SM won't let users log on, but IMAP does

[Chris Riley]

Hello,

I recently rebuilt my linux box, and now I'm having trouble with logging on to squirrelmail. None of my users can log into SM. It always says "you must be logged in to access this page". Users can get their mail via an IMAP client such as Thunderbird, but the website fails every time.

I am running Ubuntu 9.04, SM 1.4.15 (from the Ubuntu repos), Apache 2.2.11, Courier-IMAP 4.4.0.

I have done the "D.  Set pre-defined settings for specific IMAP servers" for courier.

How can I fix this?

==============================

===================================

Here's what's in my mail.log:

Oct 12 09:53:39 <HOSTNAME> imapd: Connection, ip=[::ffff:127.0.0.1]
Oct 12 09:53:39 <HOSTNAME> imapd: LOGIN, user=<LOGIN>, ip=[::ffff:127.0.0.1], port=[45935], protocol=IMAP
Oct 12 09:53:39 <HOSTNAME> imapd: LOGOUT, user=<LOGIN>, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=30, sent=238, time=0

So I know that IMAP is authenticating the user.

Here is /etc/apache2/conf.d/squirrelmail.conf

Alias /squirrelmail /usr/share/squirrelmail

<Directory /usr/share/squirrelmail>
  Options Indexes FollowSymLinks
  <IfModule mod_php4.c>
    php_flag register_globals off
  </IfModule>
  <IfModule mod_php5.c>
    php_flag register_globals off
  </IfModule>
  <IfModule mod_dir.c>
    DirectoryIndex index.php
  </IfModule>

  # access to configtest is limited by default to prevent information leak
  <Files configtest.php>
    order deny,allow
    deny from all
    allow from 127.0.0.1
  </Files>
</Directory>

# users will prefer a simple URL like http://webmail.example.com
#<VirtualHost 1.2.3.4>
#  DocumentRoot /usr/share/squirrelmail
#  ServerName webmail.example.com
#</VirtualHost>

# redirect to https when available (thanks omen@...)
#
#  Note: There are multiple ways to do this, and which one is suitable for
#  your site's configuration depends. Consult the apache documentation if
#  you're unsure, as this example might not work everywhere.
#
#<IfModule mod_rewrite.c>
#  <IfModule mod_ssl.c>
#    <Location /squirrelmail>
#      RewriteEngine on
#      RewriteCond %{HTTPS} !^on$ [NC]
#      RewriteRule . https://%{HTTP_HOST}%{REQUEST_URI}  [L]
#    </Location>
#  </IfModule>
#</IfModule>

Here's the output of configtest.php

SquirrelMail configtest

This script will try to check some aspects of your SquirrelMail configuration and point you to errors whereever it can find them. You need to go run conf.pl in the config/ directory first before you run this script.

SquirrelMail version:	1.4.15
Config file version:	1.4.0
Config file last modified:	11 October 2009 20:56:53

Checking PHP configuration...
    PHP version 5.2.6-3ubuntu4.2 OK.
    display_errors: 1
    error_reporting: 6135
    variables_order OK: EGPCS.
    PHP extensions OK. Dynamic loading is disabled.
Checking paths...
    Data dir OK.
    Attachment dir OK.
    Plugins OK.
    Themes OK.
    Default language OK.
    Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src (location base autodetected)
Checking outgoing mail service....
    SMTP server OK (220 <HOSTNAME>.com ESMTP Postfix (Ubuntu))
Checking IMAP service....
    IMAP server ready (* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc. See COPYING for distribution information.)
    Capabilities: * CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS
Checking internationalization (i18n) settings...
     gettext - Gettext functions are available. On some systems you must have appropriate system locales compiled.
     mbstring - Mbstring functions are available.
     recode - Recode functions are unavailable.
     iconv - Iconv functions are available.
     timezone - Webmail users can change their time zone settings.
Checking database functions...
    not using database functionality.

Congratulations, your SquirrelMail setup looks fine to me!

