[Grok-dev] Strange session / security problem with Grok 0.14

[Ivo van der Wijk]

2009/1/12 Kit BLAKE <kitblake at gmail.com>:
> 2009/1/11 Ivo van der Wijk <vladdrac at gmail.com>:
>>
>> Small correction/update: We're using grok 0.13. The production site
>> where the error occurs is running behind apache with virtual hosting.
>> Locally I haven't been able to reproduce the problem (by accessing
>> zope directly on port 8080)
>
> Is there a proxy in the game? We once did a training for a government
> department that gets its internet via a proxy, and the exact same
> behavior happened; users would be a different users with each page
> load.
>

A proxy on the client side can't be the issue, they're completely
separated (different organizations).

There's no proxy on the serverside. There's a loadbalancer setup
however, which I'm somewhat suspecting (though it sounds unlikely a
loadbalancer would mix up sessions).

I've suggested the loadbalancer gets removed from the setup, we'll see
if that solves the problem.
Meanwhile, ideas are still welcome :)

Regards

Ivo

-- 
Drs. I.R. van der Wijk / m3r Consultancy B.V.
Linux/Python/Zope/Plone and Open Source solutions
PO-box 51091, 1007 EB Amsterdam, The Netherlands
Email: ivo <at> m3r.nl Web: http://m3r.eu/