[rt-users] Users randomly being logged in as other users

[Jeff Voskamp]

On 11/18/2010 04:31 AM, vmos wrote:
> 
> You're right, we went from 3.3 to 3.8.7. I think 2.4 was the nagios version I
> recently upgraded.
> There's no proxy. I wouldn't have thought that cookies were being passed
> about, the network is identical, it hasn't changed.
> All we've changed is the server and version. All this server does is RT
> 
> 
> Kevin Falcone-2 wrote:
>>
>> On Wed, Nov 17, 2010 at 06:07:22AM -0800, vmos wrote:
>>>
>>> Hello, we were running RT 2.4 and we decided to upgrade to 3.8. we built
>>> a
>>> new server and instead of running it in-house, we moved it into our data
>>> centre.
>>
>> There was no RT release labeled 2.4, and you should be more specific
>> about which release of 3.8.  3.8 covers releases of RT over more than
>> 2.5 years.
>>
>> You haven't really provided helpful details (such as authorization and
>> webserver configurations) so any speculating is guesswork.
>>
>> Usually this involves a proxy server or incorrect caching.
>> You really need to sort out if there are cookies being passed from
>> user to user or something else going on.
>>
>> -kevin
>>
>>> The we started getting a problem were you would click on a link in RT or
>>> refresh the page and suddenly you would be logged in as somebody else.
>>> I asked about this and was told that it was down to some sort of NAT
>>> issue
>>> between here and our DC as we all appeared to be coming from the same IP
>>> address.
>>> After trying and failing to get to the bottom of the NAT issue, we
>>> decided
>>> to move the server back in-house. It's now in the same rack, plugged in
>>> to
>>> the same switch as the old server (that NEVER had this issue)
>>> That was two days ago and now we see the problem is still happening. 
>>>
>>> What's going on?
>>> -- 
>>> View this message in context:
>>> http://old.nabble.com/Users-randomly-being-logged-in-as-other-users-tp30238345p30238345.html
>>> Sent from the Request Tracker - User mailing list archive at Nabble.com.
>>>
>>
>>  
>>
> 
I thought I recalled issues with mod_cache in apache and mixed sessions.
 I don't recall if you mentioned any apache changes at the same time.

Jeff