http://bugzilla.novell.com/show_bug.cgi?id=503810 Summary: squirrelmail fails with "You must be logged in to access this page" Classification: openSUSE Product: openSUSE 10.3 Version: Final Platform: x86-64 OS/Version: openSUSE 10.3 Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: R.Vickers@cs.rhul.ac.uk QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.9.0.10) Gecko/2009042315 Firefox/3.0.10 In November 2008 SuSE issued security update squirrelmail-1.4.9a-2.10.noarch.rpm for 10.2 which was broken. Since then I have been unable to get any newer SuSE versions of squirrelmail to work on either 10.2 or 10.3, so I have been forced to continue running squirrelmail-1.4.10a-45. This problem was reported in https://bugzilla.novell.com/show_bug.cgi?id=446400#c13 but is still present in the update released today. After I install a squirrelmail security update anyone using the webmail service gets the message Error You must be logged in to access this page followed by a link back to the login page. Reinstalling squirrelmail-1.4.10a-45 immediately solves the problem, but introduces lots of security issues. I have looked at http://squirrelmail.org/wiki/LoginError and checked /etc/php5/apache2/php.ini:session.use_cookies = 1 /etc/php5/apache2/php.ini:session.save_path = "/var/lib/php5" ls -ld /var/lib/php5/ drwxr-xr-x 2 wwwrun root 163840 May 14 11:33 /var/lib/php5/ Reproducible: Always Steps to Reproduce: 1. update squirrelmail 2. login to webmail service 3. Actual Results: Login fails with Error You must be logged in to access this page Expected Results: Login works -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.