Users

users@lists.roundcube.net

5 participants
2944 discussions

invalid auth cookie
by Robert Moskowitz 30 Dec '12

30 Dec '12

By editing main.inc.php setting debug_level = 8 and log_session = true. I got a /var/log/roundcube/session file that says: [27-Dec-2012 17:46:08 -0500]: Session authentication failed for 5uhp5ktuaec7bhoj8qgl4slli2; invalid auth cookie sent I see there is a message about this at: http://www.roundcubeforum.net/index.php?topic=10654.0 "turned off $rcmail_config['force_https'] and $rcmail_config['use_https'] (set both to False)" Is this the proper action to take for this error? I already have force_https = false.

7 27

problem connection dovecot
by Boubacar Namalka Oumarou 28 Dec '12

28 Dec '12

hi, i have a problem with my mail server. help here my log error mysql_virtual_relay_domains.cf(0,lock|fold_fix): table lookup problem Dec 28 19:00:49 mail postfix/error[2880]: fatal: mysql:/etc/postfix/mysql_virtual_relay_domains.cf(0,lock|fold_fix): table lookup problem Dec 28 19:00:49 mail postfix/error[2881]: fatal: mysql:/etc/postfix/mysql_virtual_relay_domains.cf(0,lock|fold_fix): table lookup problem Dec 28 19:00:49 mail postfix/error[2882]: fatal: mysql:/etc/postfix/mysql_virtual_relay_domains.cf(0,lock|fold_fix): table lookup problem Dec 28 19:00:50 mail postfix/qmgr[2868]: fatal: mysql:/etc/postfix/mysql_virtual_relay_domains.cf(0,lock|fold_fix): table lookup problem dove.conf error (omar(a)sonichar.ne,127.0.0.1): Password query failed: Not connected to database 2012-12-28 11:52:32 imap-login: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 pop3-login: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 pop3-login: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 auth(default): Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 auth-worker(default): Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 imap-login: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 pop3-login: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 imap-login: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 11:52:32 dovecot: Warning: Killed with signal 15 (by pid=4153 uid=0 code=kill) 2012-12-28 17:45:38 auth-worker(default): Error: mysql: Connect failed to 127.0.0.1 (postfix): Can't connect to MySQL server on '127.0.0.1' (111) - waiting for 1 seconds before retry 2012-12-28 18:06:00 auth-worker(default): Error: mysql: Connect failed to 127.0.0.1 (postfix): Can't connect to MySQL server on '127.0.0.1' (111) - waiting for 5 seconds before retry 2012-12-28 18:06:00 auth-worker(default): Error: sql(omar,192.168.1.50): Password query failed: Not connected to database 2012-12-28 18:12:35 auth-worker(default): Error: mysql: Connect failed to 127.0.0.1 (postfix): Can't connect to MySQL server on '127.0.0.1' (111) - waiting for 75 seconds before retry 2012-12-28 18:12:35 auth-worker(default): Error: sql(postfix,192.168.1.50): Password query failed: Not connected to database -- BOUBACAR NAMALKA OUMAROU INSTRUCTEUR/ DSI RESPONSABLE MICROSOSFT IT ACADEMY EPN Mobile :(227) 90332095 / 96596811 Skype : namalka_omar ÉCOLE POLYTECHNIQUE DE NIAMEY Boulevard Mali Béro,71 rue Issa Béri BP 10297 NIAMEY NIGER Tel: (227) 20350535 Fax: (227) 20350845

3 2

Re: [RCU] invalid auth cookie
by Benny Pedersen 28 Dec '12

28 Dec '12

Dont use http to webmail host that olso have same hostname on https Remove the http host in apache Now the question is ? :-) Sent from Samsung Mobile -------- Original message -------- From: Robert Moskowitz <rgm(a)htt-consult.com> Date: To: Roundcube Users mailing list <users(a)lists.roundcube.net> Subject: Re: [RCU] invalid auth cookie On 12/27/2012 06:40 PM, Reindl Harald wrote: > > Am 28.12.2012 00:24, schrieb Jan M. Dziewulski: >> On 27/12/2012 23:17, Robert Moskowitz wrote: >> >>> hmmm. Thinking (really!) I should change it back and try >>> https:/.../webmail and see if it works. If it does, I need to add a >>> force redirect to the roundcube.conf. Thinking more, this is reasonable >>> as this is how my current squirrelmail works. >> But shouldn't people be accessing it via https anyway? I mean without the need for a redirection? Adding a >> redirection increases security issues (for your site) so I personally would not be keen to do that My little bit of testing gives the user a bad experience if they use http://fqdn/webmail. The ajax error is so cryptic. I suppose with some digging I can find a way to get it to say, "use https:// like you were instructed!" instead. Until I do, I tend towrad a forced redirect to https. As for security issues for my site? What, yet another DOS attack with TLS costs to any robo that hits on my webmail url? My expertise is in designing security protocols, not impact of force using them. ;) > it does not if it is done right > > <Directory "roundcube-dir"> > php_admin_flag session.cookie_secure "1" > </Directory> > > this makes sure that there will NEVER a client send the > session cookie unencrypted, if you get a external security > audit and do not use tis setting for https sites you > will get warned by the auditor and if not he did not make > his job! Perhaps I am implementing this wrong on my server. My roundcubemail.conf has <Directory /usr/share/roundcubemail/> Order Deny,Allow Allow from all </Directory> Am I suppose to put your <Directory "roundcube-dir"> ... after this entry or the php_admin_flag in the one I have? What do you use for force_https and use_https? _______________________________________________ Roundcube Users mailing list users(a)lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users

