New subject: Issue : when opening ticket, browser prompts to open/save the html of article

4 Feb 2013

      Hello,

Thank you Alvaro and Gerald for your help.

I have cleared the cache with /opt/otrs/bin/otrs.DeleteCache.pl

/opt/otrs/bin/otrs.RebuildConfig.pl crashed with an error

ERROR: OTRS-otrs.RebuildConfig.pl-84 Perl: 5.14.2 OS: linux Time: Mon Feb  4 17:14:10 2013

 Message: C-Parser:

not well-formed (invalid token) at line 274, column 41, byte 12478 at /usr/lib/perl5/XML/Parser.pm line 187!

 Traceback (6647):

   Module: Kernel::System::XML::XMLParse (v1.105) Line: 755

   Module: Kernel::System::XML::XMLParse2XMLHash (v1.105) Line: 604

   Module: Kernel::System::SysConfig::_Init (v1.27) Line: 1617

   Module: Kernel::System::SysConfig::new (v1.27) Line: 131

   Module: ./otrs.RebuildConfig.pl (v1.14) Line: 56

ERROR: OTRS-otrs.RebuildConfig.pl-84 Perl: 5.14.2 OS: linux Time: Mon Feb  4 17:14:10 2013

Message: XML::Parser produced errors. I use XML::Parser::Lite as fallback!

 Traceback (6647):

   Module: Kernel::System::XML::XMLParse (v1.105) Line: 756

   Module: Kernel::System::XML::XMLParse2XMLHash (v1.105) Line: 604

   Module: Kernel::System::SysConfig::_Init (v1.27) Line: 1617

   Module: Kernel::System::SysConfig::new (v1.27) Line: 131

   Module: ./otrs.RebuildConfig.pl (v1.14) Line: 56

otrs.RebuildConfig.pl  - OTRS rebuild default config

Copyright (C) 2001-2010 OTRS AG, http://otrs.org/

Basically, I have copied /opt/otrs  & the DB   from an ubuntu system to another (not same versions).

Then changed some setting in /opt/otrs/Custom/Kernel/Config.

The problem could be javascript-related but the behavior is the same on FFox, Chrome, IE.

Is there other elements used by OTRS, elsewhere than  /opt/otrs, the DB and /etc/apache2  ?

I have checked the Apache HTTP versions. The “working one” is 2.2.20 (on 11.10) and the “faulty one” is 2.2.22. (on 12.04)

However, I do not see in the changelog what could cause the behaviour

Changes with Apache 2.2.22

  *) SECURITY: CVE-2011-3368 (cve.mitre.org)

     Reject requests where the request-URI does not match the HTTP

     specification, preventing unexpected expansion of target URLs in

     some reverse proxy configurations.  [Joe Orton]

  *) SECURITY: CVE-2011-3607 (cve.mitre.org)

     Fix integer overflow in ap_pregsub() which, when the mod_setenvif module

     is enabled, could allow local users to gain privileges via a .htaccess

     file. [Stefan Fritsch, Greg Ames]

  *) SECURITY: CVE-2011-4317 (cve.mitre.org)

     Resolve additional cases of URL rewriting with ProxyPassMatch or

     RewriteRule, where particular request-URIs could result in undesired

     backend network exposure in some configurations.

     [Joe Orton]

  *) SECURITY: CVE-2012-0021 (cve.mitre.org)

     mod_log_config: Fix segfault (crash) when the '%{cookiename}C' log format

     string is in use and a client sends a nameless, valueless cookie, causing

     a denial of service. The issue existed since version 2.2.17. PR 52256.

     [Rainer Canavan ]

  *) SECURITY: CVE-2012-0031 (cve.mitre.org)

     Fix scoreboard issue which could allow an unprivileged child process

     could cause the parent to crash at shutdown rather than terminate

     cleanly.  [Joe Orton]

  *) SECURITY: CVE-2012-0053 (cve.mitre.org)

     Fix an issue in error responses that could expose "httpOnly" cookies

     when no custom ErrorDocument is specified for status code 400.

