Upgrade to PHP 5.3, sqmail 1.5.2 svn is stuck in a login loop.

[David C. Rankin]

Paul, all:

        After upgrade to php 5.3, squirrelmail 1.5.2 from the svn repository is stuck
in a loop trying to log in. When you enter your username/password,
squirrelmail comes back with an error telling you that you need to login??

        You see the repetitive part of the problem. I have switched back to php
5.2.10 for now and all is fine. Let me know if you have anything you want me
to send or try and test (patch, etc.) I have another box with php 5.3 on that
I can load squirrelmail on for testing. Thanks.

--
David C. Rankin, J.D.,P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
Telephone: [phone]
Facsimile: [phone]
www.rankinlawfirm.com

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Paul Lesniewski]

On Mon, Aug 31, 2009 at 10:24 AM, David C. Rankin
<drankinatty@...> wrote:

> Paul, all:
>
>        After upgrade to php 5.3, squirrelmail 1.5.2 from the svn repository is stuck
> in a loop trying to log in. When you enter your username/password,
> squirrelmail comes back with an error telling you that you need to login??
>
>        You see the repetitive part of the problem. I have switched back to php
> 5.2.10 for now and all is fine. Let me know if you have anything you want me
> to send or try and test (patch, etc.) I have another box with php 5.3 on that
> I can load squirrelmail on for testing. Thanks.

First make sure you are getting the right cookies set in the browser
(please show them).  Also, please indicate what session storage
mechanism you are using.

You can try, for example, commenting out the session_regenerate_id()
call on line 87 of src/redirect.php, but I have no idea if that's got
anything to do with the problem.


--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Paul Lesniewski]

On Tue, Oct 20, 2009 at 1:53 PM, David C. Rankin
<drankinatty@...> wrote:

> On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
> <snip>
>>
>> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
>> idea what versions the OP was using, but this is likely your problem.
>> I haven't had the time to test this, but you should first make sure
>> you are getting the right cookies set in the browser (please show
>> them).  Also, please indicate what session storage mechanism you are
>> using.
>
> Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from 5.2.11
> at the same time the problems with sqmail begin. I have installed the new
> php.ini and done a line-by-line comparison and we are fine. Of particular
> interest here, open_basedir is NOT set so the include limitation problem isn't
> what is biting us.
>
> Cookies huh? Well I can find them in the browser, but I'm now sure where to
> look in sqmail. When I find them in the browser, I'll grep though sqmail and
> see what turns up....

Cookies are in different places for different browsers.  Any search
engine will help you locate them.  For Firefox, you can look in
Tools->Options->Privacy for a way to see cookies.  Please only show
the cookies that are under the location from where you view your
webmail.

> OK, let me preface this with the fact that I have less than a thimble full of
> knowledge about cookies. What I have come up with is snapshots of all of the
> cookies from both opera and firefox. The cookies I have captured are:
>
> ff_key.jpg
> ff_last_domain.jpg
> ff_last_login.jpg
> ff_PHPSESSID.jpg
> ff_SQMSESSID.jpg
> ff_squirrelmail_language.jpg
> ff_utma.jpg
> opera_utma.jpg
> opera_utmc.jpg
> opera_utmz.jpg
>
> Let me know which ones you want and I'll send them to you in a private post.
> Also, if you want me to create you an account on my server, I don't mind. That
> way you can ssh into the box and see what the issue is.
>
>
>> You can try, for example, commenting out the session_regenerate_id()
>> call on line 87 of src/redirect.php, but I have no idea if that's got
>> anything to do with the problem.
>>
>
>  85 sqsession_is_active();
>  86 if (function_exists('session_regenerate_id')) {
>  87 /*    session_regenerate_id(); */
>  88 }
>
> No change:
> ERROR
> You must be logged in to access this page.
> Go to the login page
>
> <snip>
>
> Let me know where to get the cookie info from squirrelmail and I'll get that
> for you too. Also, I'm serious about the account. I worked with a number of
> opensource projects that way and never had a problem....

