Package Manager Login Issue

    • 58 posts
    April 5, 2019 5:02 AM EDT

    After updating from 4.10.3p1 to 4.10.3p5 we're not able to login to the package manager anymore but get redirected to the same form again.

     

    Debugging revealed that the credentials are actually correct and the session file gets created in temporary/session, but the Zend_Auth information doesn't get set (only ZendSession and respective browser access, as well as IP).

    Also the session cookie get's unset and recreated when redirecting from www/install/controllers/AuthController.php:59 to "/install/ " and www/install/controllers/IndexController.php:30 can't read the identity due to it not being set in the session file (guess www/install/controllers/IndexController.php:30 is the problem).

    .htaccess has already been adjusted for setting the RewriteBase for /install/, folders temporary/session and install/config have 0777 permissions.

    As for the environment:

    - We're using the same DB on AWS and the same Docker image with no volume mounts to make permission issues visible (currently there are none).

    - PHP 7.1.26 with opcache installed

    - It's working on my local machine but not on the test server:

     

    Does sb. have a clue how this Zend_Auth issue can be solved and why there is a difference between test and local?

    • Moderator
    • 6923 posts
    April 5, 2019 5:59 AM EDT

    Check recursive permissions per this tutorial https://www.socialengine.com/support/article/5112151/se-php-optimized-file-and-folder-permissions

    Make sure mod_sec is not enabled per the requirements https://www.socialengine.com/support/article/5210530/se-php-socialengine-requirements

    Check the error logs for the server.

    Check the error logs for the script in the log browser.

    • 58 posts
    April 5, 2019 8:40 AM EDT

    Hey @Donna,

    sadly none of the mentioned hints solved the problem.

    System and SocialEngine-Logs are empty / no content written to when logging in, permissions are set correctly (even 777 on everything didn't do anything).

    Cookie-Domain is also correct.

    We also have the same setup for local and test (using a Docker image with only one volume mount for uploads to /public).

    FPM Access-Log:

    php_1 | [php-fpm:access] 127.0.0.1 - 05/Apr/2019:11:55:41 +0000 "POST /install/index.php?rewrite=2&rewrite=1" 302 /app/www/install/index.php 172.483 2048 11.60% php_1 | docker.local:443 192.168.32.4 - - [05/Apr/2019:11:55:41 +0000] "POST /install/login HTTP/1.1" 302 2594 "https://xx-relaunch-release-cw15.test2.oddity.agency/install/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36" php_1 | [httpd:access] xx-relaunch-release-cw15.test2.oddity.agency:443 192.168.32.4 [requestTime:174208] - - [05/Apr/2019:11:55:41 +0000] "POST /install/login HTTP/1.1" 302 bytesIn:1535 bytesOut:2594 reqTime:0 php_1 | [php-fpm:access] 127.0.0.1 - 05/Apr/2019:11:55:41 +0000 "GET /install/index.php?rewrite=2&rewrite=1" 302 /app/www/install/index.php 3.306 2048 302.48% php_1 | docker.local:443 172.31.0.70 - - [05/Apr/2019:11:55:41 +0000] "GET /install/ HTTP/1.1" 302 2693 "https://xx-relaunch-release-cw15.test2.oddity.agency/install/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36" php_1 | [httpd:access] xx-relaunch-release-cw15.test2.oddity.agency:443 172.31.0.70 [requestTime:4932] - - [05/Apr/2019:11:55:41 +0000] "GET /install/ HTTP/1.1" 302 bytesIn:1326 bytesOut:2693 reqTime:0 php_1 | [php-fpm:access] 127.0.0.1 - 05/Apr/2019:11:55:41 +0000 "GET /install/index.php?rewrite=2&rewrite=1" 302 /app/www/install/index.php 62.361 2048 16.04% php_1 | docker.local:443 192.168.32.4 - - [05/Apr/2019:11:55:41 +0000] "GET /install/ HTTP/1.1" 302 538 "https://xx-relaunch-release-cw15.test2.oddity.agency/install/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36" php_1 | [httpd:access] xx-relaunch-release-cw15.test2.oddity.agency:443 192.168.32.4 [requestTime:63809] - - [05/Apr/2019:11:55:41 +0000] "GET /install/ HTTP/1.1" 302 bytesIn:1237 bytesOut:538 reqTime:0 php_1 | [php-fpm:access] 127.0.0.1 - 05/Apr/2019:11:55:41 +0000 "GET /install/index.php?rewrite=2&rewrite=1" 302 /app/www/install/index.php 3.190 2048 0.00% php_1 | docker.local:443 172.31.0.70 - - [05/Apr/2019:11:55:41 +0000] "GET /install/login HTTP/1.1" 302 637 "https://xx-relaunch-release-cw15.test2.oddity.agency/install/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36" php_1 | [httpd:access] xx-relaunch-release-cw15.test2.oddity.agency:443 172.31.0.70 [requestTime:4330] - - [05/Apr/2019:11:55:41 +0000] "GET /install/login HTTP/1.1" 302 bytesIn:1288 bytesOut:637 reqTime:0 php_1 | [php-fpm:access] 127.0.0.1 - 05/Apr/2019:11:55:41 +0000 "GET /install/index.php?rewrite=2&rewrite=1" 200 /app/www/install/index.php 76.071 2048 26.29% php_1 | docker.local:443 192.168.32.4 - - [05/Apr/2019:11:55:41 +0000] "GET /install/login HTTP/1.1" 200 1324 "https://xx-relaunch-release-cw15.test2.oddity.agency/install/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36" php_1 | [httpd:access] xx-relaunch-release-cw15.test2.oddity.agency:443 192.168.32.4 [requestTime:78417] - - [05/Apr/2019:11:55:41 +0000] "GET /install/login HTTP/1.1" 200 bytesIn:1242 bytesOut:1324 reqTime:0
    This post was edited by oddity Code at April 5, 2019 8:42 AM EDT
    • 58 posts
    April 9, 2019 7:19 AM EDT

     Closed! Solution was to only use one instead of two networks in our docker container because Zend_Auth doesn't work with two networks and looses the link to the session.

    • Moderator
    • 6923 posts
    April 9, 2019 9:08 AM EDT

    Thank you for posting your solution!