[rt-users] RT 3.8.10 and users

Tue Jun 21 16:36:39 EDT 2011

On Tue, Jun 21, 2011 at 04:00:37PM -0400, Joshua Knarr wrote:
>    Holy thread resurrection batman...
> 
>    [1]http://www.gossamer-threads.com/lists/engine?do=post_view_flat;post=89463;page=1;mh=-1;list=rt;sb=post_latest_reply;so=ASC
> 
>    Unlike these users, however, we have no proxy in the way. Looks like this issue was raised,
>    dropped on the floor, raised again and never took off.
> 
>    Can I raise it again? ;)

As I mentioned to your initial mail, every time this comes up, someone
has a proxy, mod_cache or some other thing in the middle causing
network problems.

If you can provide a replication recipe for something like this that we
can run locally, we're happy to investigate it, but so far it's always
turned out to be a local misconfiguration.

Replication recipe in this case would be clean install of RT, full
exact apache configuration and probably operating system version also.
Otherwise there are too many variables involved.

-kevin

>    On Tue, 2011-06-21 at 12:17 -0400, Joshua Knarr wrote:
> 
>      OK now that I have a stable 3.8.10 life is easier.
> 
>      Using a fresh browser and tcpdump we found that RT seems to be giving out RT_SID_ cookies at
>      inappropriate times.
> 
>      LOG
>      GET / HTTP/1.1
>      User-Agent: curl/7.19.7 (universal-apple-darwin10.0) libcurl/7.19.7 OpenSSL/0.9.8l
>      zlib/1.2.3
>      Host: gsiticket.gspt.net
>      Accept: */*
>      HTTP/1.1 200 OK
>      Date: Tue, 21 Jun 2011 16:10:08 GMT
>      Server: Apache/2.2.3 (Red Hat)
>      Set-Cookie: RT_SID_gsiticket.80=badf8277bff46da285a9a4d9b7418d92; path=/
>      ...
>      /LOG
> 
>      The problem is that this RT_SID already exists for another user, which is why this happens.
>      If I fire up firebug in firefox and set this, I can be basically anyone who is actively
>      logged in.
> 
>      Ideas?
> 
>      On Tue, 2011-06-21 at 11:23 -0400, Joshua Knarr wrote:
> 
>        OK I know the wiki isn't official - what's the official source for the mailing list
>        archives?
> 
>        On Tue, 2011-06-21 at 11:03 -0400, Kevin Falcone wrote:
> 
>  On Tue, Jun 21, 2011 at 10:33:54AM -0400, Joshua Knarr wrote:
>  >    We have a very infrequent problem with RT 3.8.10 where users can sometimes get another users
>  >    session. I have not been able to reproduce this for my user account. Out of maybe 300 people
>  >    who look at RT every day, 2 of them have this problem.
>  >
>  >    Anyone seen this before?
> 
>  If you search the mailing list archives, this always seems to be a
>  proxy or mod_cache misbehaving
> 
>  -kevin
>  --------
>  2011 Training: [2]http://bestpractical.com/services/training.html
> 
>        --------
>        2011 Training: [3]http://bestpractical.com/services/training.html
> 
>      +-----------------------------------------------+
>      |plain text document attachment (ATT1781072.txt)|
>      +-----------------------------------------------+
> 
>      --------
>      2011 Training: [4]http://bestpractical.com/services/training.html
> 
>    --
>    Joshua Knarr
>    Systems Engineer
>    GSI Commerce, Inc.  [5]http://www.gsicommerce.com
>    E-Mail: [6]knarrj at gsicommerce.com
>    Office: 610-491-7110
>    Mobile: 484-636-7371
> 
>    The information contained in this electronic mail transmission is intended only for the use of
>    the individual or entity named in this transmission. If you are not the intended recipient of
>    this transmission, you are hereby notified that any disclosure, copying or distribution of the
>    contents of this transmission is strictly prohibited and that you should delete the contents
>    of this transmission from your system immediately. Any comments or statements contained in
>    this transmission do not necessarily reflect the views or position of GSI Commerce, Inc. or
>    its subsidiaries and/or affiliates.
> 
> References
> 
>    Visible links
>    1. http://www.gossamer-threads.com/lists/engine?do=post_view_flat;post=89463;page=1;mh=-1;list=rt;sb=post_latest_reply;so=ASC
>    2. http://bestpractical.com/services/training.html
>    3. http://bestpractical.com/services/training.html
>    4. http://bestpractical.com/services/training.html
>    5. http://www.gsicommerce.com/
>    6. mailto:hellerk at gsicommerce.com

> 
> --------
> 2011 Training: http://bestpractical.com/services/training.html

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20110621/b5908787/attachment.sig>