--
It's enough to make you wonder sometimes if you're on the right planet  -- FGTH

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Tomas Kuliavas]

2009.10.12 17:43 Chris Riley rašė:
> Hello,
>
> I recently rebuilt my linux box, and now I'm having trouble with logging
> on
> to squirrelmail. None of my users can log into SM. It always says "you
> must
> be logged in to access this page". Users can get their mail via an IMAP
> client such as Thunderbird, but the website fails every time.
...
> Here's the output of configtest.php
> SquirrelMail configtest
...
>     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
> (location base autodetected)

1. Is base URL detected correctly? It must match URL displayed in
browser's address bar.

2. Create test script with
---
<?php
session_write_close();
ini_set('error_reporting',E_ALL);
ini_set('display_errors',1);
var_dump(session_start());
---

Save it somewhere on your webhost. For example in
/usr/share/squirrelmail/somename.php. Open it in browser
(https://<HOSTNAME>.com/squirrelmail/somename.php) and check for any
session write errors.

--
Tomas


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Chris Riley]

Thanks for getting back to me so quickly.

On Mon, Oct 12, 2009 at 11:11 AM, Tomas Kuliavas <tokul@...> wrote:

>     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
> (location base autodetected)

1. Is base URL detected correctly? It must match URL displayed in
browser's address bar.

Hmm. Base URL is https. The login page is https. But the error page is plain http. Is this is? If so, how to fix it?

 

2. Create test script with
---
<?php
session_write_close();
ini_set('error_reporting',E_ALL);
ini_set('display_errors',1);
var_dump(session_start());
---

I did this, and the only thing it says is

bool(true)

No write errors.

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Tomas Kuliavas]

Chris Riley wrote:

Thanks for getting back to me so quickly.

On Mon, Oct 12, 2009 at 11:11 AM, Tomas Kuliavas <
[e-mail]> wrote:

>
> >     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
> > (location base autodetected)
>
> 1. Is base URL detected correctly? It must match URL displayed in
> browser's address bar.
>

Hmm. Base URL is https. The login page is https. But the error page is plain
http. Is this is? If so, how to fix it?

Find out why login is redirected to http:// URL. SquirrelMail login form sends data to src/redirect.php, redirect.php sets authentication cookies and redirects users to src/webmail.php, webmail.php creates frameset with left_main.php and right_main.php frames. All scripts use same base URL detection functions and https://.../src/redirect.php should not redirect to http://.../src/webmail.php unless some plugin breaks redirection process. Turn off all plugins.

Make sure that SquirrelMail scripts are not modified and you don't have any custom links/images/css in webmail interface. Invalid image or css link might redirect users to login page, which destroys session.

Try reproducing your issues in standard SquirrelMail package (1.4.15, 1.4.19 or 1.4.20svn). SquirrelMail introduced some session cookie security fixes after 1.4.15 version. Maybe these fixes are not ported correctly in Ubuntu SquirrelMail package.

If all your users use IE for Mac :), try Safari. IE for Mac has some quirks in secure cookie handing.

--
Tomas

[Chris Riley]

Find out why login is redirected to http:// URL. SquirrelMail login form
sends data to src/redirect.php, redirect.php sets authentication cookies and
redirects users to src/webmail.php, webmail.php creates frameset with
left_main.php and right_main.php frames. All scripts use same base URL
detection functions and https://.../src/redirect.php should not redirect to
http://.../src/webmail.php unless some plugin breaks redirection process.
Turn off all plugins.

That's it. Plugins. I removed them and it started working again. Thanks!

I've managed to put the secure_login plugin back in, but I'm having trouble with some of the others. No biggie. Thanks for your help.

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[David C. Rankin]

On Monday 12 October 2009 11:56:33 am Tomas Kuliavas wrote:

Thomas,

    I just found this thread. After yesterdays updates to 1.5.2 svn (Rev
13866), I have the exact same problem, but unfortunately, plugins are not my
problem. I have used squirrel mail for years, and aside from a few issues in
the past, I haven't had any problems. I don't know what's going on here. I can
log into the imap server (dovecot) with kmail and thunderbird or from the
command line. The server this the same openSuSE 10.3 box I have been running
for a couple of years. The apache2 logs look fine and my other web apps work
(eGroupWare and Gallery2), so I know it isn't a php or apache2 config issue.
So I'm kind of baffled.

        Below is what I have done from following this thread and your discussion with
the OP. I have tried to include all of the information you asked for. If I
need to provide anything else, just let me know and I'm happy to do it. I put
my answers inline below for context. (I just pray that it is real sqmail
problem and not some utter stupidity on my part -- it's has happened....

