Your session could not be verified

reuam1919 2007-11-23 15:47:19 UTC #1

still I have this error after new installation (version 1.4.002). In the forum no suitable solution was found. The directories are writeable by the web server. Cookies were stored and session files were stored.

The function (login.php)check_logoutcode receives $code=10 and results in “Your session could not be verified”. Strange. I’m not very well in debuggin php but let’s wait and see. I’ll try to find the error. Here’s a short trace, which was written during login:

[23-Nov-2007 08:36:45] --> header.inc.php parsing, started
[23-Nov-2007 08:36:45] setcookie(sessionid,19eb102d763baa4b1e66b38cd0e13cd2,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(kp3,a8dfbef08596c9038b9991e2dfeb3066,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(domain,default,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(last_loginid,demo,1197041805,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(last_domain,default,1197041805,/,office.reuam.com)
[23-Nov-2007 08:36:45] --> header.inc.php parsing, started
[23-Nov-2007 08:36:45] *** session::verify(19eb102d763baa4b1e66b38cd0e13cd2) if wrong IP was given (())
[23-Nov-2007 08:36:45] --> session::verify(19eb102d763baa4b1e66b38cd0e13cd2) SUCCESS
[23-Nov-2007 08:36:46] --> header.inc.php parsing, started
[23-Nov-2007 08:36:46] -->login.php function check_logoutcode
[23-Nov-2007 08:36:46] -->login.php function check_logoutcode: case 10:
[23-Nov-2007 08:36:46] setcookie(sessionid,0,/,office.reuam.com)
[23-Nov-2007 08:36:46] setcookie(kp3,0,/,office.reuam.com)
[23-Nov-2007 08:36:46] setcookie(domain,0,/,office.reuam.com)

some traces were coded by me.

reuam1919 2007-11-24 15:36:31 UTC #2

Now the egroupware works fine. Exactly I don’t know the error. From the german forum I got a hint. So everything was installed new. Befor I startet the first configuration I deleted the database entry egw_config::session_checkip.

reuam1919:

still I have this error after new installation (version 1.4.002). In the forum no suitable solution was found. The directories are writeable by the web server. Cookies were stored and session files were stored.

The function (login.php)check_logoutcode receives $code=10 and results in “Your session could not be verified”. Strange. I’m not very well in debuggin php but let’s wait and see. I’ll try to find the error. Here’s a short trace, which was written during login:

[23-Nov-2007 08:36:45] --> header.inc.php parsing, started
[23-Nov-2007 08:36:45] setcookie(sessionid,19eb102d763baa4b1e66b38cd0e13cd2,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(kp3,a8dfbef08596c9038b9991e2dfeb3066,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(domain,default,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(last_loginid,demo,1197041805,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(last_domain,default,1197041805,/,office.reuam.com)
[23-Nov-2007 08:36:45] --> header.inc.php parsing, started
[23-Nov-2007 08:36:45] *** session::verify(19eb102d763baa4b1e66b38cd0e13cd2) if wrong IP was given (())
[23-Nov-2007 08:36:45] --> session::verify(19eb102d763baa4b1e66b38cd0e13cd2) SUCCESS
[23-Nov-2007 08:36:46] --> header.inc.php parsing, started
[23-Nov-2007 08:36:46] -->login.php function check_logoutcode
[23-Nov-2007 08:36:46] -->login.php function check_logoutcode: case 10:
[23-Nov-2007 08:36:46] setcookie(sessionid,0,/,office.reuam.com)
[23-Nov-2007 08:36:46] setcookie(kp3,0,/,office.reuam.com)
[23-Nov-2007 08:36:46] setcookie(domain,0,/,office.reuam.com)

some traces were coded by me.

Ralf_Becker_6 2007-11-24 16:31:05 UTC #3

As I already explained on the German list:

It’s a security measure, which is on by default. It drops a session if
the IP address of the client/browser changes, as this happens if someone
hijacks the session. Unfortunately some providers (eg. AOL) run all
there http requests through a load-balanced proxy causing your IP to
constantly change.

