Hi,
I've recently upgraded my SM to the latest 1.4.23-svn to support php-8.0.25
on fedora35 with apache-2.4.54 and it appears some users are unable to
login. It results in an apache 500 error that I don't know how to
troubleshoot. Some users have no difficulty logging in. I've also deleted
any user prefs or data/ info related to the user.
I'ver verified the users can login directly using IMAP, and it appears SM
is also successfully logging them in:
Nov 22 11:16:54 cipher dovecot[1228]: imap-login: Login: user=<alex>,
method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=1386757, secured,
session=<UskYgBHuhJx/AAAB>
Nov 22 11:16:54 cipher dovecot[1228]:
imap(alex)<1386757><UskYgBHuhJx/AAAB>: Disconnected: Logged out in=44
out=1022 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0
body_count=0 body_bytes=0
Nov 22 11:16:54 cipher squirrelmail[664245]: Successful webmail login: by
alex (example.com) at 68.195.111.42
I have the following plugins installed, although I've tried limiting it
even further, and I don't think one of them is causing the problem. I did
have to delete quicksave, as that would prevent the inbox from being
displayed - perhaps that's already included?
1.squirrelspell
2. compatibility
3. squirrel_logger
4. administrator
5. calendar
6. delete_move_next
7. filters
8. folder_sizes
9. local_autorespond_forward
10. lockout
11. message_details
12. sent_subfolders
13. timeout_user
14. info
I've also enabled html_errors, log_errors, display_startup_errors,
error_reporting = E_ALL, and error_log, but there aren't any errors
generated when the 500 error occurs. The only indication that an error
occurred is in modsec_security.log:
--35225a73-F--
HTTP/1.1 500 Internal Server Error
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: SQMSESSID=2e73bd53fdfeedd857900953d6a69c13; path=/webmail/;
secure; HttpOnly; SameSite=Strict
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Feature-Policy: geolocation 'self'; vibrate 'none'
Content-Security-Policy: frame-ancestors 'self'
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
The configtest.php script also appears to run correctly:
SquirrelMail configtest
This script will try to check some aspects of your SquirrelMail
configuration and point you to errors wherever it can find them. You need
to go run conf.pl in the config/ directory first before you run this script.
SquirrelMail version: 1.4.23 [SVN]
Config file version: 1.4.0
Config file last modified: 22 November 2022 11:37:14
Checking PHP configuration...
PHP version 8.0.25 OK.
Running as apache(48) / apache(48)
display_errors:
error_reporting: 32767
variables_order OK: GPCS.
PHP extensions OK. Dynamic loading is disabled.
Checking paths...
Data dir OK.
Attachment dir OK.
Plugins OK.
Themes OK.
Default language OK.
Base URL detected as: https://example.com/webmail/src (location base
autodetected)
Checking outgoing mail service....
SMTP server OK (220 cipher.example.com ESMTP Postfix)
Checking IMAP service....
IMAP server ready (* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS
ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.)
Capabilities: * CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE
IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN
Checking internationalization (i18n) settings...
gettext - Gettext functions are available. On some systems you must
have appropriate system locales compiled.
mbstring - Mbstring functions are available.
recode - Recode functions are unavailable.
iconv - Iconv functions are available.
timezone - Webmail users can change their time zone settings.
Checking database functions...
not using database functionality.
Congratulations, your SquirrelMail setup looks fine to me!
Any ideas greatly appreciated.
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
