Sessions and external authentication

Hi all,

I’m using an ldap server to provide external authentication to RT 2.0.7.
The first / initial authentication seems to work well, however when I
logout, I’m re-authenticated and put back into RT. In addition, all
future logins bypass the ldap authentication.

I’ve tried using both popular ldap auth apache modules, and the both
exhibit the same problem. I’m guessing this is probably an Apache
issue…?

Any information or pointers would be much appreciated. If any other
information is needed (configs, versions, etc) let me know.

Thanks, paul

Try bringing Apache::Session up to current.

-jOn Tue, Sep 18, 2001 at 03:50:32PM -0500, Paul Rossman wrote:

Hi all,

I’m using an ldap server to provide external authentication to RT 2.0.7.
The first / initial authentication seems to work well, however when I
logout, I’m re-authenticated and put back into RT. In addition, all
future logins bypass the ldap authentication.

I’ve tried using both popular ldap auth apache modules, and the both
exhibit the same problem. I’m guessing this is probably an Apache
issue…?

Any information or pointers would be much appreciated. If any other
information is needed (configs, versions, etc) let me know.

Thanks, paul


rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

http://www.bestpractical.com/products/rt – Trouble Ticketing. Free.

Hi again,

I’m still having no luck with the external authentication. At first, I
thought that it may be an issue with Redhat 7.1 rpm installs (perl,
apache, etc). So I un-installed perl 560, apache, and all the apache
module rpms. Next I downloaded and built by hand apache and perl and
mod_perl. All the perl modules are also fresh, tested, seems to be
working.

Here is most of what is installed now:
apache_1.3.20
perl-5.6.1
auth_ldap-1.6.0
mod_perl-1.26
DBD-mysql-2.0902
rt-2-0-7

Everything else is uptodate with cpan. Funny thing - after dumping the
rpm versions, and building these new versions, I still get the same
’cant logout completely, remembers who you are’, but in addition I have
now lost the ‘logout’ link when I’m logged in as root to rt2.

I should add, that ‘root’ is not listed in our ldap server, so I’ve
created a web-pass file for simple apache authentication for root only.

I think I’m going to tinker around with the login script and add ldap
hooks to it. I’d still like to get the apache auth working though, and
any help would be great.

Using external authentication, RT has no control over your credentials.
This us the fault of poor browser implementation of http authentication.
2.0.7 removed the [logout] URL (or was it 2.0.6) because it had no effect with External auth.

-jesseOn Thu, Sep 20, 2001 at 05:48:28PM -0500, Paul Rossman wrote:

Hi again,

I’m still having no luck with the external authentication. At first, I
thought that it may be an issue with Redhat 7.1 rpm installs (perl,
apache, etc). So I un-installed perl 560, apache, and all the apache
module rpms. Next I downloaded and built by hand apache and perl and
mod_perl. All the perl modules are also fresh, tested, seems to be
working.

Here is most of what is installed now:
apache_1.3.20
perl-5.6.1
auth_ldap-1.6.0
mod_perl-1.26
DBD-mysql-2.0902
rt-2-0-7

Everything else is uptodate with cpan. Funny thing - after dumping the
rpm versions, and building these new versions, I still get the same
’cant logout completely, remembers who you are’, but in addition I have
now lost the ‘logout’ link when I’m logged in as root to rt2.

I should add, that ‘root’ is not listed in our ldap server, so I’ve
created a web-pass file for simple apache authentication for root only.

I think I’m going to tinker around with the login script and add ldap
hooks to it. I’d still like to get the apache auth working though, and
any help would be great.

http://www.bestpractical.com/products/rt – Trouble Ticketing. Free.

I haven’t been able to pin down exactly why, but occasionally, a page will
come up with all the links in the default colors instead of the specified
color (black or whit depending on location).

I’ve seen this happen in a ticket, and in the “Home” list of tickets. It
may have happened in the search function too.

I’ve seen it on my system, and several other people here have commented on it.

It’s only cosmetic, but it makes things hard to read.

Is there anything I can do to help pin down what’s happening?

Most everyone here is running Win2K, with IE 5 or better. I’m checking now
to see if I can duplicate the problem in Win2K and Netscape.

Russ Johnson
Stargate Online

http://www.dimstar.net
telnet://telnet.dimstar.net
ICQ: 3739685

Hello Russ,

Based on what i have read from previous posts on this topic, it seem that
the system fail to lost the style sheet randomly and when it happen, you can
see a segmentation fault in your error log.

Until someone find the reason/solution, you can bypass this problem by
inserting the style sheet directly into your header file and removing the
line that load the external style sheet.

Remove this line:

And replace it by this

Regards,
Steve Poirier
Directeur d�veloppement / Project Manager
Inet-Technologies inc.From: “Russ Johnson” russj@dimstar.net
To: rt-users@lists.fsck.com
Sent: Thursday, September 20, 2001 7:38 PM
Subject: [rt-users] Occasional loss of color on links?

I haven’t been able to pin down exactly why, but occasionally, a page will
come up with all the links in the default colors instead of the specified
color (black or whit depending on location).

I’ve seen this happen in a ticket, and in the “Home” list of tickets. It
may have happened in the search function too.

I’ve seen it on my system, and several other people here have commented on
it.

It’s only cosmetic, but it makes things hard to read.

Is there anything I can do to help pin down what’s happening?

Most everyone here is running Win2K, with IE 5 or better. I’m checking now
to see if I can duplicate the problem in Win2K and Netscape.

Russ Johnson
Stargate Online

http://www.dimstar.net
telnet://telnet.dimstar.net
ICQ: 3739685


rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

Taht’s the mod_perl segfaults some poeple see.On Thu, Sep 20, 2001 at 04:38:55PM -0700, Russ Johnson wrote:

I haven’t been able to pin down exactly why, but occasionally, a page will
come up with all the links in the default colors instead of the specified
color (black or whit depending on location).

I’ve seen this happen in a ticket, and in the “Home” list of tickets. It
may have happened in the search function too.

I’ve seen it on my system, and several other people here have commented on it.

It’s only cosmetic, but it makes things hard to read.

Is there anything I can do to help pin down what’s happening?

Most everyone here is running Win2K, with IE 5 or better. I’m checking now
to see if I can duplicate the problem in Win2K and Netscape.

Russ Johnson
Stargate Online

http://www.dimstar.net
telnet://telnet.dimstar.net
ICQ: 3739685


rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

http://www.bestpractical.com/products/rt – Trouble Ticketing. Free.

Yep, it was 2.0.6. Regarding RT’s root user and external auth, I highly
recommend using RT’s local auth when you first bring up the service and
create an account for the user(s) who will be administering the system.
Give these users the superuser privilege, then reconfigure the service to
use external auth.

Regards,
Christian

Christian Gilmore
Team Lead
Web Infrastructure & Tools
IBM Software Group