On Thu, Sep 29, 2011 at 10:34:20PM +0000, Patrick Fish wrote:
> I just received a few reports of users losing their correspondence
> when they are working on a ticket for a large amount of time (I've
> heard as low as 1 hour). After they finish their reply/comment, and
> select Update Ticket, it'll disappear into thin air with no error
> message given to the user.
> 
> We are using RT 4.0.1 with WebExternalAuth enabled and Apache2+SSL
> with mod_auth_cas. WebSecureCookies is also enabled.
>
> I wasn't able to immediately recreate the issue, but I've had two
> separate reports of this happening. The users still had a valid CAS
> ticket. Has anyone seen this before?

You probably want to take a closer look at their session and see if
they were given a new one spontaneously.  If you have
WebExternalAuthContinuous set to the default (which is more secure)
it's entirely possible that their cookie or session got lost and RT
had to make a new one, which would lose context.

-kevin

Attachment: pgpCZnHJy1t85.pgp
Description: PGP signature

--------
RT Training Sessions (http://bestpractical.com/services/training.html)
*  San Francisco, CA, USA — October 18 & 19, 2011
*  Washington DC, USA — October 31 & November 1, 2011
*  Melbourne VIC, Australia — November 28 & 29, 2011
*  Barcelona, Spain — November 28 & 29, 2011

Reply via email to