-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 3/24/2014 3:17 PM, benfell at parts-unknown.org wrote: > Hi, > > Horde seems to be quite the problem child. It sorta kinda looks > like session handling is entirely broken. What are you using for a session handler? > kronolith will let me in, but not for long. Then I get "invalid > token" and am bounced back to the home screen. Tokens are different from sessions (related to forms, etc), and are configured differently. > imp won't let me in at all. This behavior is completely broken: I > get a log in screen and a message in /var/log/messages about not > being authorized for IMP (which is apparently right up there in the > list of useless, meaningless error messages). What are you using as an authentication backend? Many people with the simplest use case for Horde (single domain webmail; one server) set up the one required backend in IMP, and then allow Horde to use IMP for authentication, which in effect passes authentication for all of Horde through to the underlying mail server. > Looking around on the web, I see a google thread about somebody > saying kronolith shouldn't reset session data, and Jan Schneider, > the horde developer, I think, insisting that it must. He seems to > have his own idea about how things should work--and I'm beginning > to wonder if it actually does. Not sure about this; I've never had users reporting any session issues in kronolith, even with the H3 framework you're trying to make work. > Has anybody gotten this working? > > By the way, this is CentOS 6.5. > Nels Lindquist - ---- <nlindq at maei.ca> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQB1AwUBUzGnPBP/WUEM2uY9AQLO3gMAvTiIq8IbokaEVKx7hAuzcsgfqHPcZdOv fqEJZz86l8tFOG9fWbltuD3cfFA8mXCIdSHmfChGA6EnMjgV078sOYLSnIZdDp/u 07buznvq5UIdfVKMAd5fRe3whrdAZK0t =i/hs -----END PGP SIGNATURE-----