        Thanks in advance for any help or advise you can give.

> Chris Riley wrote:
> > Thanks for getting back to me so quickly.
> >
> > On Mon, Oct 12, 2009 at 11:11 AM, Tomas Kuliavas <
> >
> > tokul@...> wrote:
> >> >     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
> >> > (location base autodetected)
> >>
> >> 1. Is base URL detected correctly? It must match URL displayed in
> >> browser's address bar.

YES, both http and https

2. Create test script with
---
<?php
session_write_close();
ini_set('error_reporting',E_ALL);
ini_set('display_errors',1);
var_dump(session_start());

Done, response:

bool(true)
No write errors for both http: and https:

>
> Find out why login is redirected to http:// URL. SquirrelMail login form
> sends data to src/redirect.php, redirect.php sets authentication cookies
>  and redirects users to src/webmail.php, webmail.php creates frameset with
>  left_main.php and right_main.php frames. All scripts use same base URL
>  detection functions and https://.../src/redirect.php should not redirect
>  to http://.../src/webmail.php unless some plugin breaks redirection
>  process. Turn off all plugins.
>

DONE.... Squirrelspell and Calendar are the only plugins I had enabled.
Removing them makes no difference. No users can log in and attempts to login
immediately return you to the page that says:

ERROR
You must be logged in to access this page.
Go to the login page

        It's like it's stuck in a loop?

> Make sure that SquirrelMail scripts are not modified and you don't have any
> custom links/images/css in webmail interface. Invalid image or css link
> might redirect users to login page, which destroys session.
>

        HMM... I do have a link back to my home page, but it should be correct. I
simply set the Signout Page under Organization Preferences:

    5.  Signout Page           : 3111return.html

        The page is a simple redirect that has worked for the past couple of years:

<html>
<head>
<title>3111Skyline, Nacogdoches, Texas -- Freedom For All</title>
<meta http-equiv="REFRESH" content="0;url=http://nirvana.3111skyline.com">
</head>
<body>
</body>
</html>


        I removed it and tested with: $signout_page = '';  Unfortunately, no help. I
have tried both FireFox 3.5 and Opera 10 -- same results. Running
/src/configtest.php was fine. The only warning was the php short tags warning
which is normal. The complete test ouput is here:

http://www.3111skyline.com/download/bugs/sqmail-configtest-OK.txt

        The access log shows the following for each login attempt with opera shows:

192.168.6.102 - - [20/Oct/2009:14:09:50 -0500] "POST
/squirrelmail/src/redirect.php HTTP/1.1" 302 -
192.168.6.102 - - [20/Oct/2009:14:09:50 -0500] "GET
/squirrelmail/src/webmail.php HTTP/1.1" 200 1924

        Attempts with firefox show:

192.168.6.102 - - [20/Oct/2009:14:12:14 -0500] "POST
/squirrelmail/src/redirect.php HTTP/1.1" 302 -
192.168.6.102 - - [20/Oct/2009:14:12:14 -0500] "GET
/squirrelmail/src/webmail.php HTTP/1.1" 200 1924
192.168.6.102 - - [20/Oct/2009:14:12:15 -0500] "GET
/squirrelmail/src/style.php? HTTP/1.1" 200 159

        The error log does not produce a warning on the login attempt or redirect,
but I did find the following warning that were produced by configtest.php:

[Tue Oct 20 13:38:42 2009] [error] [client 192.168.6.102] PHP Warning:  
date(): It is not safe to rely on the system's timezone settings. You are
*required* to use the date.timezone setting or the date_default_timezone_set()
function. In case you used any of those methods and you are still getting this
warning, you most likely misspelled the timezone identifier. We selected
'America/Chicago' for 'CDT/-5.0/DST' instead in
/srv/www/htdocs/squirrelmail/src/configtest.php on line 190
[Tue Oct 20 13:38:42 2009] [error] [client 192.168.6.102] PHP Warning:  
date(): It is not safe to rely on the system's timezone settings. You are
*required* to use the date.timezone setting or the date_default_timezone_set()
function. In case you used any of those methods and you are still getting this
warning, you most likely misspelled the timezone identifier. We selected
'America/Chicago' for 'CDT/-5.0/DST' instead in
/srv/www/htdocs/squirrelmail/src/configtest.php on line 896

        Neither look bad as sqmail selected the correct timezone. So I'm stumped and
need some advise from the smart people on squirrelmail. What in the heck is
going on?? What to check/test next. I'm happy to do the grunt work. Thanks.

