Redmine

Hi,

we have installed Redmine 1.3.1.stable.8803 here at our place and we use a Microsoft AD for central user management. Everything worked fine until now.

Problems started when i tried to login from a different machine while i was still logged in to redmine on my other workstation. The access has been denied with a "Invalid user or password" error. Coming back to the other workstation, i was still logged in. Logging out and in again was no problem.

Another user has experienced the same problem. He tried to login from my workstation (where it previously worked): I logged out first and he tried to log in. Same problem - his access was denied and even worse: my access is now denied as well.

We tried to remove any cookies stored in my browser from this domain, restarting the apache web server without success: only the local user admin seems to be able to login.

I have the following authentication settings:
authentication is required, Autologin and Self-registration disabled.

It might be related to the AD (the connection "test" is successful though) but log/production.log is not very elaborate about this topic.

I added the lines

config.logger = Logger.new(config.log_path, 2, 1000000)
config.logger.level = Logger::DEBUG

to config/additional_environment.rb but the only thing i see is

Processing AccountController#login (for CLIENTIP at 2012-03-27 15:23:01) [POST]
  Parameters: {"back_url"=>"http%3A%2F%2FHOSTNAME%2F", "action"=>"login", "authenticity_token"=>"********************************", "username"=>"USERNAME", "controller"=>"account", "password"=>"[FILTERED]", "login"=>"Login »"}
  SQL (0.3ms)   SELECT max("settings".updated_on) AS max_updated_on FROM "settings" 
  AnonymousUser Load (0.2ms)   SELECT * FROM "users" WHERE ( ("users"."type" = 'AnonymousUser' ) ) LIMIT 1
  User Load (0.2ms)   SELECT * FROM "users" WHERE ( login = 'USERNAME') AND ( ("users"."type" = 'User' OR "users"."type" = 'AnonymousUser' ) ) LIMIT 1
  AuthSource Load (0.2ms)   SELECT * FROM "auth_sources" WHERE ("auth_sources"."id" = 1) 
Failed login for 'USERNAME' from CLIENTIP at Tue Mar 27 13:23:01 UTC 2012
Rendering template within layouts/base
Rendering account/login
  UserPreference Load (0.2ms)   SELECT * FROM "user_preferences" WHERE ("user_preferences".user_id = 2) LIMIT 1
Completed in 10ms (View: 4, DB: 1) | 200 OK [http://HOSTNAME/login]

RAILS_ENV=production script/about gives

About your application's environment
Ruby version              1.8.7 (x86_64-linux)
RubyGems version          1.8.15
Rack version              1.1.1
Rails version             2.3.14
Active Record version     2.3.14
Active Resource version   2.3.14
Action Mailer version     2.3.14
Active Support version    2.3.14
Application root          /var/data/redmine-1.3
Environment               production
Database adapter          postgresql
Database schema version   20110902000000

About your Redmine plugins
Redmine Chuck Norris plugin   0.0.5

I am wondering whether this authenticity_token may be related to my problem...

Pointers into the right direction are highly appreciated.

Many thanks in advance,

Markus