Cannot log in - "Session invalid / expired"

[Whisperwind]

Hi all,

Having a bit of a problem with RoundCube. On a brand new install, I can't log in. I immediately get kicked out with an error that reads 'Your session is either invalid or expired.'

This error is also displayed in these threads:
http://www.roundcubeforum.net/5-release-support/17-pending-issues/5798-immediate-logoff-after-log-new-install.html

http://www.roundcubeforum.net/5-release-support/17-pending-issues/6172-another-immediate-log-out-after-log-problem.html

http://www.roundcubeforum.net/5-release-support/17-pending-issues/2055-hmailserver-good-login-followed-immediate-logout.html

http://www.roundcubeforum.net/3-news-announcements/12-general-discussion/4348-nothing-happens-after-login.html

My directory / file permissions are set correctly, and nothing is generated in the error log. RoundCube is authenticating properly - and by that I mean that it will give a proper 'Login failed' message if I give incorrect username / password combination, but on a correct login it kicks me out. IMAP log shows a valid login as well, and database is being read / updated, too.

Things I've tried to fix this:
- Made sure session.auto_start in php.ini was set to 0
- Tried with suhosin.simulation set to On in php.ini
- Made sure ip_check in config file was set to false
- Tried increasing config session timeout to 2.5 hours to see if it was a timezone issue
- Tried editing config so as to not use SSL
- Tried reinstalling the stable release again
- Tried reinstalling with the latest SVN trunk

During installation of RoundCube, all feature checks were listed as available and working with a green OK, and the SMTP send test and IMAP login test both completed successfully.

I'm at a loss as to what else could be done to fix this.

Anybody have any further clues as to what's causing this and how to fix it?

Thanks.

[lacri]

sounds like suhoshin problem ...
when you have install suhoshin deactivate suhoshin.session.encrypt in the suhoshin config or try to deactivate in .htaccess

more infos here
http://www.roundcubeforum.net/6-svn-releases/20-issues-bugs/4737-problem-svn-2468-a.html

[Whisperwind]

Edit:

I'd posted that it worked, but unfortunately it didn't. I had forgotten that I set my DNS to point to a different server so I could use webmail in the interim.

I pointed DNS back to the server with problems, made sure suhosin.session.encrypt was set to Off, restarted services, and tried to log in again - doesn't work. Still the same error.

I'll try working on it some more and see if I can get it to work.