--
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: [phone]
Facsimile: [phone]
www.rankinlawfirm.com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Paul Lesniewski]

On Tue, Oct 20, 2009 at 12:22 PM, David C. Rankin
<drankinatty@...> wrote:

> On Monday 12 October 2009 11:56:33 am Tomas Kuliavas wrote:
>
> Thomas,
>
>    I just found this thread. After yesterdays updates to 1.5.2 svn (Rev
> 13866), I have the exact same problem, but unfortunately, plugins are not my
> problem. I have used squirrel mail for years, and aside from a few issues in
> the past, I haven't had any problems. I don't know what's going on here. I can
> log into the imap server (dovecot) with kmail and thunderbird or from the
> command line. The server this the same openSuSE 10.3 box I have been running
> for a couple of years. The apache2 logs look fine and my other web apps work
> (eGroupWare and Gallery2), so I know it isn't a php or apache2 config issue.
> So I'm kind of baffled.
>
>        Below is what I have done from following this thread and your discussion with
> the OP. I have tried to include all of the information you asked for. If I
> need to provide anything else, just let me know and I'm happy to do it. I put
> my answers inline below for context. (I just pray that it is real sqmail
> problem and not some utter stupidity on my part -- it's has happened....
>
>        Thanks in advance for any help or advise you can give.
>
>> Chris Riley wrote:
>> > Thanks for getting back to me so quickly.
>> >
>> > On Mon, Oct 12, 2009 at 11:11 AM, Tomas Kuliavas <
>> >
>> > tokul@...> wrote:
>> >> >     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
>> >> > (location base autodetected)
>> >>
>> >> 1. Is base URL detected correctly? It must match URL displayed in
>> >> browser's address bar.
>
> YES, both http and https
>
> 2. Create test script with
> ---
> <?php
> session_write_close();
> ini_set('error_reporting',E_ALL);
> ini_set('display_errors',1);
> var_dump(session_start());
>
> Done, response:
>
> bool(true)
> No write errors for both http: and https:
>
>>
>> Find out why login is redirected to http:// URL. SquirrelMail login form
>> sends data to src/redirect.php, redirect.php sets authentication cookies
>>  and redirects users to src/webmail.php, webmail.php creates frameset with
>>  left_main.php and right_main.php frames. All scripts use same base URL
>>  detection functions and https://.../src/redirect.php should not redirect
>>  to http://.../src/webmail.php unless some plugin breaks redirection
>>  process. Turn off all plugins.
>>
>
> DONE.... Squirrelspell and Calendar are the only plugins I had enabled.
> Removing them makes no difference. No users can log in and attempts to login
> immediately return you to the page that says:
>
> ERROR
> You must be logged in to access this page.
> Go to the login page
>
>        It's like it's stuck in a loop?

It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
idea what versions the OP was using, but this is likely your problem.
I haven't had the time to test this, but you should first make sure
you are getting the right cookies set in the browser (please show
them).  Also, please indicate what session storage mechanism you are
using.

You can try, for example, commenting out the session_regenerate_id()
call on line 87 of src/redirect.php, but I have no idea if that's got
anything to do with the problem.

