Re: SM won't let users log on, but IMAP does

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Chris Riley wrote:
> 
> Thanks for getting back to me so quickly.
> 
> On Mon, Oct 12, 2009 at 11:11 AM, Tomas Kuliavas <
> tokul@xxxxxxxxxxxxxxxxxxxxx> wrote:
> 
>>
>> >     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
>> > (location base autodetected)
>>
>> 1. Is base URL detected correctly? It must match URL displayed in
>> browser's address bar.
>>
> 
> Hmm. Base URL is https. The login page is https. But the error page is
> plain
> http. Is this is? If so, how to fix it?
> 

Find out why login is redirected to http:// URL. SquirrelMail login form
sends data to src/redirect.php, redirect.php sets authentication cookies and
redirects users to src/webmail.php, webmail.php creates frameset with
left_main.php and right_main.php frames. All scripts use same base URL
detection functions and https://.../src/redirect.php should not redirect to
http://.../src/webmail.php unless some plugin breaks redirection process.
Turn off all plugins.

Make sure that SquirrelMail scripts are not modified and you don't have any
custom links/images/css in webmail interface. Invalid image or css link
might redirect users to login page, which destroys session.

Try reproducing your issues in standard SquirrelMail package (1.4.15, 1.4.19
or 1.4.20svn). SquirrelMail introduced some session cookie security fixes
after 1.4.15 version. Maybe these fixes are not ported correctly in Ubuntu
SquirrelMail package.

If all your users use IE for Mac :), try Safari. IE for Mac has some quirks
in secure cookie handing.

-- 
Tomas
-- 
View this message in context: http://www.nabble.com/SM-won%27t-let-users-log-on%2C-but-IMAP-does-tp25857065p25859357.html
Sent from the squirrelmail-users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux