[Phpgroupware-tracker] [Bug #847] multiple domains not isolated

[nobody]

=================== BUG #847: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=847&group_id=509

Changes by: Dave Hall <address@hidden>
Date: 2002-Nov-25 15:35 (Australia/Melbourne)

            What     | Removed                   | Added
---------------------------------------------------------------------------
          Resolution | None                      | Invalid
              Status | Open                      | Closed


------------------ Additional Follow-up Comments ----------------------------
Hey Michael,

I have close this one and marked it as invalid - I think it is more of a 
feature request than a normal bug.  I hope you understand.  

There is a related issue with cookies.  Some changes were made to sessions and 
more specifically to accomodate sitemgr.  This makes the cookies work for the 
domain.  Maybe you can look at not passing the session by cookies, just as a 
stop gap messure.

Cheers



=================== BUG #847: FULL BUG SNAPSHOT ===================


Submitted by: totschnig                 Project: phpGroupWare                   
Submitted on: 2002-Jul-13 03:37
Category:  API - phpGWapi               Bug Group:  0.9.14 release              
Severity:  3                            Priority:  Low                          
Resolution:  Invalid                    Assigned to:  skwashd                   
Status:  Closed                         Component Version:  None                
Platform Version:  Linux - RedHat       Reproducibility:  Every Time            

Summary:  multiple domains not isolated

Original Submission:  After configuring header.inc.php with multiple domain 
support,
I had to realize that the isolation between domains doesnot work. the first 
login to the second or third domains works, but after logging out and 
relogging, phpgroupware reads the database of the default domain!!! I think the 
problem could be related to the passing of sessionid with cookies. even if all 
domains have "Use cookies to pass sessionid" set to no, phpgroupware sends one 
cookie at the beginning of the session, three other at the end. Another problem 
might be that phpgroupware has a problem with distingishing the URLs of the 
different domains. in my case the domains share the same DNS, the default 
domain is http://myhost.com/phpgroupware, the other domains 
http://myhost.com/secondomain, etc.
I attach header.inc.php.

Follow-up Comments
*******************

-------------------------------------------------------
Date: 2002-Nov-25 15:35             By: skwashd
Hey Michael,

I have close this one and marked it as invalid - I think it is more of a 
feature request than a normal bug.  I hope you understand.  

There is a related issue with cookies.  Some changes were made to sessions and 
more specifically to accomodate sitemgr.  This makes the cookies work for the 
domain.  Maybe you can look at not passing the session by cookies, just as a 
stop gap messure.

Cheers

-------------------------------------------------------
Date: 2002-Nov-25 15:27             By: totschnig
Hello Dave,

I think if phpgw's multiple domain support work only with virtual domains with 
different DNS names, this information should be added somewhere. When I asked 
about this on the developers list, someone told me different directories in the 
same DNS name should work too. I think it would be great if they would, since 
it would make it easier to host different groups on sites that only own one DNS 
name. There is something in the cookie code I do not understand preventing this 
from work.
I agree that you close it as a bug, but maybe I could reopen it as as feature 
request.

-------------------------------------------------------
Date: 2002-Nov-24 20:24             By: skwashd
Hi Michael,

I understand where you are coming from with this, but i think that is not 
really a bug.  The multiple domain support is to allow multiple domains not 
directories to be used on the one server, using virtual hosts.  For example you 
could have http://totschnig.net/phpgroupware, http://michael.net/phpgroupware 
and http://dev-box.uqam.ca/phpgroupware

Each domain should then be properly isolated.  Have you tried to replicate this 
using db sessions with virtual hosts?

I will downgrade this one, and if you agree close it.

Cheers


CC list is empty


File Attachments
****************

-------------------------------------------------------
Date: 2002-Jul-13 03:37  Name: header.inc.php  Size: 5KB   By: totschnig

http://savannah.gnu.org/bugs/download.php?group_id=509&amp;bug_id=847&amp;bug_file_id=52


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=847&group_id=509