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Tomas Kuliavas]

David C. Rankin wrote:

Paul, all:

        After upgrade to php 5.3, squirrelmail 1.5.2 from the svn repository is stuck
in a loop trying to log in. When you enter your username/password,
squirrelmail comes back with an error telling you that you need to login??

        You see the repetitive part of the problem. I have switched back to php
5.2.10 for now and all is fine. Let me know if you have anything you want me
to send or try and test (patch, etc.) I have another box with php 5.3 on that
I can load squirrelmail on for testing. Thanks.

http://www.3111skyline.com/download/bugs/sqmail-configtest-OK.txt shows that you have http:// host on 443 port. If base URL is detected correctly, why do you use https port for http service?

Same config test shows short_open_tag=off. Try turning them on.

If you have two setups and only one of them is working, you should test (http://www.squirrelmail.org/wiki/TestPHPSettings) PHP settings on both of them and compare them.

--
Tomas

[cowderysmith]

paul,i need box to do somethings
will i esspect it?
Paul, all:

        After upgrade to php 5.3, squirrelmail 1.5.2 from the svn repository is stuck
in a loop trying to log in. When you enter your username/password,
squirrelmail comes back with an error telling you that you need to login??

        You see the repetitive part of the problem. I have switched back to php
5.2.10 for now and all is fine. Let me know if you have anything you want me
to send or try and test (patch, etc.) I have another box with php 5.3 on that
I can load squirrelmail on for testing. Thanks.


http://www.3111skyline.com/download/bugs/sqmail-configtest-OK.txt shows that you have http:// host on 443 port. If base URL is detected correctly, why do you use https port for http service?

Same config test shows short_open_tag=off. Try turning them on.

If you have two setups and only one of them is working, you should test (http://www.squirrelmail.org/wiki/TestPHPSettings) PHP settings on both of them and compare them.

--
Tomas

[Paul Lesniewski]

On Wed, Oct 21, 2009 at 12:46 PM, Paul Lesniewski <paul@...> wrote:

> On Tue, Oct 20, 2009 at 1:53 PM, David C. Rankin
> <drankinatty@...> wrote:
>> On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
>> <snip>
>>>
>>> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
>>> idea what versions the OP was using, but this is likely your problem.
>>> I haven't had the time to test this, but you should first make sure
>>> you are getting the right cookies set in the browser (please show
>>> them).  Also, please indicate what session storage mechanism you are
>>> using.
>>
>> Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from 5.2.11
>> at the same time the problems with sqmail begin. I have installed the new
>> php.ini and done a line-by-line comparison and we are fine. Of particular
>> interest here, open_basedir is NOT set so the include limitation problem isn't
>> what is biting us.
>>
>> Cookies huh? Well I can find them in the browser, but I'm now sure where to
>> look in sqmail. When I find them in the browser, I'll grep though sqmail and
>> see what turns up....
>
> Cookies are in different places for different browsers.  Any search
> engine will help you locate them.  For Firefox, you can look in
> Tools->Options->Privacy for a way to see cookies.  Please only show
> the cookies that are under the location from where you view your
> webmail.

Turns out the problem is not really anything to do with sessions; it's
a more strict use of NULL, wherein it cannot any longer be used as a
placeholder for an empty array.  The problem is fixed in SVN (revision
13870).

>> OK, let me preface this with the fact that I have less than a thimble full of
>> knowledge about cookies. What I have come up with is snapshots of all of the
>> cookies from both opera and firefox. The cookies I have captured are:
>>
>> ff_key.jpg
>> ff_last_domain.jpg
>> ff_last_login.jpg
>> ff_PHPSESSID.jpg
>> ff_SQMSESSID.jpg
>> ff_squirrelmail_language.jpg
>> ff_utma.jpg
>> opera_utma.jpg
>> opera_utmc.jpg
>> opera_utmz.jpg
>>
>> Let me know which ones you want and I'll send them to you in a private post.
>> Also, if you want me to create you an account on my server, I don't mind. That
>> way you can ssh into the box and see what the issue is.
>>
>>
>>> You can try, for example, commenting out the session_regenerate_id()
>>> call on line 87 of src/redirect.php, but I have no idea if that's got
>>> anything to do with the problem.
>>>
>>
>>  85 sqsession_is_active();
>>  86 if (function_exists('session_regenerate_id')) {
>>  87 /*    session_regenerate_id(); */
>>  88 }
>>
>> No change:
>> ERROR
>> You must be logged in to access this page.
>> Go to the login page
>>
>> <snip>
>>
>> Let me know where to get the cookie info from squirrelmail and I'll get that
>> for you too. Also, I'm serious about the account. I worked with a number of
>> opensource projects that way and never had a problem....

