[TYPO3-dev] Solving existing session problems - sole technical approach

[Susanne Moog]

Hi,

I have some problems with sessions, but I _can_ login just fine. It only 
needs two to three times till I get there...


Marcus Krause schrieb:
> Hi!
> 
> 
> bugtracker and mailinglists are full of reports of non-properly working
> TYPO3 sessions. Some of them are helpful, most of them not.
> Details of interest:

>  - browser type and version

FF 3.0.5 on Ubuntu

>  - host setup as multidomain (with web server config (alias) or TYPO3
> multidomain)

TYPO3 multidomain setup, just using different subdomains, no different 
main domains.

>  - any redirects (with web server config or TYPO3)

Default TYPO3 & realURL redirects in .htaccess:

RewriteEngine On
RewriteRule ^typo3$ - [L]
RewriteRule ^typo3/.*$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-l
RewriteRule .* index.php


>  - cookie details as shown in the browser

https://subdomain.my-domain.com/typo3/backend.php:
1:
Name	be_typo_user
Value	70e4f5d117c9a2093d530f6ac7f52817
Host	.my-domain.com
Path	/
Secure	No
Expires	At End Of Session

2:
Name	fe_typo_user
Value	64ca2df1c2bb667d124cc58f93d92f33
Host	.my-domain.com
Path	/
Secure	No
Expires	At End Of Session

3:
Name	PHPSESSID
Value	76950ffb4140632a2f2db83e038aa65f
Host	subdomain1.my-domain.com
Path	/
Secure	No
Expires	At End Of Session



https://subdomain.my-domain.com/typo3/alt_intro.php?:
1:
Name	be_typo_user
Value	70e4f5d117c9a2093d530f6ac7f52817
Host	.my-domain.com
Path	/
Secure	No
Expires	At End Of Session

2:
Name	fe_typo_user
Value	64ca2df1c2bb667d124cc58f93d92f33
Host	.my-domain.com
Path	/
Secure	No
Expires	At End Of Session

3:
Name	PHPSESSID
Value	76950ffb4140632a2f2db83e038aa65f
Host	subdomain1.my-domain.com
Path	/
Secure	No
Expires	At End Of Session

>  - different behaviour in browser X and browser Y
In (the mostly not used, so never been on that page) IE 6 it works 
without problems.

>  - is a proxy involved
no.

>  - TYPO3 configuration ($TYPO3_CONF_VARS['SYS']['cookieDomain'] etc..)
[cookieDomain]=.my-domain.com

>  - is the problem reproducible
Partly. If I log out of the backend and then clear the session cookies 
the first attempt to relogin fails (Your login attempt did not succeed. 
Make sure to spell your username and password correctly, including 
upper/lowercase characters.), the second works again.

What's not reproducible: Sometimes after entering user and password I am 
logged in and the left(menu) frame loads just fine, then the right frame 
comes up and shows "no user logged in, sorry I can't proceed then" -> 
this goes away after clicking relogin (and entering the information again!).

>  - does deleting cookies help
No, or at least not that I noticed. The second half of the problem seems 
to happen totally random.


HTH,

Susanne