Hi, Just to follow up here - I fixed the problem. It turns out it was an unterminated comment in the css template some users were using. Apparently it previously didn't matter with older versions of PHP, but now causes the entire application to cease operating. Ridiculous. Thanks so much for maintaining squirrelmail. alex On Tue, Nov 22, 2022 at 11:45 AM Alex <mysqlstudent@xxxxxxxxx> wrote: > Hi, > > I've recently upgraded my SM to the latest 1.4.23-svn to support > php-8.0.25 on fedora35 with apache-2.4.54 and it appears some users are > unable to login. It results in an apache 500 error that I don't know how to > troubleshoot. Some users have no difficulty logging in. I've also deleted > any user prefs or data/ info related to the user. > > I'ver verified the users can login directly using IMAP, and it appears SM > is also successfully logging them in: > > Nov 22 11:16:54 cipher dovecot[1228]: imap-login: Login: user=<alex>, > method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=1386757, secured, > session=<UskYgBHuhJx/AAAB> > Nov 22 11:16:54 cipher dovecot[1228]: > imap(alex)<1386757><UskYgBHuhJx/AAAB>: Disconnected: Logged out in=44 > out=1022 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 > body_count=0 body_bytes=0 > Nov 22 11:16:54 cipher squirrelmail[664245]: Successful webmail login: by > alex (example.com) at 68.195.111.42 > > I have the following plugins installed, although I've tried limiting it > even further, and I don't think one of them is causing the problem. I did > have to delete quicksave, as that would prevent the inbox from being > displayed - perhaps that's already included? > > 1.squirrelspell > 2. compatibility > 3. squirrel_logger > 4. administrator > 5. calendar > 6. delete_move_next > 7. filters > 8. folder_sizes > 9. local_autorespond_forward > 10. lockout > 11. message_details > 12. sent_subfolders > 13. timeout_user > 14. info > > I've also enabled html_errors, log_errors, display_startup_errors, > error_reporting = E_ALL, and error_log, but there aren't any errors > generated when the 500 error occurs. The only indication that an error > occurred is in modsec_security.log: > > --35225a73-F-- > HTTP/1.1 500 Internal Server Error > Expires: Thu, 19 Nov 1981 08:52:00 GMT > Cache-Control: no-store, no-cache, must-revalidate > Pragma: no-cache > Set-Cookie: SQMSESSID=2e73bd53fdfeedd857900953d6a69c13; path=/webmail/; > secure; HttpOnly; SameSite=Strict > X-Frame-Options: SAMEORIGIN > Strict-Transport-Security: max-age=63072000; includeSubDomains > X-XSS-Protection: 1; mode=block > X-Content-Type-Options: nosniff > Feature-Policy: geolocation 'self'; vibrate 'none' > Content-Security-Policy: frame-ancestors 'self' > Content-Length: 0 > Connection: close > Content-Type: text/html; charset=UTF-8 > > The configtest.php script also appears to run correctly: > > SquirrelMail configtest > This script will try to check some aspects of your SquirrelMail > configuration and point you to errors wherever it can find them. You need > to go run conf.pl in the config/ directory first before you run this > script. > > SquirrelMail version: 1.4.23 [SVN] > Config file version: 1.4.0 > Config file last modified: 22 November 2022 11:37:14 > Checking PHP configuration... > PHP version 8.0.25 OK. > Running as apache(48) / apache(48) > display_errors: > error_reporting: 32767 > variables_order OK: GPCS. > PHP extensions OK. Dynamic loading is disabled. > Checking paths... > Data dir OK. > Attachment dir OK. > Plugins OK. > Themes OK. > Default language OK. > Base URL detected as: https://example.com/webmail/src (location base > autodetected) > Checking outgoing mail service.... > SMTP server OK (220 cipher.example.com ESMTP Postfix) > Checking IMAP service.... > IMAP server ready (* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS > ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.) > Capabilities: * CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE > IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN > Checking internationalization (i18n) settings... > gettext - Gettext functions are available. On some systems you must > have appropriate system locales compiled. > mbstring - Mbstring functions are available. > recode - Recode functions are unavailable. > iconv - Iconv functions are available. > timezone - Webmail users can change their time zone settings. > Checking database functions... > not using database functionality. > Congratulations, your SquirrelMail setup looks fine to me! > > Any ideas greatly appreciated. > > > > > > > > > > > > ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users