Re: [Phpgroupware-developers] Remote login

[Dave Hall]

This is now fixed in cvs for .14 and HEAD.  Thanks to everyone who
contributed to fixing it.

Cheers

Dave Hall <address@hidden> wrote:

> Bob Crandell <address@hidden> wrote
> 
> > You are getting sleepy ... sleepy.  Your eyes are getting heavy ...
> > 
> > The LAN points to http://myserver/phpgroupware
> > There is a link on my web page that points to
> > http://207.55.99.66:8002/phpgroupware/login.php
> 
> OK I think I am getting closer to solving it ... but it isn't 
> gunna be
> easy.  There are so many possibilies, what works for me, won't 
> work for
> others.  Could you please turn cookie prompt on in moz and tell me 
> whatit is producing for the external access?  Just want to comfirm 
> something.
> Cheers
> 
> > 
> > Good night.
> > 
> > Dave Hall (address@hidden) wrote*:
> > >
> > >Dave Hall <address@hidden> wrote:
> > >
> > >I have one other question ... do you use a fqdn for the server 
> > url? if
> > >not does the lan version point to a fqdn or just a server name (ie
> > >http://myserver/phpgroupware) ??
> > >
> > >I think I need to write a way of testing the 
> strlen($parts[count]-1)
> > >maybe using a switch case on it and looking at the count also. 
> > Will come
> > >at it fresh in the morning.  As much info as people can provide 
> > on this
> > >the better.
> > >
> > >Cheers
> > >
> > >skwashd
> > >
> > >> Bob Crandell <address@hidden> wrote:
> > >>
> > >> > I applied your patch. No joy with IE 5.5sp2 and Opera 6.02.
> > >> > Mozilla 1.0 and Galeon
> > >> > 1.2.5 still work.
> > >>
> > >> hmmm ... i tried it on IE5.5 and it worked for me and the domain
> > >> on the
> > >> cookies looked fine when i checked them on moz and n4.79.  Aaaah
> > >> is my
> > >> memory playing tricks on me again or is your server
> > >> something.domain.com?
> > >> Try this change on the patch:
> > >>
> > >> if(strlen($parts[count($parts)-1]) == 2) // for ccTLD names
> > >>
> > >> to
> > >>
> > >> if(strlen($parts[count($parts)-1]) == 3) // for TLD names with
> > >> subdomains
> > >> And can you turn prompt on for the cookie accpeptance policy 
> > for both
> > >> moz and IE and post before and after hack cookie output info.
> > >>
> > >> This is a frustrating one.  I think a paramater would have made
> > >> this a
> > >> bit easier ... oh well means we all learn more.
> > >>
> > >> Cheers
> > >>
> > >> skwashd
> > >> >
> > >> > Thanks
> > >> >
> > >> > Dave Hall (address@hidden) wrote*:
> > >> > >
> > >> > >Hey Zone,
> > >> > >
> > >> > >Thanks for the info ... but it is .14 latest cvs.  I had a 
> look> >> > through>things, and I think i have found the culprit.  
> You are
> > >> > right it is a
> > >> > >cookie issue.  I use php4 sessions.  My domain is a subdomain
> > >> of
> > >> > a ccTLD
> > >> > >(ie myserver.mydomain.com.au).
> > >> > >
> > >> > >I noticed skeeter applied a patch to the php4 sessions 
> > class, 9
> > >> > days ago.
> > >> > >
> > >> > >On IE I set cookies to prompt, but when trying to login it 
> > was not
> > >> > >trying to set any cookies, so I thought i would check what
> > >> > Mozilla and
> > >> > >Netscape 4.7x were doing.  Surprisingly on Mozilla 1.1
> > >> > (Windoze98) it is
> > >> > >prompting to accept cookies from domain ".com.au", N4.79
> > >> reports the
> > >> > >same thing.  If those cookies are accepted it allow the login.
> > >> > >
> > >> > >I have tested this and posted it as a patch on savannah
> > >> > (allocated to
> > >> > >skeeter), it doesn't completely comply with the guidelines ...
> > >> > but I was
> > >> > >in a hurry.  Here is the code if anyone is interested:
> > >> > >class.sessions_php4.inc.php lines 284-288 replaced with this:
> > >> > >
> > >> >        if (count($parts) > 2)
> > >> > >
> > >> >        {
> > >> > >
> > >> >             if(strlen($parts[count($parts)-1]) == 2) // for
> > >> ccTLD
> > >> > names>
> > >> >            {
> > >> > >
> > >> >                $this->cookie_domain =
> > >> > >'.'.$parts[count($parts)-3].'.'.$parts[count($parts)-
> > >> > 2].'.'.$parts[count($parts)-1];
> > >> > >
> > >> >            }
> > >> > >
> > >> >            else
> > >> > >
> > >> >            {
> > >> > >
> > >> >                $this->cookie_domain =
> > >> > >'.'.$parts[count($parts)-2].'.'.$parts[count($parts)-1];
> > >> > >
> > >> >            }
> > >> > >
> > >> >        }
> > >> > >
> > >> > >Or see patch the patch:
> > >> >
> > >>
> >
>
>>https://savannah.gnu.org/patch/index.php?func=detailpatch&patch_id=537&group_id=509
> > >> > >
> > >> > >Cheers
> > >> > >
> > >> > >skwashd
> > >> > >
> > SNIP
> > --
> > Bob Crandell
> > Assured Computing
> > When you need to be sure.
> > Voice 541-689-9159
> > FAX   240-371-7237
> > address@hidden
> > www.assuredcomp.com
> > Eugene, Or. 97402
> > 
> > 
> > 
> > 
> > _______________________________________________
> > Phpgroupware-developers mailing list
> > address@hidden
> > http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
> > 
>

dave.hall.vcf
Description: Card for <dave.hall@mbox.com.au>