We (eGroupWare project) dont want to drop security measures by default,
only because some provides does something like that. As an admin you can
always switch the check off, if your users having problems with it.

Anyway your the first admin reporting that problem with himself, as
admins usually have more reliable internet connections …

Ralf

reuam1919 schrieb:

Now the egroupware works fine. Exactly I don’t know the error. From the
german forum I got a hint. So everything was installed new. Befor I startet
the first configuration I deleted the database entry
egw_config::session_checkip.

reuam1919 wrote:

still I have this error after new installation (version 1.4.002). In the
forum no suitable solution was found. The directories are writeable by the
web server. Cookies were stored and session files were stored.

The function (login.php)check_logoutcode receives $code=10 and results in
"Your session could not be verified". Strange. I’m not very well in
debuggin php but let’s wait and see. I’ll try to find the error. Here’s a
short trace, which was written during login:

[23-Nov-2007 08:36:45] --> header.inc.php parsing, started
[23-Nov-2007 08:36:45]
setcookie(sessionid,19eb102d763baa4b1e66b38cd0e13cd2,0,/,office.reuam.com)
[23-Nov-2007 08:36:45]
setcookie(kp3,a8dfbef08596c9038b9991e2dfeb3066,0,/,office.reuam.com)
[23-Nov-2007 08:36:45] setcookie(domain,default,0,/,office.reuam.com)
[23-Nov-2007 08:36:45]
setcookie(last_loginid,demo,1197041805,/,office.reuam.com)
[23-Nov-2007 08:36:45]
setcookie(last_domain,default,1197041805,/,office.reuam.com)
[23-Nov-2007 08:36:45] --> header.inc.php parsing, started
[23-Nov-2007 08:36:45] ***
session::verify(19eb102d763baa4b1e66b38cd0e13cd2) if wrong IP was given
(())
[23-Nov-2007 08:36:45] -->
session::verify(19eb102d763baa4b1e66b38cd0e13cd2) SUCCESS
[23-Nov-2007 08:36:46] --> header.inc.php parsing, started
[23-Nov-2007 08:36:46] -->login.php function check_logoutcode
[23-Nov-2007 08:36:46] -->login.php function check_logoutcode: case 10:
[23-Nov-2007 08:36:46] setcookie(sessionid,0,/,office.reuam.com)
[23-Nov-2007 08:36:46] setcookie(kp3,0,/,office.reuam.com)
[23-Nov-2007 08:36:46] setcookie(domain,0,/,office.reuam.com)

some traces were coded by me.

–
Ralf Becker
eGroupWare Training & Support ==> http://www.egroupware-support.de
Outdoor Unlimited Training GmbH [www.outdoor-training.de]
Handelsregister HRB Kaiserslautern 3587
Geschäftsführer Birgit und Ralf Becker
Leibnizstr. 17, 67663 Kaiserslautern, Germany
Telefon +49 (0)631 31657-0

This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft® Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

Karthikeyan 2010-08-23 16:59:00 UTC #4

I have the similar issue.
Could not even login as admin to make changes.
Could anyone help me on this?

Cheers
Karthik

mike_a 2010-08-23 17:43:00 UTC #5

delete cookies then follow ralf"s instructions.

I have the similar issue.
Could not even login as admin to make changes.
Could anyone help me on this?

Cheers
Karthik

View this message in context:
http://egroupware.219119.n3.nabble.com/Your-session-could-not-be-verified-tp262790p1295332.html

Sell apps to millions through the Intel® Atom™ Developer Program
Be part of this innovative community and reach millions of netbook users
worldwide. Take advantage of special opportunities to increase revenue and
speed time-to-market. Join now, and jumpstart your future.
http://p.sf.net/sfu/intel-atom-d2d

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

Karthikeyan 2010-08-23 18:02:11 UTC #6

Thanks
But how to login, to change session_checkip ??

gromit_60 2010-08-24 14:28:26 UTC #7

I’ve the same problem about session. I cannot login as admin or the user I’ve specified as admin and I obtain the same message: “your session could not be verified”.
I’ ve installed egroupware on Ubuntu Server 10.04 64bit and solved every problem about the installation check. I use also an egroupware installation on a debian 5.0 where I get the same message but it works.

mike_a 2010-08-24 15:04:56 UTC #8

You should be able to login after you delete, [or clear], your browser cookies. With Firefox 3.6 you would choose Tools -> Clear Recent History. The advanced administrator might only choose to delete the cookies specific to the domain.