>> Make sure that SquirrelMail scripts are not modified and you don't have any
>> custom links/images/css in webmail interface. Invalid image or css link
>> might redirect users to login page, which destroys session.
>>
>
>        HMM... I do have a link back to my home page, but it should be correct. I
> simply set the Signout Page under Organization Preferences:
>
>    5.  Signout Page           : 3111return.html
>
>        The page is a simple redirect that has worked for the past couple of years:
>
> <html>
> <head>
> <title>3111Skyline, Nacogdoches, Texas -- Freedom For All</title>
> <meta http-equiv="REFRESH" content="0;url=http://nirvana.3111skyline.com">
> </head>
> <body>
> </body>
> </html>
>
>
>        I removed it and tested with: $signout_page = '';  Unfortunately, no help. I
> have tried both FireFox 3.5 and Opera 10 -- same results.       Running
> /src/configtest.php was fine. The only warning was the php short tags warning
> which is normal. The complete test ouput is here:
>
> http://www.3111skyline.com/download/bugs/sqmail-configtest-OK.txt
>
>        The access log shows the following for each login attempt with opera shows:
>
> 192.168.6.102 - - [20/Oct/2009:14:09:50 -0500] "POST
> /squirrelmail/src/redirect.php HTTP/1.1" 302 -
> 192.168.6.102 - - [20/Oct/2009:14:09:50 -0500] "GET
> /squirrelmail/src/webmail.php HTTP/1.1" 200 1924
>
>        Attempts with firefox show:
>
> 192.168.6.102 - - [20/Oct/2009:14:12:14 -0500] "POST
> /squirrelmail/src/redirect.php HTTP/1.1" 302 -
> 192.168.6.102 - - [20/Oct/2009:14:12:14 -0500] "GET
> /squirrelmail/src/webmail.php HTTP/1.1" 200 1924
> 192.168.6.102 - - [20/Oct/2009:14:12:15 -0500] "GET
> /squirrelmail/src/style.php? HTTP/1.1" 200 159
>
>        The error log does not produce a warning on the login attempt or redirect,
> but I did find the following warning that were produced by configtest.php:
>
> [Tue Oct 20 13:38:42 2009] [error] [client 192.168.6.102] PHP Warning:
> date(): It is not safe to rely on the system's timezone settings. You are
> *required* to use the date.timezone setting or the date_default_timezone_set()
> function. In case you used any of those methods and you are still getting this
> warning, you most likely misspelled the timezone identifier. We selected
> 'America/Chicago' for 'CDT/-5.0/DST' instead in
> /srv/www/htdocs/squirrelmail/src/configtest.php on line 190
> [Tue Oct 20 13:38:42 2009] [error] [client 192.168.6.102] PHP Warning:
> date(): It is not safe to rely on the system's timezone settings. You are
> *required* to use the date.timezone setting or the date_default_timezone_set()
> function. In case you used any of those methods and you are still getting this
> warning, you most likely misspelled the timezone identifier. We selected
> 'America/Chicago' for 'CDT/-5.0/DST' instead in
> /srv/www/htdocs/squirrelmail/src/configtest.php on line 896
>
>        Neither look bad as sqmail selected the correct timezone. So I'm stumped and
> need some advise from the smart people on squirrelmail. What in the heck is
> going on?? What to check/test next. I'm happy to do the grunt work. Thanks.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Paul Lesniewski]

On Tue, Oct 20, 2009 at 12:55 PM, Paul Lesniewski <paul@...> wrote:

