Instalation of django on:
Linux Debian Sarge 3.1
Python 2.3.5
mod_python 3.1.3 (tested also with 3.1.4)
Apache 2.0.54

Configuration of apache:
<VirtualHost 127.0.0.5:80>
ServerName www.my.com

<Location "/admin/">
    SetHandler python-program
    SetEnv DJANGO_SETTINGS_MODULE project.settings.admin
    PythonHandler django.core.handlers.modpython
    PythonInterpreter project_admin
    PythonDebug On
</Location>

Alias /media /usr/lib/python2.3/site-packages/django/conf/admin_media/

<Location "/media/">
        SetHandler None
</Location>

</VirtualHost>



After going to www.my.com/admin/ and submiting login form I get this:

Traceback (most recent call last):
  File "/usr/lib/python2.3/site-packages/django/core/handlers/base.py",
line 60, in get_response
    response = middleware_method(request, callback, param_dict)
  File "/usr/lib/python2.3/site-packages/django/middleware/admin.py",
line 39, in process_view
    if self.user_is_valid(request.user):
  File
"/usr/lib/python2.3/site-packages/django/core/handlers/modpython.py",
line 102, in _get_user
    user_id = self.session[users.SESSION_KEY]
  File
"/usr/lib/python2.3/site-packages/django/middleware/sessions.py", line
14, in __getitem__
    return self._session[key]
  File
"/usr/lib/python2.3/site-packages/django/middleware/sessions.py", line
44, in _get_session
    self._session_cache = s.get_decoded()
  File "/usr/lib/python2.3/site-packages/django/models/core.py", line
122, in get_decoded
    raise SuspiciousOperation, "User tampered with session cookie."

SuspiciousOperation: User tampered with session cookie.


Problem does not exist with localhost:8000 after running server from
django-admin.py. Setting SESSION_COOKIE_DOMAIN to 'www.my.com' does not
help neither.

Reply via email to