I manage multiple 'virtual' domains and have often run into this problem because I had the 'cookie domain' set improperly. I have eliminated the 'Your session could not be verified' errors by simply leaving the 'cookie domain' blank.

Karthikeyan 2010-08-24 17:59:24 UTC #9

I got it

Some of the Peer Installation was not installed properly
Now I can login

Karthik

Ralf_Becker_Stylite 2010-08-25 05:58:10 UTC #10

The message means: EGroupware can NOT read the stored session-data for
the session-id your browser transmitted back (or maybe failed to transmit).

That scenario can have many reasons, but it is definitive a
configuration problem you have to solve on your side!

Check the “sessionid” cookie is transmitted back to the server (can fail
because you use eg. different server name to login, or your browser does
NOT accept cookies, …). If that’s ok, check if Apache writes a session
file (location depends on your php.ini and distro).

Ralf

I’ve the same problem about session. I cannot login as admin or the user I’ve
specified as admin and I obtain the same message: “your session could not be
verified”.
I’ ve installed egroupware on Ubuntu Server 10.04 64bit and solved every
problem about the installation check. I use also an egroupware installation
on a debian 5.0 where I get the same message but it works.

–
Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

Geschäftsführer Andre Keller,
Gudrun Müller, Ralf Becker
Registergericht Kaiserslautern HRB 30575
Umsatzsteuer-Id / VAT-Id: DE214280951

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

gromit_60 2010-08-25 10:14:56 UTC #11

Thanks for your answers.
I’ve tried to use all the browsers I know: Firefox, I.E., Opera, Chrome, Safari and finally Lynx on the same pc with eGroupware installed. I get always the same message.
In /var/lib/egroupware/sessions there are many files like this:
-rw------- 1 www-data www-data 2709 2010-08-25 12:02 sess_kcj1r5m8abmjbdg0o9alk5p117
one for every session I tried to login.
The path above is in /etc/egroupware/apache.conf and in php.ini at session.save_path
Every time I try to login I clear the browser cache.
How can I verify if the “sessionid” cookie is transmitted back to the server?

John_Hayward 2010-08-31 01:36:48 UTC #12

I have a similar problem as the others - I have Ubuntu 10.04.1 with apache 2/php5/mysql - installed egroupware 1.6 from ubutnu distirbution.

When I attempt to connect to the login page I see the dreaded “Your session could not be verified” message before anything.
I see session files being created in the correct location (set by egroupware to /var/lib/egroupware/sessions.

I’ve used firebug to capture the headers of three transactions and it appears to me the sessionid cookie to be the same - however I would like you (or others on the list) to see if they can determine if the sessionid cookie is working properly.

Thanks in advance for any help you can give.
johnh…

==== headers from firebug when entering credentials ====
+POST login.php?phpgw_forward=%2Fhome%2Findex.php