> On Tue, Oct 20, 2009 at 12:22 PM, David C. Rankin
> <drankinatty@...> wrote:
>> On Monday 12 October 2009 11:56:33 am Tomas Kuliavas wrote:
>>
>> Thomas,
>>
>>    I just found this thread. After yesterdays updates to 1.5.2 svn (Rev
>> 13866), I have the exact same problem, but unfortunately, plugins are not my
>> problem. I have used squirrel mail for years, and aside from a few issues in
>> the past, I haven't had any problems. I don't know what's going on here. I can
>> log into the imap server (dovecot) with kmail and thunderbird or from the
>> command line. The server this the same openSuSE 10.3 box I have been running
>> for a couple of years. The apache2 logs look fine and my other web apps work
>> (eGroupWare and Gallery2), so I know it isn't a php or apache2 config issue.
>> So I'm kind of baffled.
>>
>>        Below is what I have done from following this thread and your discussion with
>> the OP. I have tried to include all of the information you asked for. If I
>> need to provide anything else, just let me know and I'm happy to do it. I put
>> my answers inline below for context. (I just pray that it is real sqmail
>> problem and not some utter stupidity on my part -- it's has happened....
>>
>>        Thanks in advance for any help or advise you can give.
>>
>>> Chris Riley wrote:
>>> > Thanks for getting back to me so quickly.
>>> >
>>> > On Mon, Oct 12, 2009 at 11:11 AM, Tomas Kuliavas <
>>> >
>>> > tokul@...> wrote:
>>> >> >     Base URL detected as: https://<HOSTNAME>.com/squirrelmail/src
>>> >> > (location base autodetected)
>>> >>
>>> >> 1. Is base URL detected correctly? It must match URL displayed in
>>> >> browser's address bar.
>>
>> YES, both http and https
>>
>> 2. Create test script with
>> ---
>> <?php
>> session_write_close();
>> ini_set('error_reporting',E_ALL);
>> ini_set('display_errors',1);
>> var_dump(session_start());
>>
>> Done, response:
>>
>> bool(true)
>> No write errors for both http: and https:
>>
>>>
>>> Find out why login is redirected to http:// URL. SquirrelMail login form
>>> sends data to src/redirect.php, redirect.php sets authentication cookies
>>>  and redirects users to src/webmail.php, webmail.php creates frameset with
>>>  left_main.php and right_main.php frames. All scripts use same base URL
>>>  detection functions and https://.../src/redirect.php should not redirect
>>>  to http://.../src/webmail.php unless some plugin breaks redirection
>>>  process. Turn off all plugins.
>>>
>>
>> DONE.... Squirrelspell and Calendar are the only plugins I had enabled.
>> Removing them makes no difference. No users can log in and attempts to login
>> immediately return you to the page that says:
>>
>> ERROR
>> You must be logged in to access this page.
>> Go to the login page
>>
>>        It's like it's stuck in a loop?
>
> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
> idea what versions the OP was using, but this is likely your problem.
> I haven't had the time to test this, but you should first make sure
> you are getting the right cookies set in the browser (please show
> them).  Also, please indicate what session storage mechanism you are
> using.
>
> You can try, for example, commenting out the session_regenerate_id()
> call on line 87 of src/redirect.php, but I have no idea if that's got
> anything to do with the problem.

The OP doesn't appear to be running either 1.5.2 nor PHP 5.3, so
please post any replies to my last one on the more relevant thread
(probably a different issue).

http://thread.gmane.org/gmane.mail.squirrelmail.user/36655

>>> Make sure that SquirrelMail scripts are not modified and you don't have any
>>> custom links/images/css in webmail interface. Invalid image or css link
>>> might redirect users to login page, which destroys session.
>>>
>>
>>        HMM... I do have a link back to my home page, but it should be correct. I
>> simply set the Signout Page under Organization Preferences:
>>
>>    5.  Signout Page           : 3111return.html
>>
>>        The page is a simple redirect that has worked for the past couple of years:
>>
>> <html>
>> <head>
>> <title>3111Skyline, Nacogdoches, Texas -- Freedom For All</title>
>> <meta http-equiv="REFRESH" content="0;url=http://nirvana.3111skyline.com">
>> </head>
>> <body>
>> </body>
>> </html>
>>
>>
>>        I removed it and tested with: $signout_page = '';  Unfortunately, no help. I
>> have tried both FireFox 3.5 and Opera 10 -- same results.       Running
>> /src/configtest.php was fine. The only warning was the php short tags warning
>> which is normal. The complete test ouput is here:
>>
>> http://www.3111skyline.com/download/bugs/sqmail-configtest-OK.txt
>>
>>        The access log shows the following for each login attempt with opera shows:
>>
>> 192.168.6.102 - - [20/Oct/2009:14:09:50 -0500] "POST
>> /squirrelmail/src/redirect.php HTTP/1.1" 302 -
>> 192.168.6.102 - - [20/Oct/2009:14:09:50 -0500] "GET
>> /squirrelmail/src/webmail.php HTTP/1.1" 200 1924
>>
>>        Attempts with firefox show:
>>
>> 192.168.6.102 - - [20/Oct/2009:14:12:14 -0500] "POST
>> /squirrelmail/src/redirect.php HTTP/1.1" 302 -
>> 192.168.6.102 - - [20/Oct/2009:14:12:14 -0500] "GET
>> /squirrelmail/src/webmail.php HTTP/1.1" 200 1924
>> 192.168.6.102 - - [20/Oct/2009:14:12:15 -0500] "GET
>> /squirrelmail/src/style.php? HTTP/1.1" 200 159
>>
>>        The error log does not produce a warning on the login attempt or redirect,
>> but I did find the following warning that were produced by configtest.php:
>>
>> [Tue Oct 20 13:38:42 2009] [error] [client 192.168.6.102] PHP Warning:
>> date(): It is not safe to rely on the system's timezone settings. You are
>> *required* to use the date.timezone setting or the date_default_timezone_set()
>> function. In case you used any of those methods and you are still getting this
>> warning, you most likely misspelled the timezone identifier. We selected
>> 'America/Chicago' for 'CDT/-5.0/DST' instead in
>> /srv/www/htdocs/squirrelmail/src/configtest.php on line 190
>> [Tue Oct 20 13:38:42 2009] [error] [client 192.168.6.102] PHP Warning:
>> date(): It is not safe to rely on the system's timezone settings. You are
>> *required* to use the date.timezone setting or the date_default_timezone_set()
>> function. In case you used any of those methods and you are still getting this
>> warning, you most likely misspelled the timezone identifier. We selected
>> 'America/Chicago' for 'CDT/-5.0/DST' instead in
>> /srv/www/htdocs/squirrelmail/src/configtest.php on line 896
>>
>>        Neither look bad as sqmail selected the correct timezone. So I'm stumped and
>> need some advise from the smart people on squirrelmail. What in the heck is
>> going on?? What to check/test next. I'm happy to do the grunt work. Thanks.
>
>
> --
> Paul Lesniewski
> SquirrelMail Team
> Please support Open Source Software by donating to SquirrelMail!
> http://squirrelmail.org/donate_paul_lesniewski.php
>