     [Eric Covener]

  *) mod_proxy_ajp: Try to prevent a single long request from marking a worker

     in error. [Jean-Frederic Clere]

  *) config: Update the default mod_ssl configuration: Disable SSLv2, only

     allow >= 128bit ciphers, add commented example for speed optimized cipher

     list, limit MSIE workaround to MSIE <= 5. [Kaspar Brand]

  *) core: Fix segfault in ap_send_interim_response(). PR 52315.

     [Stefan Fritsch]

  *) mod_log_config: Prevent segfault. PR 50861. [Torsten Fï¿½rtsch

     ]

  *) mod_win32: Invert logic for env var UTF-8 fixing.

     Now we exclude a list of vars which we know for sure they dont hold UTF-8

     chars; all other vars will be fixed. This has the benefit that now also

     all vars from 3rd-party modules will be fixed. PR 13029 / 34985.

     [Guenter Knauf]

  *) core: Fix hook sorting for Perl modules, a regression introduced in

     2.2.21. PR: 45076. [Torsten Foertsch <torsten foertsch gmx net>]

  *) Fix a regression introduced by the CVE-2011-3192 byterange fix in 2.2.20:

     A range of '0-' will now return 206 instead of 200. PR 51878.

     [Jim Jagielski]

  *) Example configuration: Fix entry for MaxRanges (use "unlimited" instead

     of "0").  [Rainer Jung]

  *) mod_substitute: Fix buffer overrun.  [Ruediger Pluem, Rainer Jung]

Changes with Apache 2.2.21

  *) SECURITY: CVE-2011-3348 (cve.mitre.org)

     mod_proxy_ajp: Respond with HTTP_NOT_IMPLEMENTED when the method is not

     recognized.  [Jean-Frederic Clere]

  *) Fix a regression introduced by the CVE-2011-3192 byterange fix in 2.2.20.

     PR 51748. [<lowprio20 gmail.com>]

  *) mod_filter: Instead of dropping the Accept-Ranges header when a filter

     registered with AP_FILTER_PROTO_NO_BYTERANGE is present,

     set the header value to "none". [Eric Covener, Ruediger Pluem]

  *) mod_proxy_ajp: Ignore flushing if headers have not been sent.

     PR 51608 [Ruediger Pluem]

  *) mod_dav_fs: Fix segfault if apr DBM driver cannot be loaded. PR 51751.

     [Stefan Fritsch]

  *) mod_alias: Adjust log severity of "incomplete redirection target"

     message. PR 44020.

  *) mod_rewrite: Check validity of each internal (int:) RewriteMap even if the

     RewriteEngine is disabled in server context, avoiding a crash while

     referencing the invalid int: map at runtime. PR 50994.

     [Ben Noordhuis <info noordhuis nl>]

  *) core: Allow MaxRanges none|unlimited|default and set 'Accept-Ranges: none'

     in the case Ranges are being ignored with MaxRanges none.

     [Eric Covener]

  *) mod_proxy_ajp: Respect "reuse" flag in END_REPONSE packets.

     [Rainer Jung]

The permissions are ok (otrs.SetPermissions).

Server is restarted upon each change.

Would you have any idea ?

Thanks for your time

Jerome

From: Baton Jerome

Sent: vendredi 1 février 2013 17:49

To: 'otrs@otrs.org'

Subject: Issue : when opening ticket, browser prompts to open/save the html of article

Hello,

I am new to OTRS, my context is that  I’m transferring an OTRS 3.0 to a new machine (there is custom dev for pgp that I don’t master inside).

I not only copied the /opt/otrs but also the content of the DB.

I checked for the dead links to see that some necessary JS was hidden in /etc/javascript-common.

This is corrected and the system is working.

Even email fetching is working ☺ and email tickets get created

But I have an issue, rather weird.

When open I open a ticket, the browser prompts me to open/save the html of article (which is correct) instead of showing it in the same page.

Thank for your help

Jerome

Re: [otrs] Issue : when opening ticket, browser prompts to open/save the html of article

Baton Jerome

Gerald Young

tags

participants (2)