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Paul Lesniewski]

On Sun, Nov 1, 2009 at 1:12 AM, Paul Lesniewski <paul@...> wrote:

> On Wed, Oct 21, 2009 at 12:46 PM, Paul Lesniewski <paul@...> wrote:
>> On Tue, Oct 20, 2009 at 1:53 PM, David C. Rankin
>> <drankinatty@...> wrote:
>>> On Tuesday 20 October 2009 02:55:27 pm Paul Lesniewski wrote:
>>> <snip>
>>>>
>>>> It's been reported that 1.5.2 does this when using PHP 5.3.  I have no
>>>> idea what versions the OP was using, but this is likely your problem.
>>>> I haven't had the time to test this, but you should first make sure
>>>> you are getting the right cookies set in the browser (please show
>>>> them).  Also, please indicate what session storage mechanism you are
>>>> using.
>>>
>>> Ahah! Now we are getting somewhere. I have php 5.3.1, fresh update from 5.2.11
>>> at the same time the problems with sqmail begin. I have installed the new
>>> php.ini and done a line-by-line comparison and we are fine. Of particular
>>> interest here, open_basedir is NOT set so the include limitation problem isn't
>>> what is biting us.
>>>
>>> Cookies huh? Well I can find them in the browser, but I'm now sure where to
>>> look in sqmail. When I find them in the browser, I'll grep though sqmail and
>>> see what turns up....
>>
>> Cookies are in different places for different browsers.  Any search
>> engine will help you locate them.  For Firefox, you can look in
>> Tools->Options->Privacy for a way to see cookies.  Please only show
>> the cookies that are under the location from where you view your
>> webmail.
>
> Turns out the problem is not really anything to do with sessions; it's
> a more strict use of NULL, wherein it cannot any longer be used as a
> placeholder for an empty array.  The problem is fixed in SVN (revision
> 13870).

Thanks to David for kindly lending his resources to track the problem down.

>>> OK, let me preface this with the fact that I have less than a thimble full of
>>> knowledge about cookies. What I have come up with is snapshots of all of the
>>> cookies from both opera and firefox. The cookies I have captured are:
>>>
>>> ff_key.jpg
>>> ff_last_domain.jpg
>>> ff_last_login.jpg
>>> ff_PHPSESSID.jpg
>>> ff_SQMSESSID.jpg
>>> ff_squirrelmail_language.jpg
>>> ff_utma.jpg
>>> opera_utma.jpg
>>> opera_utmc.jpg
>>> opera_utmz.jpg
>>>
>>> Let me know which ones you want and I'll send them to you in a private post.
>>> Also, if you want me to create you an account on my server, I don't mind. That
>>> way you can ssh into the box and see what the issue is.
>>>
>>>
>>>> You can try, for example, commenting out the session_regenerate_id()
>>>> call on line 87 of src/redirect.php, but I have no idea if that's got
>>>> anything to do with the problem.
>>>>
>>>
>>>  85 sqsession_is_active();
>>>  86 if (function_exists('session_regenerate_id')) {
>>>  87 /*    session_regenerate_id(); */
>>>  88 }
>>>
>>> No change:
>>> ERROR
>>> You must be logged in to access this page.
>>> Go to the login page
>>>
>>> <snip>
>>>
>>> Let me know where to get the cookie info from squirrelmail and I'll get that
>>> for you too. Also, I'm serious about the account. I worked with a number of
>>> opensource projects that way and never had a problem....

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users