5 8

Re: [RCU] invalid auth cookie
by Benny Pedersen 28 Dec '12

28 Dec '12

Yep redir is solution to stupid users Sent from Samsung Mobile

2 3

28 Dec '12

My setup is using all stock rpms for Centos 6.3 following: http://www.campworld.net/thewiki/pmwiki.php/LinuxServersCentOS/Cent6VirtMai… I can telnet into Dovecot and see the mail I sent via PostfixAdmin, but Roundcube is not even logging in. I get a popup message stating: Your session is invalid or expired. /var/log/maillog is showing a successful login to Dovecot with auth=plain, but /var/log/roundcube/errors has the following messages: [27-Dec-2012 14:56:47] PHP Warning: date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EST/-5.0/no DST' instead in /usr/share/roundcubemail/program/include/rcube_config.php on line 96 [27-Dec-2012 14:56:47] PHP Warning: date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EST/-5.0/no DST' instead in /usr/share/roundcubemail/program/include/rcube_config.php on line 97 [27-Dec-2012 14:56:47] PHP Warning: strtotime(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EST/-5.0/no DST' instead in /usr/share/roundcubemail/program/include/rcube_session.php on line 134 [27-Dec-2012 14:56:47] PHP Warning: date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EST/-5.0/no DST' instead in /usr/share/roundcubemail/program/include/rcube_mdb2.php on line 603 I don't know what is happening with timezone. I have set mine up for Detroit. None of the files referenced above have been altered from the install from the rpm(s). /etc/php.ini is also at default, with no entry for timezone. I would think I should stop whatever is causing these messages. But are they the reason for the session failure?

2 6

managesieve plugin: Unable to connect to managesieve on localhost:4190
by robert rottermann 27 Dec '12

27 Dec '12

Hi there, I did install roundcube on a ubuntu 12.04 box using apt-get I also installed some plugins also using apt-get managesieve version: 5.0 and activated the plugins: $rcmail_config['plugins'] = array('managesieve', 'password'); then in managesieve/config.inc.php I changed the port to 4190 // managesieve server port $rcmail_config['managesieve_port'] = 4190; // managesieve server address, default is localhost. $rcmail_config['managesieve_host'] = 'localhost'; Non the filter tab is presented in the roudcube but click it gives a "not able to access sieve server" error (or some such, I get it in german) and in the rouncube log I get the following error: [25-Dec-2012 09:47:54 +0100]: PHP Error: Unable to connect to managesieve on localhost:4190 in /usr/share/roundcube/plugins/managesieve/managesieve.php on line 286 (GET /?_task=settings&_action=plugin.managesieve) however, if I try to access this port using telnet, it seems to work. root@susanne ~ # telnet localhost 4190 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." unfortunately I am not a php programmer so I would not know how to debug this. for any pointers on how to solve this problem would be very much appreciated. have a good holiday season robert

3 6

service currently not available after lang_sel on login
by Gyurman Attila 26 Dec '12

26 Dec '12

Hi! I have roundcube 0.8.4, with lang_sel plugin enabled. When i change the lang, and after that i login, a get a SERVICE CURRENTLY NOT AVAILABLE! Error No. [524] The URL is: https://###/roundcube/?_task=mail&_lang_sel=en_GB&_action=plugin.lang_sel If i click on the Mail or Settings, i can use roundcube without error, with the selected language. Or if i delete the _action part of the url, everything is all right. What's wrong? Thanks for your answers! Attila from Hungary

4 5

managesieve: where are the filter rules stored
by robert rottermann 26 Dec '12

26 Dec '12

Hi there, I just installed the the manage sieve plugin into roundcube. Now I think there should be a number of default rules predefined like "vacation message" etc. However the only "filter" I see in my filter list is "managesieve" and when I download it, it only shows /* empty list */ thanks for your pointers robert

1 0

Gutenberg Campos enviou-lhe o seguinte abaixo-assinado.
by Petição Pública 24 Dec '12

24 Dec '12

1 0

RoundCube Change Password Module
by zareh＠pol.ir 22 Dec '12

22 Dec '12

Hi i have a roundcube-0.3.1,1 with change password module installed on my FreeBSD server. this was working fine and there was nothing wrong with it. today i noticed that , when i try to change my password through settings/password section, it says "New Password Could not be Saved". but actually my password is getting saved. anyone has any suggestion or has faced such problem?

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users