Issues logging in - Your session could not be verified

[F1forHELP]

Hi,

This past Saturday I upgraded an installation of eGroupware 1.4.004 to
1.6.002. Since then I have been having issues logging in. When I enter
my username and password I receive a message “Your session could not be
verified” and the address bar changes to

http://eGroupwareServer.MyDomain.internal/egroupware/login.php?cd=10&phpgw_forward=%3Fcd%3Dyes

If I persist and enter my username and password between 6 and 12 times
and clear the address bar to the right of the ? I can sometimes log in.
Please note that my account does not get locked, nor does my IP address
get blocked. If I mangle the username or password three times in a row,
either my account or the ip is blocked.

I can usually log right in if I clear my webserver cookie, close and
reopen my web browser.

I can always log into the egroupware/setup.

Any idea’s on how or where to troubleshoot this would be greatly
appreciated.

Joseph Hume
F1 for HELP

[Ralf_Becker_6]

Hi Joseph,

be assured it’s not a general problem, probably a configuration problem.

Joseph Hume schrieb:

Hi,

This past Saturday I upgraded an installation of eGroupware 1.4.004 to
1.6.002. Since then I have been having issues logging in. When I enter
my username and password I receive a message “Your session could not be
verified” and the address bar changes to

http://eGroupwareServer.MyDomain.internal/egroupware/login.php?cd=10&phpgw_forward=%3Fcd%3Dyes

If I persist and enter my username and password between 6 and 12 times
and clear the address bar to the right of the ? I can sometimes log in.
Please note that my account does not get locked, nor does my IP address
get blocked. If I mangle the username or password three times in a row,
either my account or the ip is blocked.

I can usually log right in if I clear my webserver cookie, close and
reopen my web browser.

I can always log into the egroupware/setup.

No wonder, it does NOT use sessions

Any idea’s on how or where to troubleshoot this would be greatly
appreciated.

a) Check that php setting session.save_path is readable AND writeable by
the webserver (test it with a phpinfo WITHIN the egroupware dir!).

b) Check if EGroupware sends sessionid and domain cookies AND that they
contain the right values (there must be a file prefixed with “sess_” in
your session.save_path).

c) Check that browser submits sessionid and domain cookie back to the
webserver

(for b) and c) use eg. firebug under firefox)

Ralf

Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

---

Geschäftsführer Andre Keller, Gudrun Müller,
Nigel Vickers und Ralf Becker
Registergericht Kaiserslautern HRB 30575
Umsatzsteuer-Id / VAT-Id: DE214280951

---

Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what’s new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[F1forHELP]

Ralf,

Thank you for responding. I am quite sure that I fat fingered something
somewhere. I used eGroupware 1.4.004 in my office for the past year and
a half with absolutely no issues, so I know that it is not the
software. As what happened last time, I did get the “your session could
not be verified” and was able to successfully log in after closing my
browser as you suggested. However, now access to the eGroupware
installation is very ‘eratic’.

Since my last attempt at an upgrade I have learned a lot about backing
up my data, both the eGroupware and external file storage. However,
troubleshooting this is still apparently well above my pay grade.

I don’t expect you to walk me through troubleshooting why I can’t log
in. But I am tossing out to the community of people smarter than I, a
request for a direction on troubleshooting. Someone else may be in my
shoes. Part of what is puzzling is the fact that my account does not
get locked, nor does my IP get blocked.

eGroupware is an awesome product, and plan on continuing to use it even
through my self-generated fat-fingered-ness.

Joseph Hume
F1 for HELP

Ralf Becker wrote:

[Oscar_van_Eijk-3]

Joseph,

Have you tried to disable the IP check?
You need to be able to login as an admin, then go to Admin->Site
configuration, and under ‘Security’, set “Check IP address of all
sessions” to ‘No’.
I’ve had similar issues with certain clients after upgrading from 1.4,
and that worked for me.

Oscar

[wallbay1]

QUite frankly this is the crapiest groupware I ever seen, customer support poor, installation poor you get these error messages everywhere
why do you guys just create an installation exe that can take care of the installation???
this is so disapointing

Hi,

This past Saturday I upgraded an installation of eGroupware 1.4.004 to
1.6.002. Since then I have been having issues logging in. When I enter
my username and password I receive a message “Your session could not be
verified” and the address bar changes to

http://eGroupwareServer.MyDomain.internal/egroupware/login.php?cd=10&phpgw_forward=%3Fcd%3Dyes

If I persist and enter my username and password between 6 and 12 times
and clear the address bar to the right of the ? I can sometimes log in.
Please note that my account does not get locked, nor does my IP address
get blocked. If I mangle the username or password three times in a row,
either my account or the ip is blocked.

I can usually log right in if I clear my webserver cookie, close and
reopen my web browser.

I can always log into the egroupware/setup.

Any idea’s on how or where to troubleshoot this would be greatly
appreciated.

