Package: php-horde-webmail
Version: 5.2.22-3
Severity: important

Dear Maintainer,

after upgrading from Stretsch to Buster I was no longer able to login to
Horde as a normal user, getting errors like the following one:

PHP Fatal error:  Uncaught Horde_Exception_PushApp: User denis is not
authorized for Horde (Host: 192.168.3.2). in
/usr/share/php/Horde/Registry.php:1583\nStack trace:\n#0
/usr/share/php/Horde/Registry.php(1193):
Horde_Registry->pushApp('horde', Array)\n#1
/usr/share/php/Horde/Registry.php(2117):
Horde_Registry->callAppMethod('horde', 'logout')\n#2
/usr/share/php/Horde/ErrorHandler.php(30):
Horde_Registry->clearAuthApp('horde')\n#3
/usr/share/horde/imp/lib/Application.php(620):
Horde_ErrorHandler::fatal(Object(Horde_Exception_AuthenticationFailure))\n#4
[internal function]:
IMP_Application->exceptionHandler(Object(Horde_Exception_AuthenticationFailure))\n#5
{main}\n  thrown in /usr/share/php/Horde/Registry.php on line 1583,
referer: https://www.neomerica.lcl/horde/login.php

Login worked instead for the Horde administrator. After some
invesigation it turned out to be a permission problem, but I was unable
to properly operate on permissions because of the bug described here:

https://github.com/horde/Db/pull/1

After replacing the stock Schema.php with the GitHub version permissions
started working again and I was able to discover that the default
permission policy must have changed between the Stretch and the Buster
version of Horde.

It looks like in the Stretch version everything was permitted unless
explicitly forbidden, while in the Buster version it is the other way
around, so I had to manually create all the missing permissions to
restore all the functionalities.

Not a big deal, it just took few minutes, but probably adding some
warning to the upgrade procedure could save some time to others in the
same situation.

Hope it helps and keep up with the good work!

-- System Information:
Debian Release: 10.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages php-horde-webmail depends on:
ii  php-cli                2:7.3+69
ii  php-common             2:69
ii  php-horde              5.2.20+debian0-1+deb10u1
ii  php-horde-content      2.0.6-3
ii  php-horde-gollem       3.0.12-3
ii  php-horde-imp          6.2.22-1
ii  php-horde-ingo         3.2.16-3
ii  php-horde-kronolith    4.2.25-1
ii  php-horde-mnemo        4.2.14-3
ii  php-horde-nag          4.2.19-1
ii  php-horde-timeobjects  2.1.4-3
ii  php-horde-trean        1.1.9-3
ii  php-horde-turba        4.2.23-1
ii  php7.3-cli [php-cli]   7.3.14-1~deb10u1

php-horde-webmail recommends no packages.

php-horde-webmail suggests no packages.

-- no debconf information

Reply via email to