriendlyToLineFormat        "%s of caravan Ticket #%s":;
> RT::LocalEtcPath        /usr/local/rt36/local/etc
> RT::LocalLexiconPath    /usr/local/rt36/local/po
> RT::LocalPath   /usr/local/rt36/local
> RT::LogDir      /usr/local/rt36/var/log
> RT::LogToFileNamed      rt.log
> RT::LogToScreen         error
> RT::LogToSyslog         debug
> RT::LogoURL     http://www.caravan.ru/i/home/logo-big.gif
> RT::LoopsToRTOwner      1
> RT::MailCommand         sendmailpipe
> RT::MasonComponentRoot  /usr/local/rt36/share/html
> RT::MasonDataDir        /usr/local/rt36/var/mason_data
> RT::MasonLocalComponentRoot     /usr/local/rt36/local/html
> RT::MasonSessionDir     /usr/local/rt36/var/session_data
> RT::MaxAttachmentSize   10000000
> RT::MaxInlineBody       13456
> RT::MessageBoxWidth     72
> RT::MessageBoxWrap      HARD
> RT::MinimumPasswordLength       5
> RT::Organization        www.rt.inside.caravan.ru
> RT::OwnerEmail  rt-errors
> RT::RTAddressRegexp     ^rt\@example.com$
> RT::RecordOutgoingEmail         1
> RT::RedistributeAutoGeneratedMessages   privileged
> RT::SITE_CONFIG_FILE    /usr/local/rt36/etc/RT_SiteConfig.pm
> RT::Sendmail    /usr/sbin/sendmail
> RT::SendmailArguments   -oi -t
> RT::SendmailBounceArguments     -f "<>"
> RT::SendmailPath        /usr/sbin/sendmail
> RT::StrictLinkACL       1
> RT::Timezone    Europe/Moscow
> RT::UseFriendlyFromLine         1
> RT::VERSION     3.6.0rc3
> RT::VarPath     /usr/local/rt36/var
> RT::WebBaseURL  http://www.rt.inside.caravan.ru
> RT::WebDefaultStylesheet        3.5-default
> RT::WebFlushDbCacheEveryRequest         1
> RT::WebImagesURL        http://www.rt.inside.caravan.ru/NoAuth/images
> RT::WebPort     80
> RT::WebSessionClass     Apache::Session::File
> RT::WebURL      http://www.rt.inside.caravan.ru/
> RT::rtname      caravan
>
>
>     Конфигурация Perl
>
> Summary of my perl5 (revision 5 version 8 subversion 7) configuration:
>   Platform:
>     osname=linux, osvers=2.6.12, archname=i586-linux-thread-multi
>     uname='linux smetana 2.6.12 #1 smp wed mar 23 21:52:37 utc 2005 i686 athlon i386 gnulinux '
>     config_args='-ds -e -Dprefix=/usr -Dvendorprefix=/usr -Dinstallusrbinperl -Dusethreads -Di_db -Di_dbm -Di_ndbm -Di_gdbm -Duseshrplib=true -Doptimize=-O2 -march=i586 -mtune=i686 -fmessage-length=0 -Wall -D_FORTIFY_SOURCE=2 -g -Wall -pipe'
>     hint=recommended, useposix=true, d_sigaction=define
>     usethreads=define use5005threads=undef useithreads=define usemultiplicity=define
>     useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
>     use64bitint=undef use64bitall=undef uselongdouble=undef
>     usemymalloc=n, bincompat5005=undef
>   Compiler:
>     cc='cc', ccflags ='-D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64',
>     optimize='-O2 -march=i586 -mtune=i686 -fmessage-length=0 -Wall -D_FORTIFY_SOURCE=2 -g -Wall -pipe',
>     cppflags='-D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -pipe'
>     ccversion='', gccversion='4.0.2 20050901 (prerelease) (SUSE Linux)', gccosandvers=''
>     intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234
>     d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
>     ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8
>     alignbytes=4, prototype=define
>   Linker and Libraries:
>     ld='cc', ldflags =''
>     libpth=/lib /usr/lib /usr/local/lib
>     libs=-lnsl -ldl -lm -lcrypt -lutil -lpthread -lc
>     perllibs=-lnsl -ldl -lm -lcrypt -lutil -lpthread -lc
>     libc=/lib/libc-2.3.5.so, so=so, useshrplib=true, libperl=libperl.so
>     gnulibc_version='2.3.5'
>   Dynamic Linking:
>     dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-Wl,-E -Wl,-rpath,/usr/lib/perl5/5.8.7/i586-linux-thread-multi/CORE'
>     cccdlflags='-fPIC', lddlflags='-shared'
>
>
>
> Время для показа: 3.759333
>
> _______________________________________________
> List info: http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-devel
>
> Best Practical is hiring! Come hack Perl for us: http://bestpractical.com/about/jobs.html
>


-- 
Best regards, Ruslan.


More information about the Rt-devel mailing list