[rt-users] Users randomly being logged in as other users

[Kevin Falcone]

On Wed, Nov 17, 2010 at 06:07:22AM -0800, vmos wrote:
> 
> Hello, we were running RT 2.4 and we decided to upgrade to 3.8. we built a
> new server and instead of running it in-house, we moved it into our data
> centre.

There was no RT release labeled 2.4, and you should be more specific
about which release of 3.8.  3.8 covers releases of RT over more than
2.5 years.

You haven't really provided helpful details (such as authorization and
webserver configurations) so any speculating is guesswork.

Usually this involves a proxy server or incorrect caching.
You really need to sort out if there are cookies being passed from
user to user or something else going on.

-kevin

> The we started getting a problem were you would click on a link in RT or
> refresh the page and suddenly you would be logged in as somebody else.
> I asked about this and was told that it was down to some sort of NAT issue
> between here and our DC as we all appeared to be coming from the same IP
> address.
> After trying and failing to get to the bottom of the NAT issue, we decided
> to move the server back in-house. It's now in the same rack, plugged in to
> the same switch as the old server (that NEVER had this issue)
> That was two days ago and now we see the problem is still happening. 
> 
> What's going on?
> -- 
> View this message in context: http://old.nabble.com/Users-randomly-being-logged-in-as-other-users-tp30238345p30238345.html
> Sent from the Request Tracker - User mailing list archive at Nabble.com.
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20101117/e378a203/attachment.sig>