need help - session invalid or expired

[timo]

Hi all,

i've got a big problem getting roundcube working. I did setup and on installer everything works fine. Now if any user wants to login he gets the message "session invalid or expired".

I run Debian 6 with Apache 2,  php5 and roundcube 8.2 stabile.

I checked the following parameters (so i read in internet):

- set date/timezone of system to Europe/Berlin (real timezone) and put in the php.ini: "date.timezone = Europe/Berlin" like it is written in the system date file
- disabled all plugins in the main.conf
- switched on the session and some other logs to find the error

my session log shows for every login 2 lines like the 2 login tries here:
[29-Oct-2012 10:12:47 +0100]: Session auth check failed for kjvat9fb6792slr9pgjbp75jd2; timeslot = 2012-10-29 10:10:00
[29-Oct-2012 10:12:47 +0100]: Session authentication failed for kjvat9fb6792slr9pgjbp75jd2; invalid auth cookie sent; timeslot = 2012-10-29 10:00:00
[29-Oct-2012 10:12:54 +0100]: Session auth check failed for cfvi2hvtekciectu95prd7msu2; timeslot = 2012-10-29 10:10:00
[29-Oct-2012 10:12:54 +0100]: Session authentication failed for cfvi2hvtekciectu95prd7msu2; invalid auth cookie sent; timeslot = 2012-10-29 10:00:00


the Login creterias are right and working (i can login with them into the IMAP session).

But i didn't understand whats now wrong, to geht this error fixed.

Please help - if you need more Information please contact me.

Thank you!

[SKaero]

Try setting $rcmail_config['session_lifetime'] in the <RC root>/config/main.inc.php to 0.

[timo]

hmm it seems to change something but didn't work at all. I've set the session_lifetime to 0, but the same error. I cheched the system time and the Time of the Mailserver and that of my pc are exactly the same. The only thing changed is that the difference between the cockies is now about 2 minutes:

[30-Oct-2012 08:15:04 +0100]: Session auth check failed for maankeanco2g1e9evhkc5uhri4; timeslot = 2012-10-30 08:15:00
[30-Oct-2012 08:15:04 +0100]: Session authentication failed for maankeanco2g1e9evhkc5uhri4; invalid auth cookie sent; timeslot = 2012-10-30 08:13:00
[30-Oct-2012 08:18:05 +0100]: Session auth check failed for tnajuqtlhtki76vf7ulq67o0d6; timeslot = 2012-10-30 08:18:00
[30-Oct-2012 08:18:05 +0100]: Session authentication failed for tnajuqtlhtki76vf7ulq67o0d6; invalid auth cookie sent; timeslot = 2012-10-30 08:16:00

[SKaero]

Intersecting I'd sugest changing the $rcmail_config['session_lifetime'] but the "invalid auth cookie sent" is whats has me wondering. Have you tried on a different computer / browser?

[timo]

Yes, i tried 4 different machines with firefox and IE....

I have no more ideas how to fix this, or why the error comes out...

[SKaero]

I'd have to look at the RoundCube install to be able to suggest any other changes. I'd need a test mail account and ftp access to the RoundCube folder.

[timo]

Thank you for your Help!

You should have an private message!

[SKaero]

I've looked at the problem what it turned out to be was $rcmail_config['force_https'] and $rcmail_config['use_https'] where set to true but the server isn't setup for a secure connection. Since the connection wasn't secure it wasn't allowing the login.

[timo]

aaah the world could be so easy.....on this point its clearly true, but i havent searched at that point

thank you very much

[SOLVED]