[ckan-dev] User sessions don't work

• Previous message: [ckan-dev] User sessions don't work
• Next message: [ckan-dev] Filestore API - error
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi Adrià,

I went through the cookies way because of the difference found in debug 
vs production mode. However, your view makes a lot a sense, i will 
explore it.

The admin user works fine, I can navigate with no issues through the 
application.

I have removed all the plugins but the default ones

    ckan.plugins: stats text_view recline_view

With NO change in the behaviour, I mean sessions doesn't work .

is there any way to stop using beaker? I found weird that the auth_tkt 
cookie dissapears. Where is its lifetime set?

Thanks a lot,

El 12/01/2017 a las 15:55, Adrià Mercader escribió:
> Hi Antonio,
>
> Ignore the cookies for a moment. In your first email you suggested 
> that the admin user worked fine but the non-admin users didn't work 
> (were logged out).
> Can you confirm if this is still the case? I would imagine that if 
> there is a problem with cookies and the server configuration it would 
> affect all users regardless of if they are admins or not.
>
> The cookie that deals with authentication is the auth_tkt, the one 
> named "ckan" is the one used by the beaker session, currently only 
> used for Flash messages.
>
> Also are you using any custom extensions? Does the problem still 
> happen with extensions disabled?
>
> Adrià
>
> On 12 January 2017 at 09:13, Antonio Jesús Sánchez Padial 
> <antonio.sanchez at inia.es <mailto:antonio.sanchez at inia.es>> wrote:
>
>     Hi everyone,
>
>     I have continued studying and testing.
>
>     When I first sent this issue my configuration was different than
>     the one proposed at "Deploying a source install".
>     <http://docs.ckan.org/en/latest/maintaining/installing/deployment.html>I
>     had tried to simplify it removing the nginx server, and
>     dispatching everything from nginx.
>
>     So I went back, and set it up again with both servers apache and
>     nginx following every step in the guide.
>
>     The situation right is the following:
>
>     - When I run it on production mode, ckan seems to work ok. I go to
>     login. My browser gets a `ckan` cookie. When I authenticate
>     myself, it still seems to work and I got to my dashboard. Then
>     whatever link I take the session is broken, and I got logged out.
>     I got the same fails if I access via IP or domain,
>     http://10.2.80.33 or http://data.inia.es. The machine isn't
>     currently accesible from the outside.
>
>     - When I run it on debug mode, using paster, I got a "Internal
>     Server Error" because my user can't write the ckan cookie created
>     by www-data in production mode previously. Once I remove the
>     `ckan` cookie in my browser, everything works fine. I can login,
>     navigate, etc. I could check there's no `ckan` cookie but an
>     `auth_tkt` cookie.
>
>     - When I log in on production mode, I can briefly see the
>     `auth_tkt` cookie in my firebug inspector, but then it's removed
>     and replaced with the `ckan` cookie.
>
>     Could anyone through a clue about what's happening here? Or what
>     can I do to obtain further information from my system?
>
>     Thanks a lot, I'm at this point when you are learning more and
>     more the system, but got stuck and frustrated with no idea how to
>     go on.
>
>     Best regards,
>
>
>     El 07/12/2016 a las 9:09, Antonio Jesús Sánchez Padial escribió:
>>
>>     Hi Carl,
>>
>>     Thanks for your support.
>>
>>     We are running CKAN behind Apache (in port 80). Requests are
>>     served via WSGI. CKAN config file says it runs on port 5000, but
>>     I think that only happens in debug mode, doesn't it?
>>
>>     This is my Apache VirtualHost configuration for CKAN, though I
>>     think it's the standard one:
>>
>>         <VirtualHost *:80>
>>             ServerName data.inia.es <http://data.inia.es>
>>             WSGIScriptAlias / /etc/ckan/default/apache.wsgi
>>             # pass authorization info on (needed for rest api)
>>             WSGIPassAuthorization On
>>             # Deploy as a daemon (avoids conflicts between CKAN
>>         instances)
>>             WSGIDaemonProcess ckan_default display-name=ckan_default
>>         processes=2 threads=15
>>             WSGIProcessGroup ckan_default
>>             ErrorLog /var/log/apache2/ckan_default.error.log
>>             CustomLog /var/log/apache2/ckan_default.custom.log combined
>>             <IfModule mod_rpaf.c>
>>                 RPAFenable On
>>                 RPAFsethostname On
>>                 RPAFproxy_ips 127.0.0.1
>>             </IfModule>
>>         </VirtualHost>
>>
>>     I didn't find anything remarkable in the logs, either.
>>
>>     Best regards,
>>
>>
>>     El 05/12/2016 a las 15:48, Carl Lange escribió:
