[rt-users] webkit browser lose session only when viewing Attachment

Allen allen+rtlist at crystalfontz.com
Thu Dec 3 13:41:28 EST 2009


I found the reason for this problem. But don't know the correct solution.

The reason is that RT's runs from the /rt subdirectory on this server.
That subdirectory is where the authenticated session cookie applies.
When Webkit browser asks for /favicon.ico that is above the /rt
directory, therefore the login cookie is inapplicable there. So, RT
sends back a response with a new cookie.

The reason this happens on 1 of my servers and not the other is
because RT on the broken server is one of many NameBasedVirtualHosts.
So if the visitor is at this hostname, it hits RT, even if /rt was not
part of the REQUEST_URI. On my other server, it uses mod_vhost_alias
for all the domains, and RT is installed just as an Alias /rt. So on
that server when /favicon.ico is requested, the answer does not come
back from RT, but from one of the other mod_vhost_alias domains
because the Alias does not apply.

It seems I need some kind of rewrite rule in the Apache config to
handle people asking for "/file" instead of "/rt/file"

Or maybe just remove the "Alias /rt
/usr/share/request-tracker3.8/html" and other references to /rt in the
Apache configs and just let RT run at DocumentRoot instead of in a
subdirectory?

Anyone else running RT in a subdirectory of a NameBasedVirtualhost
with a suggestion?

Allen



More information about the rt-users mailing list