Load balancer

Justin_Brodley · June 19, 2007, 4:07pm

Has anyone attempted to terminate SSL on a load balancer in front of the
RT server? We did some initial tests but had issues with redirects,
etc. We’d prefer not to terminate SSL directly to the web server as this
adds additional stress to the server.

Justin Brodley

Matthew_Keller · June 19, 2007, 7:53pm

For a pair of high-volume clients, I’ve set up RT3.6 behind a
lightweight Apache SSL server that uses an Apache rewrite map to balance
the connections- one has 2 servers, one has 4. Works perfectly.

Note: Both of these are using external authentication. I have no idea
about intra-RT auth mechanisms and how they deal with balancing.On Tue, 2007-06-19 at 09:07 -0700, Justin Brodley wrote:

Has anyone attempted to terminate SSL on a load balancer in front of
the RT server? We did some initial tests but had issues with
redirects, etc. We’d prefer not to terminate SSL directly to the web
server as this adds additional stress to the server.

Matthew Keller
Information Security Officer & Network Administrator
Computing & Technology Services
State University of New York @ Potsdam
Potsdam, NY, USA
http://mattwork.potsdam.edu/

Brian_Gupta · June 19, 2007, 8:43pm

Date: Tue, 19 Jun 2007 09:07:45 -0700
From: “Justin Brodley” jbrodley@sumtotalsystems.com
Subject: [rt-users] Load balancer
To: rt-users@lists.bestpractical.com

Has anyone attempted to terminate SSL on a load balancer in
front of the RT server? We did some initial tests but had
issues with redirects, etc. We’d prefer not to terminate SSL
directly to the web server as this adds additional stress to
the server.

Justin Brodley

We’ve been doing this for years, without any issues. (Make sure your apache config virtualhost contains an entry for the vip’s dns name.)

<VirtualHost *:80>
ServerName vip.domainname.com
DocumentRoot /opt/rt/rt/share/html
AddDefaultCharset UTF-8

PerlModule Apache::DBI
PerlRequire /opt/rt/rt/bin/webmux.pl

<Location /rtprod>
    SetHandler perl-script
    PerlHandler RT::Mason
</Location>
Alias /rtprod "/opt/rt/rt/share/html"
ScriptAlias /rtprod/cgi-bin/ "/opt/rt/httpd/cgi-bin/"

Brian Gupta
Time Inc
Information Technology Dept
212-522-1401

Message: 2
Date: Tue, 19 Jun 2007 13:57:22 -0400
From: Jesse Vincent jesse@bestpractical.com
Subject: Re: [rt-users] user names appearing in comments dropdown
To: Michael Kukla kukla@caset.buffalo.edu
Cc: rt-users@lists.bestpractical.com, Martin Camacho
camacho@caset.buffalo.edu
Message-ID: 784AFBD4-8261-4C60-9D57-460B4997F4C2@bestpractical.com
Content-Type: text/plain; charset=“us-ascii”

Jesse et al,

Sorry to say, I again need write the list about something we
noticed last week–namely, that the names of disabled users
continue to appear in the Owner drop down one gets when
“Commenting” on ticket.

It appeared that the problem might have been due to the
combination of

the fact that the AdminCc and Cc system groups had previously
been granted the “own ticket” right; and

the fact that disabled users were most likely still linked to
Tickets as an AdminCC or Cc–

and thus still potential “owners”.

However, the expected fix–globally revoking the “own ticket” right
from AdminCc and CC–didn’t work: the disabled users continue to
appear in the Comment on Ticket “Owner” drop down as previously.

Has anyone else encountered, or better, resolved this phenomenon?

Can you confirm that you’re on 3.6.3 and that “Everybody” doesn’t
have the “OwnTickets” right? I’ve just reread this section of code
and I don’t see hwo this can be happening.

-------------- next part --------------
A non-text attachment was scrubbed…
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url :
http://lists.bestpractical.com/pipermail/rt-users/attachments/
20070619/19a61353/PGP-0001.pgp

Message: 3
Date: Tue, 19 Jun 2007 23:09:03 +0400
From: “Ruslan Zakirov” ruz@bestpractical.com
Subject: Re: [rt-users] Question about Dates in DB
To: “Stephen Turner” sturner@mit.edu
Cc: rt-users@lists.bestpractical.com
Message-ID:
589c94400706191209s3e6668e1rb640d83eba28b796@mail.gmail.com
Content-Type: text/plain; charset=UTF-8; format=flowed

Yes, 1/1/1970 is equal to ‘Not set’, but I think you have to
expect this to be changed to real NULL as I have very strong
wish to change it as NULLs are clearer, easier for
development and more flexible. Hope we’ll have time to do it
before 3.8.0

At Tuesday 6/19/2007 11:26 AM, Justin Brodley wrote:

I’m working on some reports for our RT database, and I’m noticing
that fields get populated with 1/1/1970 if there is
nothing entered
into the DB.

