SessionID is Invalid

[markak]

Hi there

I have been scouring the net trying find out what this is.

Our OTRS 2.4 system has been working like a dream from about a month now.
Suddenly this morning everyone is getting SessionID is invalid!!! when they login with correct details.

I have gone as far as rebooting the server but this has done nothing the error SessionID is invalid!!! still appears when logging in.

The database is fine so i am at a loss. Just taking flack as no one is able to use the system.

Have tried the basics. removed browser history cleared cookies etc. no change.

[crythias]

Are you saying both agents and customers are getting this?
Are you on 2.4.7?
What operating system?
Is the SessionID part of a bookmarked url?
Is SessionUseCookie 0 or 1 in Config.pm?
What happens if you switch it?

[markak]

Thank you for the quick response.

I was on 2.4.7 decided to use the downtime to try 3beta
Ubuntu 2.6.28-19
SessionID is not part of a Bookmarked Url
Changed SessionUseCookie in Config.pm from 1 to 0 and back

Using ModPerl2 steps from the INSTALL file. Installation went perfectly.
Used the web installer.pl to complete the setup and this went through perfectly.
Setting all the mail settings in the web installer also went through without any hassles.

I have the exact same SessionID is invalid using OTRS 3 now.
ADDITION
I am getting errors in the syslog about conflicting IPs. Must be our ISPs proxy server.
Error recommends turning off SessionCheckRemoteIP
Tried changing SessionCheckRemoteIP to 0 in Config/Defaults.pl

But i still get the error in the log file so im probably changing it in the wrong place but i dont see it anywhere else.

ADDITION
I went into the Kernel/System/AuthSession/DB.pm file and just removed the remote ip checking section and system lets me in.

[faelric]

On the Admin page,

[ SysConfig ] Config Options: Framework -> Core::Session
SessionCheckRemoteIP: Select No
If the application is used for example via a proxy farm or a dialup connection, the remote ip address is mostly different for the requests. Turn of this check, if you are in this situation.
(Default: Yes)

SessionDeleteIfNotRemoteID: No
Delete a session, if the session id is used with an invalid remote IP?
(Default: Yes)

[alphabravo8]

Hi Guys,


So did that solution fix the problem ?

I'm totally new to OTRS and facing an issue, an operator keeps telling me that she is logged of after around 10 minutes, nut the problem is intermitent, sometimes it can be fine during 2 hours.
I've checked the Defaults.pm and increased the sessionTime and sessionIdleTime to see but it did logout again...

looking at the syslog I can also see a notice : SessionID: '10b31f6e5e73b5b5691d45678458b4de05' is invalid!!!

could it be related to my premature end of user session ?
any ideas of something else could I check ?


I'm running under :
Redhat
OTRS 2.4.7

[babashanky]

Hi All,

Thanks a lot for solution.
It fixed the problem. But i still not got the point why it was so occurred cause i am also using OTRS directly by IP not by remotely.


Thanks & Regards,
Shubham Agarwal | Software Engineer
Progressive Infotech Pvt. Ltd.
Email: shubham.agarwal@progressive.in
www.progressive.in
Mob:-+91 9958458470
#0120 4393941