Joseph Hume
F1 for HELP

begin:vcard
fn:Joseph Hume
n:Hume;Joseph
org:F1 for HELP
adr:13785 West Highway 53;;;Rathdrum;ID;83858;United States of America
email;internet:joseph@f1forhelp.net
title:Owner
tel;work:208.687.0183
tel;cell:208.413.1557
x-mozilla-html:TRUE
url:http://www.f1forhelp.net
version:2.1
end:vcard

---

Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what’s new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[F1forHELP]

Wallbay1

I couldn’t disagree more. eGroupware is an excellent collection of
applications that works well, at least in and for my particular
application. Yes, on these lists there are a few questions, mine
included, that don’t get answered. I know for my part, I am not asking
the right question or supplying the information necessary to get the
’magic / right’ answer to fix my problem.

I don’t know how much easier it could get to ‘install’ software than to
expand a series of tar files into a folder on a web server, start it,
log in, and configure it. I know that if you read the error messages,
they tell you how to fix them, what file to edit, where it’s at, and
what to change. There are the more exotic messages that defy reason,
please see my original post below. Someday, I hope to figure out why.
As Ralf suggested, I probably ham fisted something during my upgrade,
and I will eventually figure it out.

If you have a question on how to install, or configure, or use, please
ask. If I can answer it intelligently, I will.

Joseph Hume
F1 for HELP

wallbay1 wrote:

[KastingoZzz-2]

Please Help me with this error, i read a hundred thread’s about this error but can’t fix it (sorry for my English i’m from Russia)

[shri-4]

Exactly the same issue i am getting

after installing egroupware 1.8 on centos5.

spent almost 3 days . (new in linux too )

if it the solution is known now, can someone please help.

Shri.

[Ralf_Becker_Stylite]

Hi Shri,

Exactly the same issue i am getting

after installing egroupware 1.8 on centos5.

spent almost 3 days . (new in linux too )

if it the solution is known now, can someone please help.

This error messages can have several causes:

• browser does not accept cookie from server
• no or wrongly configured session extension (eg. session.save_path)
  –> gets checked by setup >> installation check (did you have any errors
  there?)
• wrong cookie parameters (can only be deleted on database level, if you
  can not log in:
  DELETE FROM egw_config where config_name LIKE ‘cookie%’

Ralf

Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

---

Geschäftsführer Andre Keller, Ralf Becker
Registergericht Kaiserslautern HRB 30575
Umsatzsteuer-Id / VAT-Id: DE214280951

---

All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[shri-4]

Thx for veryfast reply,

I disabled the cookie authentication.
Also deleted from egw_config(as query provided by you).
But same issue persists.

There was some error related to session.save_path, don’t remember, but i created
/var/lib/egroupware/sessions and takckled it.

php_info() says
session.save_path /var/lib/egroupware/sessions /var/lib/egroupware/sessions

any further guidence ?

thx again.

[Ralf_Becker_Stylite]

Thx for veryfast reply,

I disabled the cookie authentication.

Disabling cookie authentication is NOT what I recommended, it’s
security-wise recommended over having sessionid in the URL!

Also deleted from egw_config(as query provided by you).
But same issue persists.

There was some error related to session.save_path, don’t remember,

If you dont remember, call it again …

but i created /var/lib/egroupware/sessions and takckled it.

Does the webserver user (not you yourself) has access and write-rights
to that directory?

Ralf

Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

---

Geschäftsführer Andre Keller, Ralf Becker
Registergericht Kaiserslautern HRB 30575
Umsatzsteuer-Id / VAT-Id: DE214280951

---

All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[shri-4]

Ohhh ,

extremely sorry,

there was no directory called sessions in that directory.( but i din’t get any warning for that )

created and solved the issue.

You are great.

Thx alot.

[ewood]

Hello,

I get this issue only on certain connections with the same computer. For example if I’m at home on a cable company internet connection or on a Sprint Hotspot connection I don’t get this error. If I am on a TWCWIFI connection I get this error and have to continually log back in.

Also I just found out this only happens on Chrome with the TWCWIFI connection. If I use IE8 on the same connection I don’t get the error. So I can only assume it’s a Chrome security setting?

edit: after about an hour on IE8I just got a booted to login screen with the ‘session could not be verfied’ So it’s the just the connection some how.

Thanks,
Ed

[Ralf_Becker_Stylite]

Hi Ed,

Hello,

I get this issue only on certain connections with the same computer. For
example if I’m at home on a cable company internet connection or on a Sprint
Hotspot connection I don’t get this error. If I am on a TWCWIFI connection
I get this error and have to continually log back in. What would be the
reason for this?

Could be a loadbalenced transparent Proxy, causing you to change IP,
which caused the session to be invalid, because bound to your IP.

EGroupware has a setting in Admin >> Site configuration to NOT bind a
session to the IP address. This is of cause less secure.

Ralf

Ralf Becker
Director Software Development

Stylite AG

Morschheimer Strasse 15 | Tel. +49 6352 70629 0
D-67292 Kirchheimbolanden | Fax. +49 6352 70629 30

Email: rb@stylite.de

www.stylite.de | www.egroupware.org

Managing Directors: Andre Keller | Ralf Becker | Gudrun Mueller
Chairman of the supervisory board: Prof. Dr. Birger Leon Kropshofer

VAT DE214280951 | Registered HRB 31158 Kaiserslautern Germany

---

Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[ewood]

Thank you Sir!

I like the security feature it’s a good one. When I stop using this connection I’ll change it back, it’s sure nice to have the option.

Thanks again!
Ed