[rt-users] RT requiring login for every click

Thu Aug 28 15:01:31 EDT 2008

Did you try the 4.0-4.1 MySQL updates?  That seems to fix a lot of
people with corrupt attachments or "back to login page" issue.

From: rt-users-bounces at lists.bestpractical.com
[mailto:rt-users-bounces at lists.bestpractical.com] On Behalf Of Steve
Hopps
Sent: Thursday, August 28, 2008 2:46 PM
To: rt-users at lists.bestpractical.com
Subject: [rt-users] RT requiring login for every click

I'm also having this problem since upgrading from 3.8.0 to 3.8.1. The
Apache::Session::File work-around does fix this but it behaves
differently than it used to, and I'm concerned about security with this
setting turned on.

Anyone had any luck solving this? The suggestion below didn't apply to
me

-Steve

>Marco,

>

>I had a similar problem after the 3.8.1 upgrade even though my database
was

>updated correctly, and I saw the same problem with the file session

>handler.  I was actually able to fix my issue by taking a trailing
slash off

>my $WebBaseURL.    It seemed like URLs with multiple // in them were

>resulting in the extra login prompts.  So, that might be something to
look

>at if you've exhausted all the other possibilities.   Worked for me.

>

>-- Matt

>

>

>On Thu, Aug 28, 2008 at 6:02 AM, Marco Avvisano <

>marco.avvisano at regione.toscana.it
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> >
wrote:

>

>

> I have the same problem but not for every click

>

> RT 3.8.1

> Mysql  4.1.22

> OS: Linux  2.4.21-37.ELsmp

>

> any suggestions

>

> thanks

>

> Marco

>

> ----- Original Message -----

> From: "Ruslan Zakirov" <ruz at bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> >

> To: "Mark Hazen" <markh at intechgra.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> >

> Cc: <rt-users at lists.bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> >

> Sent: Wednesday, August 06, 2008 10:34 PM

> Subject: Re: [rt-users] RT requiring login for every click

>

>

> >I saw your followups on this issue, but I want to comment this.

> >

> > Yes, these fixes I was talking about have been integrated into 3.8.0

> > and as well several fixes would be in 3.8.1 (3.8.1rc1 is available
at

> > this moment for download from our server).

> >

> > Affects: RT on mysql 4.1 and newer with utf8 as default DB charset

> > WHEN RT's DB was created, changing mysql options would not help much

> >

> > Symptoms: constant login requests on every action

> >

> > Check: change session handler to Apache::Session::File, if problem

> > goes away then it's this issue.

> >

> > Otherwise issue is different and needs more investigation. In this

> > case (according to Mark's further comments) situation is different.

> >

> > Hope this would help isolate different problems in future.

> >

> > On Tue, Aug 5, 2008 at 5:24 AM, Mark Hazen <markh at intechgra.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> >
wrote:

> >> Hiya folks,

> >>

> >> I saw this mentioned on the list a couple months back, but under
Gentoo,

> >> and while the issue was related to the MySQL language
configuration,

> >> there was a note from ruz at bp
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users>
stating that this was an issue related the

> >> default charset setting for MySQL (under Gentoo, though) which had
been

> >> addressed for the next release (under 3.6, so it'd be incorporated
into

> >> 3.8 I'm guessing).

> >>

> >> When a user (admin user in this case) logs in, they get the home
page,

> >> but any subsequent clicks bring the login page up again. The system
and

> >> Apache logs don't reveal any errors, just a successful login
message

> >> when the logins are made.

> >>

> >> I've checked the database and the cookie, and the RT_SID is
identical

> >> and being updated with each request. We did have
default-character-set

> >> as utf8 as recommended for Dovecot on the same machine, but I've

> >> commented that out and restarted all associated services, and we
still

> >> have the multiple login requests.

> >>

> >> I'm attaching my my.cnf file below in case that's the culprit; I do

> >> appreciate any suggestions that might help here.

> >>

> >>

> >> Environment:

> >>          RT: 3.8.0

> >>        OS: Oracle Linux 5.2 (RHEL5 equivalent)

> >>        DB: MySQL 5.0.45

> >> Web Server: Apache/2.2.3

> >>

> >

> > [snip]

> >

> > --

> > Best regards, Ruslan.

> > _______________________________________________

> > http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

> >

> > Community help: http://wiki.bestpractical.com
<http://wiki.bestpractical.com/> 

> > Commercial support: sales at bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> 

> >

> >

> > Discover RT's hidden secrets with RT Essentials from O'Reilly Media.

> > Buy a copy at http://rtbook.bestpractical.com
<http://rtbook.bestpractical.com/> 

> _______________________________________________

> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

>

> Community help: http://wiki.bestpractical.com
<http://wiki.bestpractical.com/> 

> Commercial support: sales at bestpractical.com
<http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users> 

>

>

> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.

> Buy a copy at http://rtbook.bestpractical.com
<http://rtbook.bestpractical.com/> 

> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20080828/f171ff6b/attachment.htm>