Thanks, I've been looking at that. I am using Firefox and it does show a single cookie being sent with the content being the session ID. If I delete the cookie and try to log on I get "You must be logged in to access this page." If I try a second time without deleting the cookie I get "Unknown user or password incorrect." In Firefox I have my site under the exceptions list to allow. I have three different versions of SM (1.4.2, 1.4.3a, and 1.5.0) running and they all have the same results. 1.5.0 has a config test page and it reports "Congratulations, your SquirrelMail setup looks fine to me!" I think it is a problem in the session or cookies but I don't know where.
This is my PHP.ini session settings [Session] session.save_handler = files session.save_path = C:\PHP\session session.use_cookies = 1 session.use_only_cookies = 0 ;session.name = PHPSESSID session.auto_start = 0 session.cookie_lifetime = 1800 ; 30 minutes session.cookie_path = / ;session.cookie_domain = session.serialize_handler = php session.gc_probability = 1 session.gc_divisor = 1000 session.gc_maxlifetime = 1440 session.bug_compat_42 = 0 session.bug_compat_warn = 1 session.referer_check = session.entropy_length = 0 session.entropy_file = ;session.entropy_length = 16 ;session.entropy_file = /dev/urandom ;session.cache_limiter = nocache session.cache_expire = 180 session.use_trans_sid = 0 url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry" I have this running on IIS 5.0 (W2K SP4), PHP 4.3.3, Mercury/32 4.01a Any known issues? I have this tried on PHP 4.2.2 and 4.2.3 with the same results. Any help with what I have wrong? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jonathan Angliss Sent: Sunday, June 27, 2004 2:34 AM To: John Cc: [EMAIL PROTECTED] Subject: Re: [SM-USERS] SM not keeping password Hello John, On Saturday, June 26, 2004, John wrote... > I get "Unknown user or password incorrect." when I try to logon. > What I am seeing in my log files is that squirrelmail is not > remembering the password. Here's part of my log file. > ---------------------------------------------------------- > 20:45:19.640: Connection from 127.0.0.1, Thu Jun 24 20:45:19 2004<lf> > 20:45:19.656: << * OK thetethered.com IMAP4rev1 Mercury/32 v4.01a server > ready.<cr><lf> 20:45:19.671: >>> A001 LOGIN "test" "*********"<cr><lf> > 20:45:19.703: << A001 OK LOGIN completed.<cr><lf> 20:45:19.703: >>> A002 CAPABILITY<cr><lf> > 20:45:19.718: << * CAPABILITY IMAP4rev1 X-MERCURY<cr><lf> > 20:45:19.734: << A002 OK CAPABILITY complete.<cr><lf> 20:45:19.734: >>> . LIST "INBOX" ""<cr><lf> > 20:45:19.750: << * LIST (\Noselect) "/" ""<cr><lf> > 20:45:19.765: << . OK LIST completed.<cr><lf> 20:45:19.765: >>> A003 LOGOUT<cr><lf> > 20:45:19.796: << * BYE IMAP4rev1 server terminating connection.<cr><lf> > 20:45:19.812: << A003 OK LOGOUT completed.<cr><lf> > 20:45:19.828: --- Connection closed normally at Thu Jun 24 20:45:19 > 2004. --- > 20:45:19.843: > 20:45:21.343: Connection from 127.0.0.1, Thu Jun 24 20:45:21 2004<lf> > 20:45:21.359: << * OK thetethered.com IMAP4rev1 Mercury/32 v4.01a server > ready.<cr><lf> 20:45:21.375: >>> A001 LOGIN "test" ""<cr><lf> > 20:45:21.406: << A001 NO Username or password incorrect.<cr><lf> This is usually caused by cookies not being set for the password. I suggest checking to make sure your browser is accepting cookies correctly. -- Jonathan Angliss ([EMAIL PROTECTED]) Posting Hints: http://www.squirrelmail.org/wiki/en_US/MailingListPostingGuidelines ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
