Re: [SM-USERS] Problems using SquirrelMail 1.4.x on IIS 5.0

[Tomas K. <to...@us...>]

>> >> ... removed other part of email ...
>> >>
>> >> >> > OK, done but no changes. Is it possible that the server
>> can not
>> >> >> answer in
>> >> >> > time? When SquirrelMail is used the processes PHP.EXE and
>> >> >> HMailServer.exe> (version 4.1.1-B140) use together 100% CPU
>> for a
>> >> >> few seconds. I think
>> >> >> > SquirrelMail gets a timeout.
>> >> >>
>> >> >> If you get 'Unknown user or password incorrect', when URL says
>> >> >> http://your-host/path-to-sm/src/webmail.php - you have
>> invalid php
>> >> >> session setup or cookies are not accepted by browser.
>> SquirrelMail>> >> managed to pass
>> >> >> src/redirect.php script and redirect.php verified that provided
>> >> >> usernameand password information is correct.
>> >> >>
>> >> >> Recheck your php settings in phpinfo().
>> >> >>
>> >> > Please see my new phpinfo file as attachment.
>> >>
>> >> Are you sure that your server and workstation clocks are
>> correct and
>> >> cookies are not blocked by browser, soho router or some privacy
>> >> proxy? Is
>> >> IIS Lockdown applied to your IIS setup? Can you reproduce same
>> >> issue in
>> >> IE, Firefox and Opera browsers?
>> >>
>> > Hi,
>> >
>> > clocks are correct, server is a virtual machine that
>> synchronizes the time
>> > from the host where I use IE 6.0 for opening SquirrelMail.
>> >
>> > How can I apply IIS Lockdown in IIS 5.0?
>>
>> I haven't asked to apply IIS Lockdown. I have asked, if it is applied.
>>
>> IIS Lockdown
>> (http://www.microsoft.com/technet/security/tools/locktool.mspx) is
>> designed to secure IIS and might break some scripts. If it is not
>> applied,then we remove one possible debugging step. If it is
>> applied, then you
>> should retest your setup when lockdown settings are removed.
>>
>
> I never applied it.
>
>> > Issue is reproducable by using Firefox 1.5.0.2 an Opera 8.54.
>>
>> could you install cookie_warning plugin
>> (http://www.squirrelmail.org/plugin_view.php?id=235) and try
>> logging in?
>>
>
> Installed but without any changes. I didn't get any error messages.
>
>> could you check cookie domain and path? Firefox and Opera have cookie
>> managers that allow you to view session and normal cookies.
>>
>
> See attached screenshot from Opera.

try filtering cookies to 'key' word without quotes. Maybe 'key' cookie is
in other domain.

-- 
Tomas