[rt-users] browser issues / login

Hodge, Jeff F (ECIII) Jeff.Hodge at yuma.army.mil
Sat Jul 26 16:45:48 EDT 2003


IE is not using rt_sid...Could this be why it is not using the cookie and
logging RT users out.  Also the cookie expiration date is set to expire 1 hr
prior to cookie creation, which is very strange (looking in ie cookie
files).  At first I thought it might be that the RT was not set correct and
was defaulting to gmt time, but after looking at the cookie log, and ticket
time inside RT they both have the correct MST set.

Netscape (on same win2k machine as IE) is working perfectly.  Why would IE
requests not have a   RT_SID being sent?  



Cookie log from server:
  
6.9.4.2 - - [26/Jul/2003:13:02:51 -0700] "GET / HTTP/1.1" 200 1807 "-"
6.9.4.2 - - [26/Jul/2003:13:02:51 -0700] "GET /NoAuth/webrt.css HTTP/1.1"
200 6945 "-"
	>this is IE/win2k ...no RT_SID being set....app doesn't work

6.9.4.9 - - [26/Jul/2003:13:03:13 -0700] "GET / HTTP/1.1" 200 1807 "-"
6.9.4.9 - - [26/Jul/2003:13:03:13 -0700] "GET /NoAuth/webrt.css HTTP/1.1"
200 6945 "RT_SID=244715174cdaf76da1e898975554db56"
	>this is opera/linux....browse from server....RT_sid is set....app
works

6.9.4.2 - - [26/Jul/2003:13:04:52 -0700] "GET / HTTP/1.1" 200 1807 "-"
6.9.4.2 - - [26/Jul/2003:13:04:52 -0700] "GET /NoAuth/webrt.css HTTP/1.1"
200 6945 "RT_SID=43d4875e1daecbc21b72c03d6858fa07"
	>this is netscape/win2k....RT_sid being set....app works





-----Original Message-----
From: Matthias Leisi [mailto:matthias at astrum.ch]
Sent: Saturday, July 26, 2003 12:58 AM
To: rt-users at lists.fsck.com
Subject: Re: [rt-users] browser issues / login



> Sniffing beyond conceptional functionality is something I know little 
> about....Could you tell me the best steps to go about this or point me 
> out in the right direction to find out more info.  The only thing I know 
> for sure is that this prob is isolated to rt logins; 

You can log all cookies being sent to your Apache with a CustomLog entry 
in httpd.conf, e.g.:

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Cookie}i\"  " combined
CustomLog logs/cookie.log combined

(see http://httpd.apache.org/docs/mod/mod_log_config.html)

Of course, this does not cover the client side. With Mozilla, you could 
use the LiveHTTPHeader extension; IIRC there is something similar for IE.

-- Matthias

_______________________________________________
rt-users mailing list
rt-users at lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20030726/0c8acabc/attachment.htm>


More information about the rt-users mailing list