Response Headersview source
Date Tue, 31 Aug 2010 01:20:23 GMT
Server Apache/2.2.14 (Ubuntu)
X-Powered-By PHP/5.3.2-1ubuntu4.2
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control no-cache, must-revalidate
Pragma no-cache
Set-Cookie sessionid=35vc2rqine7339o0jjdk11ug43; path=/ kp3=ldl32IYcJ3h8tu3ZjzehICi3; path=/ domain=JohnTest; path=/ last_loginid=johnh; expires=Tue, 14-Sep-2010 01:20:23 GMT; path=/ last_domain=JohnTest; expires=Tue, 14-Sep-2010 01:20:23 GMT; path=/
Location /egroupware/home/index.php
Vary Accept-Encoding
Content-Encoding gzip
Keep-Alive timeout=15, max=92
Connection Keep-Alive
Transfer-Encoding chunked
Content-Type text/html
Request Headersview source
Host johnhegroup
User-Agent Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Accept text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Language en-us,en;q=0.5
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
Referer http://johnhegroup/egroupware/login.php?cd=10&phpgw_forward=%2Fhome%2Findex.php
Cookie PHPSESSID=r0mc159ktg7h840bltishciif0; ConfigUser=admin; ConfigPW=21232f297a57a5a743894a0e4a801fc3; ConfigDomain=JohnTest; ConfigLang=en; last_loginid=johnh; last_domain=JohnTest

+GET index.php
Response Headersview source
Date Tue, 31 Aug 2010 01:23:14 GMT
Server Apache/2.2.14 (Ubuntu)
X-Powered-By PHP/5.3.2-1ubuntu4.2
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control no-cache, must-revalidate
Pragma no-cache
Location /egroupware/login.php?cd=10&phpgw_forward=%2Fhome%2Findex.php
Vary Accept-Encoding
Content-Encoding gzip
Content-Length 20
Keep-Alive timeout=15, max=100
Connection Keep-Alive
Content-Type text/html
Request Headersview source
Host johnhegroup
User-Agent Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Accept text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Language en-us,en;q=0.5
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
Referer http://johnhegroup/egroupware/login.php?cd=10&phpgw_forward=%2Fhome%2Findex.php
Cookie PHPSESSID=r0mc159ktg7h840bltishciif0; ConfigUser=admin; ConfigPW=21232f297a57a5a743894a0e4a801fc3; ConfigDomain=JohnTest; ConfigLang=en; last_loginid=johnh; last_domain=JohnTest; sessionid=kbl2do2kie2eg7plpif6g8i8q5; kp3=TQGwSerdC3KbiF5pj6MYchpS; domain=JohnTest

+GET login.php?cd=10&phpgw_forward=%2Fhome%2Findex.php
Response Headersview source
Date Tue, 31 Aug 2010 01:23:14 GMT
Server Apache/2.2.14 (Ubuntu)
X-Powered-By PHP/5.3.2-1ubuntu4.2
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control no-cache, must-revalidate
Pragma no-cache
Set-Cookie sessionid=deleted; expires=Mon, 31-Aug-2009 01:23:13 GMT; path=/ kp3=deleted; expires=Mon, 31-Aug-2009 01:23:13 GMT; path=/ domain=deleted; expires=Mon, 31-Aug-2009 01:23:13 GMT; path=/
Vary Accept-Encoding
Content-Encoding gzip
Content-Length 1568
Keep-Alive timeout=15, max=99
Connection Keep-Alive
Content-Type text/html; charset=utf-8
Request Headersview source
Host johnhegroup
User-Agent Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Accept text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Language en-us,en;q=0.5
Accept-Encoding gzip,deflate
Accept-Charset ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive 115
Connection keep-alive
Referer http://johnhegroup/egroupware/login.php?cd=10&phpgw_forward=%2Fhome%2Findex.php
Cookie PHPSESSID=r0mc159ktg7h840bltishciif0; ConfigUser=admin; ConfigPW=21232f297a57a5a743894a0e4a801fc3; ConfigDomain=JohnTest; ConfigLang=en; last_loginid=johnh; last_domain=JohnTest; sessionid=kbl2do2kie2eg7plpif6g8i8q5; kp3=TQGwSerdC3KbiF5pj6MYchpS; domain=JohnTest

John_Hayward 2010-08-31 20:28:01 UTC #13

You indicated you removed all problems.
I still have the problem:

Checking file-permissions of …/./sitemgr-link for not world writable:
…/./sitemgr-link does not exist !!!

