[ZendTo] Login session problem (Users get logged off as soon as they click on any link)

[Jules Field]

Thilo,

On 30/08/2018 09:30, Thilo Schweizer via ZendTo wrote:
>
> Good morning,
>
> yesterday I ran an upgrade from v4.12 to v5.11-6 using the installer 
> script on an Ubuntu VM (ESX-Server). After some troubles with Ubuntu 
> 12.04 I ran an in place upgrade to 14.04 and finally got it to work.
>
Ubuntu 12 is no longer supported, sorry.
Ubuntu themselves have 'end-of-life'd it and I can't get PHP 7 for it.

> But now the users doesn‘t stay logged in at all, as soon as the site 
> gets refreshed or any button/link is clicked you get logged off. So I 
> decided to do a completely fresh install, including the os (I switched 
> to OpenSuSE Leap 15.0). Everything worked flawless, no problems with 
> the installer script anymore. At the end I used the scripts to adopt 
> my config files and „tada“, exactly the same issue. I checked the 
> timezone (system + php.ini – Europe/Berlin), I tried it with http 
> instead of https, I even tried it with the original config files and a 
> local test user – same problem!
>
> What did I miss?
>
> It’s kinda urgent, my colleagues are using zendto very frequently and 
> in this state they aren’t able to send any files at all.
>
My guess would be the timezone. The expiry time (an absolute point in 
time, not just "now + 2 hours") of the session cookies are set on the 
server, but their expiry is handled by the user's web browser. So if the 
timezone on the server isn't perfect, it can end up creating cookies 
that have already expired.

Did you re-run the ZendTo Installer *after* you upgraded the Ubuntu 12 
box to Ubuntu 14? If not, I would strongly advise you try that first, 
particularly stage number 5 (configuring Apache and php). You can run 
the stages individually. Look in the Installer directory and you'll see 
a "Ubuntu-Debian" dir. cd into that and just run ./5-httpd-php.sh. They 
work out that they aren't being run by install.sh and go and find the 
file(s) they need on their own.

My page about this
     https://zend.to/timezone.php
is a bit out of date, but should help.
Make sure that /etc/localtime is the correct timezone (on some Linuxes 
it's a symlink into /usr/share/zoneinfo/<timezone>, on others it's a 
copy of a file in /usr/share/zoneinfo.

Hope that helps,

Jules

-- 
Julian Field MEng CEng CITP MBCS MIEEE MACM

'If I were a Brazilian without land or money or the means to feed
  my children, I would be burning the rain forest too.' - Sting

www.Zend.To
Twitter: @JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://jul.es/pipermail/zendto/attachments/20180830/db908c19/attachment.html>