From: rob a. <ran...@ya...> - 2007-06-26 03:35:43
|
I am attempting to use the vlogin plugin on a server that contains a number of domains and a single instance of squirrelmail under ssl. I have the apache server configured such that if a user visits a certain page in their own domain (ie; http://custdomain.com/webmail ) that it redirects to the ssl protected site with the original domain appended as an argument (ie; https://protdomain.com/webmail/src/login.php?domain=custdomain.com ). As the documentation suggests, using the correct allVirtualDomainsAreUnderOneHost regular expression results in the login page showing the desired customized config for the customer in question; the logo, title, etc are all correct for the domain in question. So far, so good. The problem I am having is that after the login post to the "redirect.php" page the vlogin plugin does not retain the custom settings in appending the domain name to the user id the user types in. So, if the domain was custdomain.com, the userid should be of the form us...@cu..., but in debug mode and system log files this is being posted as simply user@ - no domain name. If I hack the squirrelmail login.php page and login.tpl file to include the parsed domain name on the redirect url (redirect.php?domain=custdomain.com) the plug in works correctly, but this doesn't work well when upgrading squirrelmail and is not effective if the user fails login and is redirected back to the login page by the error page. How does the vlogin plugin retain the domain information between the login and redirect pages? I've tried holding it in a session variable and a cookie, but something in the log in appears to be trashing them. I can't think of way to get apache to persistently tag the original domain onto all the system urls either. ____________________________________________________________________________________ Expecting? Get great news right away with email Auto-Check. Try the Yahoo! Mail Beta. http://advision.webevents.yahoo.com/mailbeta/newmail_tools.html |
From: Jan H. P. <jh...@jh...> - 2007-10-29 23:30:40
|
rob ansaldo wrote: > The problem I am having is that after the login post to the "redirect.php" page the vlogin plugin does not retain the custom settings in appending the domain name to the user id the user types in. So, if the domain was custdomain.com, the userid should be of the form us...@cu..., but in debug mode and system log files this is being posted as simply user@ - no domain name. If I hack the squirrelmail login.php page and login.tpl file to include the parsed domain name on the redirect url (redirect.php?domain=custdomain.com) the plug in works correctly, but this doesn't work well when upgrading squirrelmail and is not effective if the user fails login and is redirected back to the login page by the error page. > > Rob, Have you fixed this problem? Latetly I noticed that my squirrelmail has the same problem. The config is is the same with respect to these settings. It looks to me as if squirrelmail only applies alternate settings during login, after that all alternate settings are gone. Greetings, Jan Hugo Prins |
From: Paul L. <pa...@sq...> - 2007-10-31 20:49:51
|
> > The problem I am having is that after the login post to the "redirect.php" > > page the vlogin plugin does not retain the custom settings in appending > > the domain name to the user id the user types in. So, if the domain was > > custdomain.com, the userid should be of the form us...@cu..., > > but in debug mode and system log files this is being posted as simply user@ - > > no domain name. If I hack the squirrelmail login.php page and login.tpl file to > > include the parsed domain name on the redirect url > > (redirect.php?domain=custdomain.com) the plug in works correctly, but this > > doesn't work well when upgrading squirrelmail and is not effective if the user fails > > login and is redirected back to the login page by the error page. > > Have you fixed this problem? > Latetly I noticed that my squirrelmail has the same problem. > The config is is the same with respect to these settings. show them. what is $useSessionBased? did you apply the multilogin patch? > It looks to me as if squirrelmail only applies alternate settings during > login, after that all alternate settings are gone. |
From: Jan H. P. <jh...@jh...> - 2007-11-06 22:03:31
Attachments:
stripped_config.php
domain.invalid.vlogin.config.php
|
Paul Lesniewski wrote: > show them. what is $useSessionBased? did you apply the multilogin patch? > Attached is my config (stripped out all the comment lines). And a stripped/anonymised version of a domain config file. The multilogin patch is applied. What I also saw is that when I log off, and put the ?domain=domain.invalid behind the url of the signout page I imediatly get the alternative logout page. So, the plugin is working somewhat. I changed the setup to have the domain within the URL (commented out in this config) and then everything works perfectly well. Jan Hugo Prins |
From: Paul L. <pa...@sq...> - 2007-11-09 23:03:53
|
Sorry for the delay. On Nov 6, 2007 2:02 PM, Jan Hugo Prins <jh...@jh...> wrote: > Paul Lesniewski wrote: > > show them. what is $useSessionBased? did you apply the multilogin patch? > > > Attached is my config (stripped out all the comment lines). > And a stripped/anonymised version of a domain config file. You might try putting the domain settings in the main configuration file to make sure that having them in a separate config file isn't causing extra complications. At what point is the domain lost? When you put vlogin into debug mode, does the right hostname show up in the debug info? What is the full URI of the webmail.php page after getting redirected post-login? To further debug, you can find the two lines with this: preg_match($allVirtualDomainsAreUnderOneHost, $hostname . (strpos($_SERVER['PHP_SELF'], '/') === 0 ? '' : '/') . $_SERVER['PHP_SELF'] . (empty($_SERVER['QUERY_STRING']) ? '' : (strpos($_SERVER['QUERY_STRING'], '?') === 0 ? '' : '?') . $_SERVER['QUERY_STRING']), $matches); Which should be around 374 and 948 and put this AFTER that line in both places: echo "allVirtualDomainsAreUnderOneHost = $allVirtualDomainsAreUnderOneHost<hr />hostname = $hostname<hr />_SERVER['PHP_SELF'] = " . $_SERVER['PHP_SELF'] . "<hr />_SERVER['QUERY_STRING'] = " . $_SERVER['QUERY_STRING'] . "<hr />FULL URI = " . $hostname . (strpos($_SERVER['PHP_SELF'], '/') === 0 ? '' : '/') . $_SERVER['PHP_SELF'] . (empty($_SERVER['QUERY_STRING']) ? '' : (strpos($_SERVER['QUERY_STRING'], '?') === 0 ? '' : '?') . $_SERVER['QUERY_STRING']) . "<hr />"; sm_print_r("MATCHES:", $matches, "=============================="); This should dump out the relevant variables and allow you to see if the domain is there, which I assume it is on the login page... when you try to log in, this output should cause SM to fail to load the webmail.php page, which is actually helpful - it should stop on the redirect.php page. Take a look at what the URI is for that page and if the domain even got that far. > The multilogin patch is applied. > > What I also saw is that when I log off, and put the > ?domain=domain.invalid behind the url of the signout page I imediatly > get the alternative logout page. > So, the plugin is working somewhat. > I changed the setup to have the domain within the URL (commented out in > this config) and then everything works perfectly well. |