[rt-users] RT::Authen::ExternalAuth (?) issue

[Mike Peachey]

Wed 06 May 2009 16:06:28 GMT
Roy McMorran wrote:
> Rob Munsch wrote:
>> SSO refers to single sign-on, doesn't it?  I think that's incidental 
>> to what's happening.
> 
> Probably so.  I'm not (knowingly) using the SSO feature.

SSO is the cookie stuff integrated from RT::Authen::CookieAuth. I
haven't had time to double-check, but you can probably ignore the output
as it should just be a debug message advising it entered the loop to
check for SSO and dropped out without finding it.

> 
>> The rest of it looks like rt forgot who your user was.  "No user to 
>> test with" and "0, No User" seems to support this.  Is this happening 
>> after user is idle for a while?  Do they not have "refresh every blah" 
>> set on the page?
> 
> It does look like that.  The idle time isn't the issue though, unless 
> I've somehow inadvertently set an idle timeout of less than five 
> seconds  ;-)

Yeah, I think idle time would be a red herring.

> 
> Thanks for the feedback so far.  I'm thinking of watching the LDAP 
> traffic with Wireshark next.

You can give it a whirl, but I think all you'll find is a lack of
traffic, if it was trying to check LDAP it would succeed. The problem
will be that somewhere, somehow either:

1. The session cookie is dying
2. Somehow there are two fighting session cookies

Will look into it when I can myself, but I'm up to my eyeballs in work atm.
-- 
Kind Regards,

__________________________________________________

Mike Peachey, IT
Tel: +44 114 281 2655
Fax: +44 114 281 2951
Jennic Ltd, Furnival Street, Sheffield, S1 4QT, UK
Comp Reg No: 3191371 - Registered In England
http://www.jennic.com
__________________________________________________