Re: [rt-users] Session take over while using RT::Authen::External

2011-07-13 Thread Vladimir Nikolic
We had the same problem (FreeBSD 8.1, rt-3.8.10, p5-RT-Authen-ExternalAuth-0.09, apache-2.2.19, ap22-mod_fastcgi-2.4.6_1). Replacing mod_fastcgi with mod_perl (ap22-mod_perl2-2.0.5,3), solved the problem. Regards -- Vladimir Nikolic | Sistemski administrator / System Administrator Amis |

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-08 Thread Michael Polivanov
We were able to fix the issue (at least we believe it, more testing is necessary) by starting standalone FastCGI RT server. Further analysis of the issue is required, but as there are so many factors to consider (Perl build, FastCGI, RH EL6, ...), it will take a while.

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-07 Thread Michael Polivanov
On Fri, Mar 4, 2011 at 17:09, Thomas Sibley t...@bestpractical.com wrote: 1) Can you send your entire Apache config (not just the RT vhost part)?  Private mail to me is fine if you don't want to share it with the list. Is attached Regards apache-conf.tgz Description: GNU Zip compressed data

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-04 Thread Thomas Sibley
On 04 Mar 2011 10:06, Michael Polivanov wrote: We have now tested it without proxy: same result, same problem. Can this be a FastCGI issue? 1) Can you send your entire Apache config (not just the RT vhost part)? Private mail to me is fine if you don't want to share it with the list. 2) Start

[rt-users] Session take over while using RT::Authen::External

2011-03-03 Thread Michael Polivanov
We have discovered a very unpleasant behavior of RT if used with RT::Authen::External module with LDAP authentication enabled. The problem is that sometimes a RT site visitor (no credentials entered, no cookie set) gets automatically logged in with a session of another user, that was active before

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-03 Thread Thomas Sibley
On 03 Mar 2011 13:03, Michael Polivanov wrote: We have discovered a very unpleasant behavior of RT if used with RT::Authen::External module with LDAP authentication enabled. The problem is that sometimes a RT site visitor (no credentials entered, no cookie set) gets automatically logged in

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-03 Thread Thomas Sibley
Please keep mail on the list, thanks. On 03 Mar 2011 13:47, Michael Polivanov wrote: Yes, there is one. I thought already that this might be a reason, but the setup is SSL only, so i don't think the proxy thing will be able to cache anything. You should test your scenario without any proxies

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-03 Thread Michael Polivanov
On Thu, Mar 3, 2011 at 20:10, Thomas Sibley t...@bestpractical.com wrote: Please keep mail on the list, thanks. Ups, too fast reply. My bloody mistake ... You should test your scenario without any proxies involved.  If you can still replicate it, then we can keep troubleshooting.  Otherwise,

Re: [rt-users] Session take over while using RT::Authen::External

2011-03-03 Thread Thomas Sibley
On 03 Mar 2011 14:26, Michael Polivanov wrote: Will do so. But i am still unsure how a proxy server can interfere a SSL connection in my case. I mean if the files would be cached by the proxy, i wouldn't see the requests in apache log, especially not for NoAuth objects, but i saw the every