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[David C. Rankin]

On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
<snip>
>
> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
> idea what versions the OP was using, but this is likely your problem.
> I haven't had the time to test this, but you should first make sure
> you are getting the right cookies set in the browser (please show
> them).  Also, please indicate what session storage mechanism you are
> using.
>

Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from 5.2.11
at the same time the problems with sqmail begin. I have installed the new
php.ini and done a line-by-line comparison and we are fine. Of particular
interest here, open_basedir is NOT set so the include limitation problem isn't
what is biting us.

Cookies huh? Well I can find them in the browser, but I'm now sure where to
look in sqmail. When I find them in the browser, I'll grep though sqmail and
see what turns up....

OK, let me preface this with the fact that I have less than a thimble full of
knowledge about cookies. What I have come up with is snapshots of all of the
cookies from both opera and firefox. The cookies I have captured are:

ff_key.jpg
ff_last_domain.jpg
ff_last_login.jpg
ff_PHPSESSID.jpg
ff_SQMSESSID.jpg
ff_squirrelmail_language.jpg
ff_utma.jpg
opera_utma.jpg
opera_utmc.jpg
opera_utmz.jpg

Let me know which ones you want and I'll send them to you in a private post.
Also, if you want me to create you an account on my server, I don't mind. That
way you can ssh into the box and see what the issue is.


> You can try, for example, commenting out the session_regenerate_id()
> call on line 87 of src/redirect.php, but I have no idea if that's got
> anything to do with the problem.
>

 85 sqsession_is_active();
 86 if (function_exists('session_regenerate_id')) {
 87 /*    session_regenerate_id(); */
 88 }

No change:
ERROR
You must be logged in to access this page.
Go to the login page

<snip>

Let me know where to get the cookie info from squirrelmail and I'll get that
for you too. Also, I'm serious about the account. I worked with a number of
opensource projects that way and never had a problem....

--
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: [phone]
Facsimile: [phone]
www.rankinlawfirm.com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Tomas Kuliavas]

David C. Rankin wrote:

On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
<snip>
>
> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
> idea what versions the OP was using, but this is likely your problem.
> I haven't had the time to test this, but you should first make sure
> you are getting the right cookies set in the browser (please show
> them).  Also, please indicate what session storage mechanism you are
> using.
>

Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from 5.2.11
at the same time the problems with sqmail begin. I have installed the new
php.ini and done a line-by-line comparison and we are fine. Of particular
interest here, open_basedir is NOT set so the include limitation problem isn't
what is biting us.

There is no official php 5.3.1 release. Which RC release or snapshot are you using?

David C. Rankin wrote:

ff_utma.jpg
opera_utma.jpg
opera_utmc.jpg
opera_utmz.jpg

These are urchin/google analytics cookies. You have this spyware on webmail or only on your main website?

