RE: [SM-USERS] RE:mail appears to be from wrong user

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

I wonder if this may have something to do with premature cookie deletion.
I deleted all of my cookies while logged in to squirrelmail.  After I
 re-logged in, I
checked the sessions in mysql and found a new session along with the old
session.  Since the value field in sessions hold all of the
user prefs ( name, from, reply to, etc. ), if the old session somehow got
reused by anothe ruser this might explain the symptom.
Does anyone know how the sesskey is generated?  Would running squirrelmail
accross multiple machines run the risk of accidentally generating
duplicate sesskeys?

	Tavis

On Wed, 3 Dec 2003, Brian Kacmarsky wrote:

> We are also seeing the same issues here on our campus.   We are running, Red
> Hat AS 2.1, Squirrelmail 1.4.1, PHP 4.1.2, apache-1.3.27, with the following
> plugins:
>
> delete_move_next
> squirrelspell
> newmail
> weather
> message_details
> administrator
> compatibility
> abook_take
> secure_login
> address_add
> admin_add
> auto_prune_sent
> empty_trash
> pupdate
> disk_quota
> change_passwd
> mail_fwd
> username
> askuserinfo
> password_forget
>
> Unlike the other two users who are experiencing problems, we are NOT using
> MySQL to store user preferences.   When users experience this problem (mail
> coming from the wrong user) on our campus, if the real user logs and looks
> at their user preferences (under the options menu), they see the wrong
> information under name, email address, and reply-to address.  This
> information changes to the information of the wrong email address.   Any
> suggestions would be appreciated.
>
> Thanks,
> Brian
>
>
> -----Original Message-----
> From: squ...@li...
> [mailto:squ...@li...] On Behalf Of Tavis
> Gustafson
> Sent: Tuesday, December 02, 2003 7:59 PM
> To: squ...@li...
> Cc: ot...@ro...
> Subject: [SM-USERS] RE:mail appears to be from wrong user
>
>
>
> >We are seeing problems where mail sent by one user appears to come from
> >a different user.
>
> I too am seeing this problem.  I am running Squirrelmail-1.4.1 on Debian
> linux.
>
> One user in particular specifically says this happens when during repeated
> attempts to send send a message after a timeout (eg, clicking back and
> sending again after an intial timeout causes this to happen.)
>
>
>  IMAP server = courier. Plugins are :
>
>
> $plugins[0] = 'dreamhost_virtualhosts';
> $plugins[1] = 'calendar';
> $plugins[2] = 'squirrelspell';
> $plugins[3] = 'translate';
> $plugins[4] = 'spamcop';
> $plugins[5] = 'windows';
> $plugins[6] = 'delete_move_next';
> $plugins[7] = 'listcommands';
> $plugins[8] = 'folder_synch';
> $plugins[9] = 'view_as_html';
> $plugins[10] = 'variable_sent_folder';
> $plugins[11] = 'notify';
> $plugins[12] = 'quicksave';
>
>
> -----Begin original post
> >>I am running squirrelmail 1.4.2 on Redhat Linux ES 2.1
>
> We are seeing problems where mail sent by one user appears to come
> from a different user.   This is NOT the case where several users
> share one machine.   Here are the first Sendmail "Received:" headers from
> three separate messages, sent by three different users.
>
> Received: from 10.226.65.27
>         (SquirrelMail authenticated user someuser.lastname)
>         by mailhost.sendit.nodak.edu with HTTP;
>         Mon, 17 Nov 2003 15:08:09 -0600 (CST)
> Message-ID: <49165.10.226.65.27.1069103289.squirrel <at>
> mailhost.sendit.nodak.edu>
>
> Received: from 10.226.65.13
>         (SquirrelMail authenticated user someuser.lastname)
>         by mailhost.sendit.nodak.edu with HTTP;
>         Mon, 17 Nov 2003 15:09:22 -0600 (CST)
> Message-ID: <49167.10.226.65.13.1069103362.squirrel <at>
> mailhost.sendit.nodak.edu>
>
> Received: from 10.226.65.16
>         (SquirrelMail authenticated user someuser.lastname)
>         by mailhost.sendit.nodak.edu with HTTP;
>         Mon, 17 Nov 2003 15:09:56 -0600 (CST)
> Message-ID: <49249.10.226.65.16.1069103396.squirrel <at>
> mailhost.sendit.nodak.edu>
>
>
> The messages all appears to come from ``someuser.lastname'' (the name has
> been
> changed to protect the innocent).   In this case, someuser.lastname had
> logged
> in a couple hours earlier, from a different computer in a different part of
> the state.
>
> Is anyone else seeing anything like this?  Any suggestions for particular
> things we should look at, to debug this problem further?
>
>
> Tavis Gustafson
> DreamHost
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by OSDN's Audience Survey.
> Help shape OSDN's sites and tell us what you think. Take this five minute
> survey and you could win a $250 Gift Certificate.
> http://www.wrgsurveys.com/2003/osdntech03.php?site=8
> --
> squirrelmail-users mailing list
> List Address: squ...@li...
> List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
> List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>
>