Did you observe this problem and if so how did you remove it.
johnh…

John_Hayward 2010-09-01 03:12:26 UTC #14

I might be wrong but I think the problem may be related to version of php. php-5.3.2-1 produces a lot of deprecated errors related to code like:
pointer =& new …

There may be some issues with how this code works particularly related to serialized objects stored in session variables.

With an older ubuntu box installed pretty much the same way it has Apache/2.2.12 (Ubuntu) PHP/5.2.10-2 it does not produce deprecated errors and the package installes and I can login (ie it works).

I do still have an install problem but this time it is:
././etemplate/doc for not world writable:
…/./etemplate/doc does not exist !!!

Version of egropware is 1.6.001+dfsg-2

johnh…

Ralf_Becker_Stylite 2010-09-01 08:36:41 UTC #15

Hi John,

I might be wrong but I think the problem may be related to version of php.
php-5.3.2-1 produces a lot of deprecated errors related to code like:
pointer =& new …

There may be some issues with how this code works particularly related to
serialized objects stored in session variables.

With an older ubuntu box installed pretty much the same way it has
Apache/2.2.12 (Ubuntu) PHP/5.2.10-2 it does not produce deprecated errors
and the package installes and I can login (ie it works).

I do still have an install problem but this time it is:
././etemplate/doc for not world writable:
…/./etemplate/doc does not exist !!!

This is fixed in SVN, but you can savely ignore these errors of the
installation check, it’s a problem with the check, not a real problem.

Ralf

Version of egropware is 1.6.001+dfsg-2

johnh…

–
Ralf Becker
Director Software Development

Stylite GmbH
[open style of IT]

Morschheimer Strasse 15
67292 Kirchheimbolanden

fon +49 (0) 6352 70629-0
fax +49 (0) 6352 70629-30
mailto: rb@stylite.de

www.stylite.de
www.egroupware.org

Geschäftsführer Andre Keller,
Gudrun Müller, Ralf Becker
Registergericht Kaiserslautern HRB 30575
Umsatzsteuer-Id / VAT-Id: DE214280951

This SF.net Dev2Dev email is sponsored by:

Show off your parallel programming skills.
Enter the Intel® Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

gromit_60 2010-09-08 16:18:28 UTC #16

Ralf,
have you any suggestions regarding my problem?
The problem persists.
Thanks in advance.

gromit_60 2010-09-13 16:06:09 UTC #17

SOLVED!!!
I can’t believe!!! I solved downgrading php to version 5.2.10 as John said. There are many guides about this because seems to be a frequent issue the 5.3 php version installed in Lucid Lynx.

John_Hayward 2010-09-14 15:28:57 UTC #18

The package which comes with Ubuntu 10.04 is 1.6.001 - it turns out that version date appears to be (from sourceforge.net 2008-11-24).

I upgraded to 1.6.003 by:

wget -O - http://download.opensuse.org/repositories/server:/eGroupWare/xUbuntu_10.04/Release.key | apt-key add -
in /etc/apt/sources.list.d/egroupware.sources.list added
deb http://download.opensuse.org/repositories/server:/eGroupWare/xUbuntu_10.04/ ./
apt-get update
apt-get install egroupware
(note since I had a previous installation I needed to upgrade the database by going to setup)

With php 5.3.2 and egroupware 1.6.003 the “Your session could not be verified” went away except for when you first pull up the web page (this seems to be fixed in the current csv version).

It is too bad that the standard ubuntu package is almost 2 years old and that the session problem seems to stem from an newer version of php which has been addressed with more current versions of groupware.

johnh…

gromit_60 2010-09-15 09:46:34 UTC #19

John, so I can re-upgrade php to 5.3.2 version and then installing 1.6.003 egroupware I will not have problem, correct?

John_Hayward 2010-09-17 12:17:13 UTC #20

That is my limited experience at least with the “Your session could not be verified”. You still get this error when you first come to the site but entering valid credentials allows you to login and get going.

However see “Egroupware 1.6.003-2 on Ubuntu 10.04 problem with download index.php” thread. It appears that there may be some issues which some people don’t see with php 5.2.

johnh…