"PHP Warning:  date(): It is not safe to rely on the system's timezone settings" notice is fixed by setting timezone in php.ini or reducing your PHP error_reporting level. SquirrelMail was designed to work in PHP E_ALL environment, but PHP developers added new error levels to E_ALL. These new error levels are not programming mistakes. Make sure that your error reporting is not higher than 6143.

--
Tomas

[Paul Lesniewski]

I asked you to respond on the more appropriate thread.  Please do that
next time.  I will reply there.

On Tue, Oct 20, 2009 at 1:53 PM, David C. Rankin
<drankinatty@...> wrote:

> On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
> <snip>
>>
>> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
>> idea what versions the OP was using, but this is likely your problem.
>> I haven't had the time to test this, but you should first make sure
>> you are getting the right cookies set in the browser (please show
>> them).  Also, please indicate what session storage mechanism you are
>> using.
>>
>
> Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from 5.2.11
> at the same time the problems with sqmail begin. I have installed the new
> php.ini and done a line-by-line comparison and we are fine. Of particular
> interest here, open_basedir is NOT set so the include limitation problem isn't
> what is biting us.

<snip>

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[David C. Rankin]

On Wednesday 21 October 2009 01:21:53 am Tomas Kuliavas wrote:

> David C. Rankin wrote:
> > On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
> > <snip>
> >
> >> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
> >> idea what versions the OP was using, but this is likely your problem.
> >> I haven't had the time to test this, but you should first make sure
> >> you are getting the right cookies set in the browser (please show
> >> them).  Also, please indicate what session storage mechanism you are
> >> using.
> >
> > Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from
> > 5.2.11
> > at the same time the problems with sqmail begin. I have installed the new
> > php.ini and done a line-by-line comparison and we are fine. Of particular
> > interest here, open_basedir is NOT set so the include limitation problem
> > isn't
> > what is biting us.
>
> There is no official php 5.3.1 release. Which RC release or snapshot are
>  you using?
>

git200910170422-31.1

> David C. Rankin wrote:
> > ff_utma.jpg
> > opera_utma.jpg
> > opera_utmc.jpg
> > opera_utmz.jpg
>
> These are urchin/google analytics cookies. You have this spyware on webmail
> or only on your main website?
>

Those are from my laptop. I'm sure google puts lots of stuff on there. I read
up on the urchin cookies a year or so ago and IIRC learned they weren't that
devious and decided the effort in continually deleting them wasn't worth the
effort :)

> "PHP Warning:  date(): It is not safe to rely on the system's timezone
> settings" notice is fixed by setting timezone in php.ini or reducing your
> PHP error_reporting level. SquirrelMail was designed to work in PHP E_ALL
> environment, but PHP developers added new error levels to E_ALL. These new
> error levels are not programming mistakes. Make sure that your error
> reporting is not higher than 6143.
>

--
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: [phone]
Facsimile: [phone]
www.rankinlawfirm.com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[David C. Rankin]

On Wednesday 21 October 2009 02:40:58 pm Paul Lesniewski wrote:

> I asked you to respond on the more appropriate thread.  Please do that
> next time.  I will reply there.
>
> On Tue, Oct 20, 2009 at 1:53 PM, David C. Rankin
>
> <drankinatty@...> wrote:
> > On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
> > <snip>
> >
> >> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
> >> idea what versions the OP was using, but this is likely your problem.
> >> I haven't had the time to test this, but you should first make sure
> >> you are getting the right cookies set in the browser (please show
> >> them).  Also, please indicate what session storage mechanism you are
> >> using.
> >
> > Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from
> > 5.2.11 at the same time the problems with sqmail begin. I have installed
> > the new php.ini and done a line-by-line comparison and we are fine. Of
> > particular interest here, open_basedir is NOT set so the include
> > limitation problem isn't what is biting us.
>
> <snip>
>

Sorry, I completely missed that part. Do you want me to repost my reply in
that thread?

--
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: [phone]
Facsimile: [phone]
www.rankinlawfirm.com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[David C. Rankin]

On Wednesday 21 October 2009 04:34:28 pm David C. Rankin wrote:
> Sorry, I completely missed that part. Do you want me to repost my reply in
> that thread?
>

Disregard, I see you took care of it....

--
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: [phone]
Facsimile: [phone]
www.rankinlawfirm.com

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users