On Tue, 2015-01-20 at 14:31 -0500, Adam Tauno Williams wrote: > On Mon, 2015-01-19 at 15:40 -0500, Adam Tauno Williams wrote: > > On Mon, 2015-01-19 at 12:17 -0600, Andy Dorman wrote: > > > On 01/19/2015 11:12 AM, Adam Tauno Williams wrote: > > > > Horde 5.2.3 / IMP 6.2.4 > > > > Firefox 31.20.0 > > > > Internet Explorer 11.0.13 > > > > Logging into my instance with Firefox [or Epiphany] works without > > > > incident. > > > > Logging into Internet Explorer fails, it just says authentication fails > > > > and goes back to the login page. > > > > Anyone else seen this? There appears to be no errors, warnings, etc... > > > Try clearing all your cookies for the login domain. We will see this > > > often in Chrome & FF when testing subdomains like beta.mydomain.com and > > > then trying to login at mydomain.com. > > Done, it didn't effect the problem. And the same exact issue occurs in > > compatibility mode. > > The login is to a fully qualified hostname, but a domain/alias. > Does a POST to /login.php with a HTTP/302 response with a location > header of > "http://horde_p.mormail.com/imp/dynamic.php?page=mailbox&u=195593741754bea9e98dbd4" > >indicate that authentication was successful? > Then the GET request follows to > "GET /imp/dynamic.php?page=mailbox&u=195593741754bea9e98dbd4" ang gets a > HTTP/302 with a Location header back to the "login.php" page. So I just > got kicked out? > Notably the GET request to /imp/dynamic does not contain a Cookie > header. > The Set-Cookie in the original HTTP/302 [in response to login.php] looks > like - > Set-Cookie: Horde=3k1r7gt07.....8rn9e2; path=/; > domain=horde_p.example.com; HttpOnly > Set-Cookie: horde_secret_key=3k1r7g.....em88rn9e2; path=/; > domain=horde_p.example.com; httponly > Set-Cookie: default_horde_view=deleted; expires=Thu, 01-Jan-1970 > 00:00:01 GMT; Max-Age=0; path=/; domain=horde_p.example.com
It would appear the issue is somehow related to cookies and session persistence. Setting "$conf['session']['use_only_cookies'] = false;" allows login via Internet Explorer. -- Adam Tauno Williams <mailto:[email protected]> GPG D95ED383 OpenGroupware Developer <http://www.opengroupware.us/> -- imp mailing list Frequently Asked Questions: http://wiki.horde.org/FAQ To unsubscribe, mail: [email protected]
