-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Iain,
On Thursday, February 02, 2006, Iain wrote:
> Hi,

> I am experiencing a strange bug with squirrelmail. The symptoms are as
> follows:

> Sometimes when a user sends an email the from address changes to another
> user's email address who is logged in at the same time.

> e.g. user A has email address [EMAIL PROTECTED]
>       user B has email address [EMAIL PROTECTED]

> User A is composing an email. When he hits send, the from address gets
> set to [EMAIL PROTECTED]

There could be a few causes of this. Are the users on the same
computer? If so... that is a big issue... and they shouldn't both be
logging in at the same time. Are they behind a proxy server? Another
possibility is a PHP bug that has come up from time to time where the
session id becomes the string 'deleted' instead of an empty string.
If multiple users hit the same 'deleted' session ID, then they will be
accessing the same session files.

> 3 x Redhat EL 4 webmail front ends. (PHP 4.3.9, Squirrelmail 1.4.5)
> 1 x Solaris 8 Backend running:
>         - Cyrus
>         - Postgres 8.0.3 (for address book, userprefs, etc)
>         - NFS

> The 3 webmail front ends are load balanced behind an Alteon load
> balancer with IP persistency. Sessions are stored on the NFS mount.

While I don't believe it's likely to happen too often, there is a
possibility that the session id generated by web server 1 has the same
name as a session id generated on web server 2, this would cause the
sessions to pollute each other as they're accessed from the same NFS
share. Have you considered shifting the session files to storing
locally to each web server? You said the balancer keeps IP persistency
so it shouldn't cause any harm. What about a custom session handler?
Somebody posted on to the devel list recently that could be tweaked
for postgres with some of the suggested fixes.

- --
Jonathan Angliss
<[EMAIL PROTECTED]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)

iD8DBQFD4u/RK4PoFPj9H3MRAoY1AKDfmpjYzIFTDFk9VsiQXPm5ttMPCQCfb8j0
eB8Hhw+ydaJJ9xPWEQ2xwtk=
=MV2x
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@lists.sourceforge.net
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to