[Bug 503810] New: squirrelmail fails with "You must be logged in to access this page"

older
[Bug 483554] sax2: Remove keyboard...

bugzilla_noreply＠novell.com

14 May 2009 14 May '09

10:39

http://bugzilla.novell.com/show_bug.cgi?id=503810 Summary: squirrelmail fails with "You must be logged in to access this page" Classification: openSUSE Product: openSUSE 10.3 Version: Final Platform: x86-64 OS/Version: openSUSE 10.3 Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: R.Vickers@cs.rhul.ac.uk QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.9.0.10) Gecko/2009042315 Firefox/3.0.10 In November 2008 SuSE issued security update squirrelmail-1.4.9a-2.10.noarch.rpm for 10.2 which was broken. Since then I have been unable to get any newer SuSE versions of squirrelmail to work on either 10.2 or 10.3, so I have been forced to continue running squirrelmail-1.4.10a-45. This problem was reported in https://bugzilla.novell.com/show_bug.cgi?id=446400#c13 but is still present in the update released today. After I install a squirrelmail security update anyone using the webmail service gets the message Error You must be logged in to access this page followed by a link back to the login page. Reinstalling squirrelmail-1.4.10a-45 immediately solves the problem, but introduces lots of security issues. I have looked at http://squirrelmail.org/wiki/LoginError and checked /etc/php5/apache2/php.ini:session.use_cookies = 1 /etc/php5/apache2/php.ini:session.save_path = "/var/lib/php5" ls -ld /var/lib/php5/ drwxr-xr-x 2 wwwrun root 163840 May 14 11:33 /var/lib/php5/ Reproducible: Always Steps to Reproduce: 1. update squirrelmail 2. login to webmail service 3. Actual Results: Login fails with Error You must be logged in to access this page Expected Results: Login works -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

14 May 14 May

13:20

New subject: [Bug 503810] squirrelmail fails with "You must be logged in to access this page"

http://bugzilla.novell.com/show_bug.cgi?id=503810 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de Component|Network |Update Problems AssignedTo|bnc-team-screening@forge.pr |crrodriguez@novell.com |ovo.novell.com | QAContact|qa@suse.de |jsrain@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:30

New subject: [Bug 503810] squirrelmail fails with "You must be logged in to access this page"

http://bugzilla.novell.com/show_bug.cgi?id=503810 User crrodriguez@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=503810#c1 Cristian Rodríguez changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |R.Vickers@cs.rhul.ac.uk --- Comment #1 from Cristian Rodríguez 2009-05-14 07:30:35 MDT --- Recent updates include upstream sources, almost unmodified, you should be running SM from the update repository nowdays 1.4.18 in 10.3... rpm -Fvh http://download.opensuse.org/update/10.3/rpm/noarch/squirrelmail-1.4.18-0.1n... should fix your issue (anyway you better install it using YOU) doe that fix your problem ? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:34

New subject: [Bug 503810] squirrelmail fails with "You must be logged in to access this page"

http://bugzilla.novell.com/show_bug.cgi?id=503810 User crrodriguez@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=503810#c2 Cristian Rodríguez changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED Info Provider|R.Vickers@cs.rhul.ac.uk | Resolution| |DUPLICATE --- Comment #2 from Cristian Rodríguez 2009-05-14 07:34:47 MDT --- *** This bug has been marked as a duplicate of bug 446400 *** http://bugzilla.novell.com/show_bug.cgi?id=446400 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15:09

New subject: [Bug 503810] squirrelmail fails with "You must be logged in to access this page"

http://bugzilla.novell.com/show_bug.cgi?id=503810 User R.Vickers@cs.rhul.ac.uk added comment http://bugzilla.novell.com/show_bug.cgi?id=503810#c3 --- Comment #3 from Bob Vickers 2009-05-14 09:09:05 MDT --- (In reply to comment #1)

...

Recent updates include upstream sources, almost unmodified, you should be running SM from the update repository nowdays 1.4.18 in 10.3...

rpm -Fvh http://download.opensuse.org/update/10.3/rpm/noarch/squirrelmail-1.4.18-0.1....

should fix your issue (anyway you better install it using YOU)

doe that fix your problem ?

No it doesn't, that is what I am reporting (sorry I missed out the version number). squirrelmail-1.4.18-0.1 fails, but reverting to squirrelmail-1.4.10a-45 (from the initial 10.3 distro) makes it work again. So a security update has broken my squirrelmail installation. Also it is a different kind of brokenness to the main bug reported in bug 446400. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.