>>>     Hi Antonio,
>>>
>>>     Is your CKAN behind basic HTTP authentication?
>>>     Is your CKAN hosted at a port other than 80?
>>>     Did you do anything special with the nginx settings at
>>>     /etc/nginx/sites-available/ckan?
>>>
>>>     Cheers,
>>>     Carl
>>>
>>>
>>>     On Mon, 5 Dec 2016 at 12:57 Antonio Jesús Sánchez Padial
>>>     <antonio.sanchez at inia.es <mailto:antonio.sanchez at inia.es>> wrote:
>>>
>>>         Hi CKAN friends,
>>>
>>>         probably this is a very basic question, but I feel I need
>>>         some guidance
>>>         at this moment.
>>>
>>>         We have installed CKAN in our private network. We can login
>>>         and it works
>>>         fine with the admin user. We have created also some
>>>         non-admin users to
>>>         play with. When we login with those users it seems to work,
>>>         but when we
>>>         navigate to any other page in the CKAN site the session is
>>>         lost (the
>>>         login and register links appear in the top bar, instead of
>>>         the user
>>>         information).
>>>
>>>         Can anyone point us where to find additional information
>>>         about what are
>>>         we doing wrong? I couldn't find anything on google, or ckan
>>>         doc, but I
>>>         feel like I'm not using the proper wording.
>>>
>>>         Thanks,
>>>
>>>         --
>>>         Antonio Jesús Sánchez Padial
>>>         Jefe del Servicio de Biometría
>>>         antonio.sanchez at inia.es <mailto:antonio.sanchez at inia.es>
>>>         Tlfno: +34 91 347 6831 <tel:+34%20913%2047%2068%2031>
>>>         INIA, Ctra.m de La Coruña, km.7
>>>         28040 Madrid
>>>
>>>         Boletín Agrobits de ciencia de datos en investigación agraria
>>>         http://agrobits.spadial.com
>>>
>>>         _______________________________________________
>>>         ckan-dev mailing list
>>>         ckan-dev at lists.okfn.org <mailto:ckan-dev at lists.okfn.org>
>>>         https://lists.okfn.org/mailman/listinfo/ckan-dev
>>>         <https://lists.okfn.org/mailman/listinfo/ckan-dev>
>>>         Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
>>>         <https://lists.okfn.org/mailman/options/ckan-dev>
>>>
>>>
>>>
>>>     _______________________________________________
>>>     ckan-dev mailing list
>>>     ckan-dev at lists.okfn.org <mailto:ckan-dev at lists.okfn.org>
>>>     https://lists.okfn.org/mailman/listinfo/ckan-dev
>>>     <https://lists.okfn.org/mailman/listinfo/ckan-dev>
>>>     Unsubscribe:https://lists.okfn.org/mailman/options/ckan-dev
>>>     <https://lists.okfn.org/mailman/options/ckan-dev>
>>     -- 
>>     Antonio Jesús Sánchez Padial
>>     Jefe del Servicio de Biometría
>>     antonio.sanchez at inia.es <mailto:antonio.sanchez at inia.es>
>>     Tlfno:+34 91 347 6831 <tel:+34%20913%2047%2068%2031>
>>     INIA, Ctra.m de La Coruña, km.7
>>     28040 Madrid
>>
>>     Boletín Agrobits de ciencia de datos en investigación agraria
>>        http://agrobits.spadial.com
>>
>>     _______________________________________________
>>     ckan-dev mailing list
>>     ckan-dev at lists.okfn.org <mailto:ckan-dev at lists.okfn.org>
>>     https://lists.okfn.org/mailman/listinfo/ckan-dev
>>     <https://lists.okfn.org/mailman/listinfo/ckan-dev>
>>     Unsubscribe:https://lists.okfn.org/mailman/options/ckan-dev
>>     <https://lists.okfn.org/mailman/options/ckan-dev>
>
>     -- 
>     Antonio Jesús Sánchez Padial
>     Jefe del Servicio de Biometría
>     antonio.sanchez at inia.es <mailto:antonio.sanchez at inia.es>
>     Tlfno:+34 91 347 6831 <tel:+34%20913%2047%2068%2031>
>     INIA, Ctra.m de La Coruña, km.7
>     28040 Madrid
>
>     Boletín Agrobits de ciencia de datos en investigación agraria
>        http://agrobits.spadial.com
>
>     _______________________________________________ ckan-dev mailing
>     list ckan-dev at lists.okfn.org <mailto:ckan-dev at lists.okfn.org>
>     https://lists.okfn.org/mailman/listinfo/ckan-dev
>     <https://lists.okfn.org/mailman/listinfo/ckan-dev> Unsubscribe:
>     https://lists.okfn.org/mailman/options/ckan-dev
>     <https://lists.okfn.org/mailman/options/ckan-dev> 
>
> _______________________________________________
> ckan-dev mailing list
> ckan-dev at lists.okfn.org
> https://lists.okfn.org/mailman/listinfo/ckan-dev
> Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
-- 
Antonio Jesús Sánchez Padial
Jefe del Servicio de Biometría
antonio.sanchez at inia.es
Tlfno: +34 91 347 6831
INIA, Ctra.m de La Coruña, km.7
28040 Madrid

Boletín Agrobits de ciencia de datos en investigación agraria
   http://agrobits.spadial.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20170112/c088c202/attachment-0003.html>

• Previous message: [ckan-dev] User sessions don't work
• Next message: [ckan-dev] Filestore API - error
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]