[rt-users] repetitive browser authentication

[Obando, David DE - EV]

Hi,

late answer - it took a while until I could look into the problem again.
What I now did was cloning my rt VM and deleting /usr/local/share/request-tracker3.8 so all my customizations are inactive.

I still have to re-authenticate, e.g. I login, open a second tab with a ticket ID URL and have to login again.
Tested in Internet Explorer and Firefox.

I'm using the Debian package from http://rt.easter-eggs.org, a standard apache setup, my RT config looks like:

*****************************************
my $zone = "UTC";
$zone=`/bin/cat /etc/timezone`
    if -f "/etc/timezone";
chomp $zone;
Set($Timezone, $zone);

Set($rtname, 'rt.ehapa.de');
Set($Organization, 'ehapa.de');

Set($CorrespondAddress , 'rt at rt.ehapa.de');
Set($CommentAddress , 'rt-comment at rt.ehapa.de');


Set($WebPath , "/rt");
Set($WebBaseURL , "http://rt.ehapa.de");


my %typemap = (
    mysql   => 'mysql',
    pgsql   => 'Pg',
    sqlite3 => 'SQLite',
);

Set($DatabaseType, $typemap{mysql} || "UNKNOWN");

Set($DatabaseHost, 'localhost');
Set($DatabasePort, '');

Set($DatabaseUser , 'rt3');
Set($DatabasePassword , 'xxx');

my $dbc_dbname = 'rt3'; if ( "mysql" eq "sqlite3" ) { Set ($DatabaseName, '' . '/' . $dbc_dbname); } else { Set ($DatabaseName, $dbc_dbname); }

Set($RTAddressRegexp , '^help(-comment)?\@rt\.ehapa\.de$');

Set($DevelMode, '0');

Set($LogoURL, "/rt/NoAuth/images/logo_ev.jpg");
Set($LogoLinkURL, 'http://ehapa.de');
Set($LogoAltText, "");
Set($LogoImageWidth, 75);
Set($LogoImageHeight, 38);
Set($DefaultSummaryRows, 30);
Set(%GnuPG, Enable => 0);
Set($DefaultQueue, "Ehapa");
Set($MaxInlineBody, 40000);
Set($LogToSyslog    , 'debug');
***********************************



Thank you and best regards,
David


-----Ursprüngliche Nachricht-----
Von: rt-users-bounces at lists.bestpractical.com [mailto:rt-users-bounces at lists.bestpractical.com] Im Auftrag von Kevin Falcone
Gesendet: Donnerstag, 17. März 2011 16:51
An: rt-users at lists.bestpractical.com
Betreff: Re: [rt-users] repetitive browser authentication

On Thu, Mar 17, 2011 at 03:52:11PM +0100, Obando, David DE - EV wrote:
> I don't use different hostname. I just tested with clicking the RT links in two "new-ticket-notification"-mails:
> 1. clicking the first ticketlink and authenticating 2. clicking the 
> second ticketlink and I have to authenticate again

Then you're going to have to tell us more about what configuration changes or customizations you've made to RT, since this isn't normal observed behavior.  Your debugging logs from RT would also be helpful, along with cookie information.

-kevin

> -----Ursprüngliche Nachricht-----
> Von: rt-users-bounces at lists.bestpractical.com 
> [mailto:rt-users-bounces at lists.bestpractical.com] Im Auftrag von Kevin 
> Falcone
> Gesendet: Donnerstag, 17. März 2011 15:30
> An: rt-users at lists.bestpractical.com
> Betreff: Re: [rt-users] repetitive browser authentication
> 
> On Thu, Mar 17, 2011 at 01:51:55PM +0100, Obando, David DE - EV wrote:
> >    Dear all,
> > 
> >    I installed a new system with RT 3.8.8. I'm wondering why I have to authenticate again after
> >    successful authentication.
> > 
> >    Example: I login to rt RT webinterface and in a second step I click an RT link in an e-mail to
> >    a new ticket. A new browser tab opens and I have to authenticate again.
> > 
> >    Tested in FF and IE.
> >    Any ideas how I can change setting so authentication is only needed once per session?
> 
> This usually happens when you have different hostnames that alias to RT so the cookies aren't compatible.