[rt-users] RT requiring login for every click

[Steve Hopps]

I'm also having this problem since upgrading from 3.8.0 to 3.8.1. The
*Apache::Session::File* work-around does fix this but it behaves
differently than it used to, and I'm concerned about security with
this setting turned on.

Anyone had any luck solving this? The suggestion below didn't apply to me

-Steve


>Marco,
>
>I had a similar problem after the 3.8.1 upgrade even though my database was
>updated correctly, and I saw the same problem with the file session
>handler.  I was actually able to fix my issue by taking a trailing slash off
>my $WebBaseURL.    It seemed like URLs with multiple // in them were
>resulting in the extra login prompts.  So, that might be something to look
>at if you've exhausted all the other possibilities.   Worked for me.
>
>-- Matt
>
>
>On Thu, Aug 28, 2008 at 6:02 AM, Marco Avvisano <
>marco.avvisano at regione.toscana.it <http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>> wrote:
>
>*
*>* I have the same problem but not for every click
*>*
*>* RT 3.8.1
*>* Mysql  4.1.22
*>* OS: Linux  2.4.21-37.ELsmp
*>*
*>* any suggestions
*>*
*>* thanks
*>*
*>* Marco
*>*
*>* ----- Original Message -----
*>* From: "Ruslan Zakirov" <ruz at bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>>
*>* To: "Mark Hazen" <markh at intechgra.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>>
*>* Cc: <rt-users at lists.bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>>
*>* Sent: Wednesday, August 06, 2008 10:34 PM
*>* Subject: Re: [rt-users] RT requiring login for every click
*>*
*>*
*>* >I saw your followups on this issue, but I want to comment this.
*>* >
*>* > Yes, these fixes I was talking about have been integrated into 3.8.0
*>* > and as well several fixes would be in 3.8.1 (3.8.1rc1 is available at
*>* > this moment for download from our server).
*>* >
*>* > Affects: RT on mysql 4.1 and newer with utf8 as default DB charset
*>* > WHEN RT's DB was created, changing mysql options would not help much
*>* >
*>* > Symptoms: constant login requests on every action
*>* >
*>* > Check: change session handler to Apache::Session::File, if problem
*>* > goes away then it's this issue.
*>* >
*>* > Otherwise issue is different and needs more investigation. In this
*>* > case (according to Mark's further comments) situation is different.
*>* >
*>* > Hope this would help isolate different problems in future.
*>* >
*>* > On Tue, Aug 5, 2008 at 5:24 AM, Mark Hazen <markh at
intechgra.com <http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>>
wrote:
*>* >> Hiya folks,
*>* >>
*>* >> I saw this mentioned on the list a couple months back, but under Gentoo,
*>* >> and while the issue was related to the MySQL language configuration,
*>* >> there was a note from ruz at bp
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>
stating that this was an issue related the
*>* >> default charset setting for MySQL (under Gentoo, though) which had been
*>* >> addressed for the next release (under 3.6, so it'd be incorporated into
*>* >> 3.8 I'm guessing).
*>* >>
*>* >> When a user (admin user in this case) logs in, they get the home page,
*>* >> but any subsequent clicks bring the login page up again. The system and
*>* >> Apache logs don't reveal any errors, just a successful login message
*>* >> when the logins are made.
*>* >>
*>* >> I've checked the database and the cookie, and the RT_SID is identical
*>* >> and being updated with each request. We did have default-character-set
*>* >> as utf8 as recommended for Dovecot on the same machine, but I've
*>* >> commented that out and restarted all associated services, and we still
*>* >> have the multiple login requests.
*>* >>
*>* >> I'm attaching my my.cnf file below in case that's the culprit; I do
*>* >> appreciate any suggestions that might help here.
*>* >>
*>* >>
*>* >> Environment:
*>* >>          RT: 3.8.0
*>* >>        OS: Oracle Linux 5.2 (RHEL5 equivalent)
*>* >>        DB: MySQL 5.0.45
*>* >> Web Server: Apache/2.2.3
*>* >>
*>* >
*>* > [snip]
*>* >
*>* > --
*>* > Best regards, Ruslan.
*>* > _______________________________________________
*>* > http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
*>* >
*>* > Community help: http://wiki.bestpractical.com
*>* > Commercial support: sales at bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>
*>* >
*>* >
*>* > Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
*>* > Buy a copy at http://rtbook.bestpractical.com
*>* _______________________________________________
*>* http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
*>*
*>* Community help: http://wiki.bestpractical.com
*>* Commercial support: sales at bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>
*>*
*>*
*>* Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
*>* Buy a copy at http://rtbook.bestpractical.com
*>*
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20080828/f1067447/attachment.htm>