Did you set a unique session ID for each install? -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057 2014.Március 2.(V) 08:30 időpontban Paul Lesniewski ezt írta: > On Thu, Feb 27, 2014 at 3:57 AM, Imre Gergely <gimre@xxxxxxxxxxx> wrote: >> >> On 02/26/2014 08:36 PM, Ted Hatfield wrote: >>>> On 2014-02-20 10:55, Imre Gergely wrote: >>>>> Hi >>>>> >>>>> I'm trying to install SquirrelMail 1.4.32-svn (210140217_0200 to be >>>>> exact) on a CentOS 6.5 box, with PHP 5.4.24 (from IUS repo). The IMAP >>>>> server is a local Dovecot server. >>>>> >>>>> The installing goes fine, the configtest.php shows that everything is >>>>> OK. I manage to log in with username/password, left side folders, >>>>> right >>>>> side the INBOX with the messages. After this, no matter what I click >>>>> on >>>>> (be it another folder, or message, or 'check mail', or Options, I get >>>>> thrown back to the login screen, which says: "ERROR. You must be >>>>> logged >>>>> in to access this page.", and "Go to the login page". >>>>> >>>>> So the initial login seems to work but after that is seems to forget >>>>> that I'm logged in. >>>>> >>>>> I also have a squirrel 1.4.22 on this same box, installed under >>>>> another >>>>> virtualhost, which is working fine, using the same local Dovecot IMAP >>>>> server, same PHP, same Apache. >>>>> For this reason I've tried changing the $session_name variable in the >>>>> 1.4.23-svn installation to something else. I've tried with two >>>>> different >>>>> browsers, one of them was clean (a.k.a no cache, no history, no >>>>> nothing, >>>>> fresh install). I'm not logged in with the same user twice. I don't >>>>> see >>>>> anything in the PHP/apache logs that would indicate what the problem >>>>> is. >>>>> >>>>> Any help would be appreciated. Thanks! >>>>> >>>>> -- >>>>> Imre Gergely >>>>> http://havaz.net [1] >>>>> gpg --keyserver subkeys.pgp.net --recv-keys 0x34525305 >>>>> >>>> On Wed, 26 Feb 2014, Imre Gergely wrote: >>>> >>>> >>>> Hi >>>> >>>> Nobody had/has this problem, only me? >>>> >>> I've never had this problem but my guess is that it is a cookie >>> problem. >>> >>> Squirrelmail keeps track of it's users sessions via a cookie. >>> Specifically >>> the SQMSESSID. If Squirrelmail can't verify the session id by querying >>> the cookie then you will get pushed to the error. >>> >>> "You must be logged in to access this page." >>> >>> If you were using the same url to test between each different version I >>> might see there being a conflict of some kind but I'm not knoweledgable >>> enough to state that for certain. That's just a guess on my part. >>> >>> I would make certain that you clear your cookies before accessing the >>> new >>> site or switching between sites. >>> >>> Make certain that your virtual hosts aren't using the same name/ip >>> address >>> as the cookie keys off the url name. >>> >>> I hope this helps. >>> >> >> Thanks guys for the suggestions. I'm at a loss on what to do, though... >> I've installed a brand new CentOS 6.5 in a VM, apache + PHP, got the >> latest 1.4.23-svn from the site, installed it and it is behaving the >> same way. It's a different URL, it's a different machine, I've also >> tried with Chrome browser, it's doing the same thing. I log in, and >> everywhere I click I get thrown out to the error "you must be logged in >> bla bla..." >> >> [root@m1test squirrelmail]# php -v >> PHP 5.4.25 (cli) (built: Feb 7 2014 09:45:42) >> Copyright (c) 1997-2014 The PHP Group >> Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies >> >> This is from IUS repo. >> >> I've installed squirrelmail in /var/www/html/squirrelmail, with basic >> config, and remote dovecot IMAP (so I can log in), that part is working, >> I'm seeing my INBOX, just cannot click on anything. >> In php.ini I didn't tweak anything (only set the timezone). >> >> I did see some strange things in the cookies, see attached screenshots >> with every cookie. Why are there so many cookies, and why are they with >> expiration date 1970 (the ones with /src/ in the path) ? I've looked at >> the cookies for 1.4.22, and I have ONE with SQSESSID, and it doesn't >> mention /src/ anywhere. > > Not sure why your attachments aren't coming through; you might just > link to an externally hosted file(s). > > When you said the path you found to the SQSESSID cookie was "/", does > that match the URI of SquirrelMail on your server? (in regard to your > previous test installation) > > The cookies dated in 1970 are from code that is intended to *remove* > any such cookies in case they exist in the browser. Given that > expiration date, the browser should remove them; not sure why they are > being shown to you. > > -- > Paul Lesniewski > SquirrelMail Team > Please support Open Source Software by donating to SquirrelMail! > http://squirrelmail.org/donate_paul_lesniewski.php > > ------------------------------------------------------------------------------ > Flow-based real-time traffic analytics software. Cisco certified tool. > Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer > Customize your own dashboards, set traffic alerts and generate reports. > Network behavioral analysis & security monitoring. All-in-one tool. > http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk > ----- > squirrelmail-users mailing list > Posting guidelines: http://squirrelmail.org/postingguidelines > List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx > List archives: http://news.gmane.org/gmane.mail.squirrelmail.user > List info (subscribe/unsubscribe/change options): > https://lists.sourceforge.net/lists/listinfo/squirrelmail-users > ------------------------------------------------------------------------------ Flow-based real-time traffic analytics software. Cisco certified tool. Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer Customize your own dashboards, set traffic alerts and generate reports. Network behavioral analysis & security monitoring. All-in-one tool. http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