Is this accurate assessment? If so can I just assume that
1/1/1970 =
null?

Yes, that’s right. One other twist, if I recall correctly, (it may
depend on what database you use- we run Oracle) is that
sometimes null
dates are stored as null in the database. So you may have
to allow for
both null and 1/1/1970 as meaning “no date set”.

Steve

The rt-users Archives

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from
O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

–
Best regards, Ruslan.

Message: 4
Date: Tue, 19 Jun 2007 12:10:47 -0700
From: “Justin Brodley” jbrodley@sumtotalsystems.com
Subject: RE: [rt-users] Question about Dates in DB
To: “Ruslan Zakirov” ruz@bestpractical.com, “Stephen Turner”
sturner@mit.edu
Cc: rt-users@lists.bestpractical.com
Message-ID:

<0D1D06774CE0AF4BB0C6CFFBEEF24B2D0462922E@blv-exch1.sumtotalsy
stems.com>

Content-Type: text/plain; charset=“utf-8”

That would be great especially when dealing with reporting
applications, having a value there makes them more complex,
as I have to set “not equals” statements.

Justin Brodley

-----Original Message-----
From: ruslan.zakirov@gmail.com
[mailto:ruslan.zakirov@gmail.com] On Behalf Of Ruslan Zakirov
Sent: Tuesday, June 19, 2007 12:09 PM
To: Stephen Turner
Cc: Justin Brodley; rt-users@lists.bestpractical.com
Subject: Re: [rt-users] Question about Dates in DB

Yes, 1/1/1970 is equal to ‘Not set’, but I think you have to
expect this to be changed to real NULL as I have very strong
wish to change it as NULLs are clearer, easier for
development and more flexible. Hope we’ll have time to do it
before 3.8.0

At Tuesday 6/19/2007 11:26 AM, Justin Brodley wrote:

I’m working on some reports for our RT database, and I’m noticing
that fields get populated with 1/1/1970 if there is
nothing entered
into the DB.

Is this accurate assessment? If so can I just assume that
1/1/1970 =
null?

Yes, that’s right. One other twist, if I recall correctly, (it may
depend on what database you use- we run Oracle) is that
sometimes null
dates are stored as null in the database. So you may have
to allow for
both null and 1/1/1970 as meaning “no date set”.

Steve

The rt-users Archives

Community help: http://wiki.bestpractical.com
Commercial support: sales@bestpractical.com

Discover RT’s hidden secrets with RT Essentials from
O’Reilly Media.
Buy a copy at http://rtbook.bestpractical.com

–
Best regards, Ruslan.

Message: 5
Date: Tue, 19 Jun 2007 12:32:31 -0700
From: “J Bell” JB@zeugmasystems.com
Subject: [rt-users] LDAP and debugging
To: rt-users@lists.bestpractical.com
Message-ID:

66910A579C9312469A7DF9ADB54A8B7D90081C@exchange.ZeugmaSystems.local
Content-Type: text/plain; charset=“us-ascii”

Hi folks,

I’m trying to debug an LDAP overlay, but I can’t seem to get
the logging done properly. Here is the relevant stanza from
RT_SiteConfig.pm:

Set($LogToSyslog , ‘debug’);
Set($LogToScreen , ‘debug’);
Set($LogToFile , ‘debug’);
Set($LogDir, ‘/var/log/rt3’);
Set($LogToFileNamed , “rt.log”); #log to rt.log

I get no [debug] output at all in the logfile. Any clues?

–JB
-------------- next part --------------
An HTML attachment was scrubbed…
URL:
http://lists.bestpractical.com/pipermail/rt-users/attachments/
20070619/bf5ed8cf/attachment-0001.htm

Message: 6
Date: Tue, 19 Jun 2007 15:37:51 -0400
From: Mathew Snyder theillien@yahoo.com
Subject: [rt-users] Problem with ExtractCustomFieldValues
To: RT Users rt-users@lists.bestpractical.com
Message-ID: 4678308F.30506@yahoo.com
Content-Type: text/plain; charset=ISO-8859-1

So far it hasn’t posed a problem as it appears to be working
but I was looking at the Apache error_log today and saw this:
[Tue Jun 19 18:02:26 2007] [error]: Scrip Commit 18 died. -
Can’t call method “Content” on an undefined value at
/usr/local/rt-3.6.1//lib/RT/Action/ExtractCustomFieldValues.pm
line 47.

Stack:
[/usr/local/rt-3.6.1/lib/RT/Action/ExtractCustomFieldValues.pm:47]
[/usr/local/rt-3.6.1/lib/RT/ScripAction_Overlay.pm:240]
[/usr/local/rt-3.6.1/lib/RT/Scrip_Overlay.pm:506]
[/usr/local/rt-3.6.1/lib/RT/Scrips_Overlay.pm:193]
[/usr/local/rt-3.6.1/lib/RT/Transaction_Overlay.pm:179]
[/usr/local/rt-3.6.1/lib/RT/Record.pm:1446]
[/usr/local/rt-3.6.1/lib/RT/Ticket_Overlay.pm:745]
[/usr/local/rt-3.6.1/share/html/index.html:86]
[/usr/local/rt-3.6.1/share/html/autohandler:279]
(/usr/local/rt-3.6.1//lib/RT/Scrip_Overlay.pm:514)

Anyone know what’s happening here?

–
Keep up with me and what I’m up to: http://theillien.blogspot.com

Message: 7
Date: Tue, 19 Jun 2007 12:45:04 -0700
From: Gene LeDuc gleduc@mail.sdsu.edu
Subject: Re: [rt-users] Problem with ExtractCustomFieldValues
To: Mathew Snyder theillien@yahoo.com
Cc: RT Users rt-users@lists.bestpractical.com
Message-ID: 6.2.1.2.2.20070619124359.0246a790@mail.sdsu.edu
Content-Type: text/plain; charset=“us-ascii”; format=flowed

Mathew, what is scrip 18 doing?

At 12:37 PM 6/19/2007, Mathew Snyder wrote:

So far it hasn’t posed a problem as it appears to be working
but I was
looking at the Apache error_log today and saw this: [Tue Jun 19
18:02:26 2007] [error]: Scrip Commit 18 died. - Can’t call method
“Content” on an undefined value at
/usr/local/rt-3.6.1//lib/RT/Action/ExtractCustomFieldValues.p
m line 47.

Stack:
[/usr/local/rt-3.6.1/lib/RT/Action/ExtractCustomFieldValues.pm:47]
[/usr/local/rt-3.6.1/lib/RT/ScripAction_Overlay.pm:240]
[/usr/local/rt-3.6.1/lib/RT/Scrip_Overlay.pm:506]
[/usr/local/rt-3.6.1/lib/RT/Scrips_Overlay.pm:193]
[/usr/local/rt-3.6.1/lib/RT/Transaction_Overlay.pm:179]
[/usr/local/rt-3.6.1/lib/RT/Record.pm:1446]
[/usr/local/rt-3.6.1/lib/RT/Ticket_Overlay.pm:745]
[/usr/local/rt-3.6.1/share/html/index.html:86]
[/usr/local/rt-3.6.1/share/html/autohandler:279]
(/usr/local/rt-3.6.1//lib/RT/Scrip_Overlay.pm:514)

Anyone know what’s happening here?

–
Gene LeDuc, GSEC
Security Analyst
San Diego State University

Message: 8
Date: Tue, 19 Jun 2007 15:53:04 -0400
From: Matthew Keller kellermg@potsdam.edu
Subject: Re: [rt-users] Load balancer
To: Justin Brodley jbrodley@sumtotalsystems.com
Cc: rt-users@lists.bestpractical.com
Message-ID: 1182282784.6109.45.camel@mlap
Content-Type: text/plain; charset=utf-8

For a pair of high-volume clients, I’ve set up RT3.6 behind a
lightweight Apache SSL server that uses an Apache rewrite map
to balance the connections- one has 2 servers, one has 4.
Works perfectly.

Note: Both of these are using external authentication. I have
no idea about intra-RT auth mechanisms and how they deal with
balancing.

Has anyone attempted to terminate SSL on a load balancer in
front of
the RT server? We did some initial tests but had issues with
redirects, etc. We’d prefer not to terminate SSL directly
to the web
server as this adds additional stress to the server.

–
Matthew Keller
Information Security Officer & Network Administrator
Computing & Technology Services
State University of New York @ Potsdam
Potsdam, NY, USA
http://mattwork.potsdam.edu/

Message: 9
Date: Tue, 19 Jun 2007 16:12:16 -0400
From: “Helmuth Ramirez” HelmuthRamirez@compupay.com
Subject: [rt-users] FW: Ticket Report We Use
To: kelly.terry.jones@gmail.com, rt-users@bestpractical.com,
“Jesse Vincent” jesse@bestpractical.com
Message-ID:

7314881427FC8A4081673E8CEEA7924905D9B525@EXMIAMI01.compupay.com
Content-Type: text/plain; charset=“iso-8859-1”

Skipped content of type multipart/alternative--------------
next part -------------- A non-text attachment was scrubbed…
Name: Daily IT.RPT
Type: application/octet-stream
Size: 62976 bytes
Desc: Daily IT.RPT
Url :
http://lists.bestpractical.com/pipermail/rt-users/attachments/
20070619/2dba701a/DailyIT.obj
-------------- next part --------------
A non-text attachment was scrubbed…
Name: RT_Report_Demo.jpg
Type: image/jpeg
Size: 77294 bytes
Desc: RT_Report_Demo.jpg
Url : http://lists.bestpractical.com/pipermail/rt-users/attachments/20070619/2dba701a/RT_Report_Demo.jpg

RT-Users mailing list
RT-Users@lists.bestpractical.com The rt-users Archives

End of RT-Users Digest, Vol 39, Issue 50