Re: [SM-USERS] login problems with 1.4.23-svn

[Imre G. <gi...@na...>]

On 02/26/2014 08:36 PM, Ted Hatfield wrote:
>> On 2014-02-20 10:55, Imre Gergely wrote:
>>> Hi
>>>
>>> I'm trying to install SquirrelMail 1.4.32-svn (210140217_0200 to be
>>> exact) on a CentOS 6.5 box, with PHP 5.4.24 (from IUS repo). The IMAP
>>> server is a local Dovecot server.
>>>
>>> The installing goes fine, the configtest.php shows that everything is
>>> OK. I manage to log in with username/password, left side folders, right
>>> side the INBOX with the messages. After this, no matter what I click on
>>> (be it another folder, or message, or 'check mail', or Options, I get
>>> thrown back to the login screen, which says: "ERROR. You must be logged
>>> in to access this page.", and "Go to the login page".
>>>
>>> So the initial login seems to work but after that is seems to forget
>>> that I'm logged in.
>>>
>>> I also have a squirrel 1.4.22 on this same box, installed under another
>>> virtualhost, which is working fine, using the same local Dovecot IMAP
>>> server, same PHP, same Apache.
>>> For this reason I've tried changing the $session_name variable in the
>>> 1.4.23-svn installation to something else. I've tried with two different
>>> browsers, one of them was clean (a.k.a no cache, no history, no nothing,
>>> fresh install). I'm not logged in with the same user twice. I don't see
>>> anything in the PHP/apache logs that would indicate what the problem is.
>>>
>>> Any help would be appreciated. Thanks!
>>>
>>> --
>>> Imre Gergely
>>> http://havaz.net [1]
>>> gpg --keyserver subkeys.pgp.net --recv-keys 0x34525305
>>>
>> On Wed, 26 Feb 2014, Imre Gergely wrote:
>>
>>
>> Hi
>>
>> Nobody had/has this problem, only me?
>>
> I've never had this problem but my guess is that it is a cookie problem.
>
> Squirrelmail keeps track of it's users sessions via a cookie. Specifically 
> the SQMSESSID.  If Squirrelmail can't verify the session id by querying 
> the cookie then you will get pushed to the error.
>
> "You must be logged in to access this page."
>
> If you were using the same url to test between each different version I 
> might see there being a conflict of some kind but I'm not knoweledgable 
> enough to state that for certain.  That's just a guess on my part.
>
> I would make certain that you clear your cookies before accessing the new 
> site or switching between sites.
>
> Make certain that your virtual hosts aren't using the same name/ip address 
> as the cookie keys off the url name.
>
> I hope this helps.
>

Thanks guys for the suggestions. I'm at a loss on what to do, though...
I've installed a brand new CentOS 6.5 in a VM, apache + PHP, got the
latest 1.4.23-svn from the site, installed it and it is behaving the
same way. It's a different URL, it's a different machine, I've also
tried with Chrome browser, it's doing the same thing. I log in, and
everywhere I click I get thrown out to the error "you must be logged in
bla bla..."

[root@m1test squirrelmail]# php -v
PHP 5.4.25 (cli) (built: Feb  7 2014 09:45:42)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2014 Zend Technologies

This is from IUS repo.

I've installed squirrelmail in /var/www/html/squirrelmail, with basic
config, and remote dovecot IMAP (so I can log in), that part is working,
I'm seeing my INBOX, just cannot click on anything.
In php.ini I didn't tweak anything (only set the timezone).

I did see some strange things in the cookies, see attached screenshots
with every cookie. Why are there so many cookies, and why are they with
expiration date 1970 (the ones with /src/ in the path) ? I've looked at
the cookies for 1.4.22, and I have ONE with SQSESSID, and it doesn't
mention /src/ anywhere.

-- 
Imre Gergely
http://havaz.net
gpg --keyserver subkeys.pgp.net --recv-keys 0x34525305