Ticket #489 (closed defect: invalid)
Opened 8 years ago
Last modified 6 years ago
Session cookie required when logged in
| Reported by: | mithrandi@… | Owned by: | jonas |
|---|---|---|---|
| Priority: | high | Milestone: | 0.8 |
| Component: | general | Version: | devel |
| Severity: | blocker | Keywords: | |
| Cc: | |||
| Release Notes: | |||
| API Changes: | |||
Description
I just checked out the trunk (r679), setup a Trac instance, and logged in from the "front page". Wiki, Timeline, and Browse Source worked fine, but Roadmap, View Tickets, New Ticket, and Search all gave me the error about "session cookie required". Clicking on the "log in and continue" link just brought me back to the same page. At this point, I checked what cookies were set, and I had both trac_auth and trac_session set, with the path pointing to the cgi. Once I filled in my details for the session (name / e-mail address), everything started working normally.
Attachments
Change History
comment:1 Changed 8 years ago by mithrandi@…
- Severity changed from minor to major
comment:2 Changed 8 years ago by mithrandi@…
I should probably mention that I'm using Mozilla Firefox 0.8 on Debian Sid.
comment:3 Changed 8 years ago by mithrandi@…
Yet more info; if I configure Apache to require auth on trac.cgi, instead of trac.cgi/login, then everything works (aside from unauthenticated access obviously being broken).
comment:4 Changed 8 years ago by cmlenz
- Milestone set to 0.8
- Priority changed from normal to high
- Severity changed from major to blocker
I'm seeing this problem too, and very frequently, but haven't yet been able to systematically reproduce it.
Increasing severity/priority as this is very annoying :-/
comment:5 Changed 8 years ago by idnar
- Resolution set to invalid
- Status changed from new to closed
Turns out the problem was caused by a transparent proxy in the way; requests were coming from different IP addresses, so the auth cookie wasn't matching. I haven't experienced any problems since working around this.
Actually, everything isn't normal; the pages that were complaining about a session cookie now display, but Trac doesn't acknowledge that I'm logged in; I get a login button etc.