LoginModule not working with Internet Explorer 11

[mstolle]

Hi,

we want to use trac with the AccountManager and Single-Sign-On using ​LDAP-Auth. Everything works fine with Firefox but unfortuntely corporate policies require that it also needs to work with internet explorer.

Trac is available in our intranet using

https://hostname/tickets/project1
https://hostname/tickets/project2
...

Therefore our current trac.ini, that every project inherits, contains the following auth_cookie configuration:

auth_cookie_domain = hostname
auth_cookie_lifetime = 432000
auth_cookie_path = /tickets
...
base_url = https://hostname

Comparing the trac logs of the Firefox and IE login reveals that LDAPAuth retrievies the user but the line after Dispatching <RequestWithSession "GET '/'"> is missing in the log of IE.

2017-04-12 07:56:10,987 Trac[store] DEBUG: LDAPAuth: Success authenticating CN=mstolle,...,DC=company
2017-04-12 07:56:10,988 Trac[web_ui] DEBUG: LoginModule.authenticate: Set 'REMOTE_USER' = 'mstolle'
2017-04-12 07:56:10,989 Trac[session] DEBUG: Retrieving session for ID u'mstolle'
2017-04-12 07:56:10,990 Trac[api] DEBUG: action controllers for ticket workflow: ['ConfigurableTicketWorkflow']
2017-04-12 07:56:12,052 Trac[web_ui] DEBUG: Auth distribution success: project1
2017-04-12 07:56:13,027 Trac[web_ui] DEBUG: Auth distribution success: project2
2017-04-12 07:56:14,002 Trac[web_ui] DEBUG: Auth distribution success: project3
2017-04-12 07:56:14,007 Trac[web_ui] DEBUG: Auth data received from: tickets/project4
2017-04-12 07:56:14,007 Trac[web_ui] DEBUG: Auth distribution success: project4
2017-04-12 07:56:15,091 Trac[web_ui] DEBUG: Auth distribution success: project5
2017-04-12 07:56:15,133 Trac[main] DEBUG: Dispatching <RequestWithSession "GET '/'">
2017-04-12 07:56:15,136 Trac[session] DEBUG: Retrieving session for ID u'mstolle'  <--- this line only in Firefox
2017-04-12 07:56:15,136 Trac[main] DEBUG: Chosen handler is <Component trac.wiki.web_ui.WikiModule>
2017-04-12 07:56:15,138 Trac[chrome] DEBUG: Prepare chrome data for request

After that the IE log contains No policy allowed anonymous performing messages and I am not logged in.

Any ideas?

[Jun Omae]

If your host name uses underscore characters, Internet Explorer rejects all cookies.

See ​http://stackoverflow.com/questions/21012559/issue-with-session-and-cookie-in-internet-explorer-for-websites-containing-under

[mstolle]

No underscores, it is like loc-name-200

[Jun Omae]

Could you please try to remove auth_cookie_domain option from your trac.ini? I think the option is not needed on your environment.

[mstolle]

Thank you so much. It works!