Sessions broken intermittently for multi-project trac

[stou@…]

My setup is:

• Trac 0.11b
• Apache 2.2.8
• mod_wsgi
• mod_digest authentication
• PostgreSQL database

The trac environment is setup for multi-project trac, using os.environTRAC_ENV_PARENT_DIR?. All of the projects use the same digest realm, but some of the projects are restricted from viewing by non-authenticated users. At one point it was possible to authenticate in one trac project and go to another and simply click 'login'. Now this works intermittently, sometimes truncating the session table fixes the problem. Sometimes clicking the login link a couple of times will also help.

The apache configuration is nearly identical to: http://code.google.com/p/modwsgi/wiki/IntegrationWithTrac except that my trac sites are under a virtual domain. with WSGIScriptAlias set to '/'.

[stou@…]

I sort of solved this by commenting out the following lines in session.py:Session.__init

# if req.incookie.has_key(COOKIE_KEY): # sid = req.incookie[COOKIE_KEY].value # self.promote_session(sid)

It seemed to me that for some reason trac is setting a session cookie, then checking it and disregarding the digest authentication data. I may be suffering from a misconfiguration.

I won't close the ticket because it _may_ be a bug, but I've hacked it on my end.

[jhampton]

After a bit of a lengthy discussion, the issue turned out to be a missing AuthDigestDomain in the <LocationMatch> directive providing the authentication.

http://pacopablo.com/irclogs/2008/02/04#T13:49:54

[jhampton]

Appears that the issue isn't currently fixed.

http://pacopablo.com/irclogs/2008/02/04#T13:56:40

[jruigrok]

I committed a missing db.commit() yesterday to the session.py code, it may be relevant (or not).

[rblank]

Is this still an issue with 0.11.1?