Hi Christian, happy new year! :) Maybe you have strange settings for
session.gc_probability (default 1) session.gc_divisor (default 100) You can check the values by putting a file called phpinfo.php in your webroot with the following content <?php phpinfo(); ?> Then point your browser to http://localhost/phpinfo.php Best regards Roland On 05.01.2015 13:48, Christian Renardy wrote: > Hi Roland, > Happy New Year! > Sadly, there is no error or info in the syslog while entering the master > password for the configuration. > I sat the log level to debug and got 10 times: "....apache2:... DEBUG: > Calling URL detected as http://xxxx/lam/templates/config/mainmanage.php" > while trying to enter the password. > > Other ideas? > > Best regards > Christian > > 2014-12-29 9:58 GMT+01:00 Roland Gruber <[email protected]>: > >> Hi Christian, >> >> please check LAM's log file for any messages (LAM main configuration). >> Maybe a security check fails (e.g. because source IP changed). >> >> >> Best regards >> >> Roland >> >> >> On 19.12.2014 13:45, Christian Renardy wrote: >>> Hi Roland, >>> >>> does the session file from the log exist? >>>> >>> It gets deleted quite often. >>> Session settings in my php.ini is set to files. >>> Usually looks like: >>> >>> >> cfgMain|O:10:"LAMCfgMain":23:{s:7:"default";s:3:"lam";s:20:"LAMCfgMainpassword";s:43:"{SSHA}D6AaX93kPmck9wAxNlq3GF93S7A= >>> >> R7gkjQ==";s:14:"sessionTimeout";i:30;s:8:"logLevel";s:1:"4";s:14:"logDestination";s:6:"SYSLOG";s:12:"allowedHosts";s:0:"";s:23:"allowedHostsSelfService";s:0:"";s:14:"encryptSession";s:4:"true";s:17:"passwordMinLength";i:0;s:16:"passwordMinUpper";i:0;s:16:"passwordMinLower";i:0;s:18:"passwordMinNumeric";i:0;s:17:"passwordMinSymbol";i:0;s:18:"passwordMinClasses";i:0;s:17:"checkedRulesCount";i:-1;s:26:"passwordMustNotContainUser";s:5:"false";s:28:"passwordMustNotContain3Chars";s:5:"false";s:20:"LAMCfgMainconffile";s:49:"/usr/share/ldap-account-manager/config/config.cfg";s:29:"LAMCfgMainuploadedSSLCaCert";N;s:24:"LAMCfgMaindelSSLCaCert";b:0;s:7:"mailEOL";s:7:"default";s:14:"errorReporting";s:7:"default";s:20:"LAMCfgMainsettings";a:19:{i:0;s:8:"password";i:1;s:7:"default";i:2;s:14:"sessionTimeout";i:3;s:8:"logLevel";i:4;s:14:"logDestination";i:5;s:12:"allowedHosts";i:6;s:17:"passwordMinLength";i:7;s:16:"passwordMinUpper";i:8;s:16:"passwordMinLower";i:9;s:18:"passwordMinNumeric";i:10;s:1 8 >> >> :"passwordMinClasses";i:11;s:17:"passwordMinSymbol";i:12;s:17:"checkedRulesCount";i:13;s:26:"passwordMustNotContainUser";i:14;s:28:"passwordMustNotContain3Chars";i:15;s:7:"mailEOL";i:16;s:14:"errorReporting";i:17;s:14:"encryptSession";i:18;s:23:"allowedHostsSelfService";}}config|O:9:"LAMConfig":32:{s:20:"LAMConfigServerURL";s:22:"ldap://localhost:10389";s:17:"LAMConfiguseTLS";N;s:26:"LAMConfigfollowReferrals";s:5:"false";s:23:"LAMConfigpagedResults";s:5:"false";s:17:"LAMConfigAdmins";s:19:"uid=admin,ou=system";s:17:"LAMConfigPasswd";s:43:"{SSHA}RjBruJcTxZEdcBjPQdRBkDaSQeY= >>> >> iueleA==";s:21:"LAMConfigtreesuffix";s:13:"dc=avmz,dc=de";s:26:"LAMConfigdefaultLanguage";s:40:"en_GB.utf8:UTF-8:English >>> (Great >>> >> Britain)";s:25:"LAMConfigmoduleSettings";a:8:{s:19:"posixAccount_minUID";a:1:{i:0;s:5:"10000";}s:19:"posixAccount_maxUID";a:1:{i:0;s:5:"30000";}s:23:"posixAccount_minMachine";a:1:{i:0;s:5:"50000";}s:23:"posixAccount_maxMachine";a:1:{i:0;s:5:"60000";}s:17:"posixGroup_minGID";a:1:{i:0;s:5:"10000";}s:17:"posixGroup_maxGID";a:1:{i:0;s:5:"20000";}s:18:"posixGroup_pwdHash";a:1:{i:0;s:4:"SSHA";}s:20:"posixAccount_pwdHash";a:1:{i:0;s:4:"SSHA";}}s:23:"LAMConfigtypeSettings";a:12:{s:11:"suffix_user";s:29:"ou=People,dc=my-domain,dc=com";s:9:"attr_user";s:41:"#uid;#givenName;#sn;#uidNumber;#gidNumber";s:12:"modules_user";s:56:"inetOrgPerson,posixAccount,shadowAccount,sambaSamAccount";s:12:"suffix_group";s:28:"ou=group,dc=my-domain,dc=com";s:10:"attr_group";s:38:"#cn;#gidNumber;#memberUID;#description";s:13:"modules_group";s:28:"posixGroup,sambaGroupMapping";s:11:"suffix_host";s:31:"ou=machines,dc=my-domain,dc=com";s:9:"attr_host";s:38:"#cn;#description;#uidNumber;#gidNumber";s:12:"modules_host " >> >> ;s:36:"account,posixAccount,sambaSamAccount";s:16:"suffix_smbDomain";s:19:"dc=my-domain,dc=com";s:14:"attr_smbDomain";s:47:"sambaDomainName:Domain >>> name;sambaSID:Domain >>> >> SID";s:17:"modules_smbDomain";s:11:"sambaDomain";}s:23:"LAMConfigtoolSettings";a:0:{}s:21:"LAMConfigscriptPath";s:0:"";s:23:"LAMConfigscriptRights";s:3:"750";s:23:"LAMConfigscriptServer";s:0:"";s:23:"LAMConfigcachetimeout";s:1:"5";s:22:"LAMConfigsearchLimit";s:1:"0";s:22:"LAMConfigactiveTypes";s:25:"user,group,host,smbDomain";s:15:"LAMConfigfile";s:3:"lam";s:22:"LAMConfigaccessLevel";i:100;s:22:"LAMConfigloginMethod";s:4:"list";s:28:"LAMConfigloginSearchSuffix";s:20:"dc=yourdomain,dc=org";s:28:"LAMConfigloginSearchFilter";s:10:"uid=%USER%";s:24:"LAMConfigloginSearchDN";s:0:"";s:30:"LAMConfigloginSearchPassword";s:0:"";s:29:"LAMConfighttpAuthentication";s:5:"false";s:25:"LAMConfiglamProMailFrom";s:0:"";s:28:"LAMConfiglamProMailReplyTo";s:0:"";s:28:"LAMConfiglamProMailSubject";s:23:"Your >>> password was >>> >> reset";s:27:"LAMConfiglamProMailIsHTML";s:5:"false";s:42:"LAMConfiglamProMailAllowAlternateAddress";s:4:"true";s:25:"LAMConfiglamProMailText";s:129:"Dear >>> @@givenName@@ @@sn@@,+::++::+your password was reset to: >>> @@newPassword@@+::++::++::+Best >>> regards+::++::+deskside >>> >> support+::+";s:19:"LAMConfigsettings";a:30:{i:0;s:9:"ServerURL";i:1;s:6:"useTLS";i:2;s:15:"followReferrals";i:3;s:12:"pagedResults";i:4;s:6:"Passwd";i:5;s:6:"Admins";i:6;s:10:"treesuffix";i:7;s:15:"defaultLanguage";i:8;s:10:"scriptPath";i:9;s:12:"scriptServer";i:10;s:12:"scriptRights";i:11;s:12:"cachetimeout";i:12;s:7:"modules";i:13;s:11:"activeTypes";i:14;s:5:"types";i:15;s:5:"tools";i:16;s:11:"accessLevel";i:17;s:11:"loginMethod";i:18;s:17:"loginSearchSuffix";i:19;s:17:"loginSearchFilter";i:20;s:11:"searchLimit";i:21;s:14:"lamProMailFrom";i:22;s:17:"lamProMailReplyTo";i:23;s:17:"lamProMailSubject";i:24;s:14:"lamProMailText";i:25;s:16:"lamProMailIsHTML";i:26;s:31:"lamProMailAllowAlternateAddress";i:27;s:18:"httpAuthentication";i:28;s:13:"loginSearchDN";i:29;s:19:"loginSearchPassword";}}language|s:10:"de_DE.utf8";header|s:286:"<!DOCTYPE >>> HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" " >>> http://www.w3.org/TR/html4/loose.dtd"> >>> >>> >>> ls -l >>>> >> /usr/share/ldap-account-manager/templates/config/../../sess/sess_te8anxxxxxxxxxx >>> >>> I tried to understand the flow. From what I observed: >>> >>> 1. I go to /lam/ -> sess123 is created >>> 2. I set the lang to german (is saved in sess123-File) >>> 3. I click on LAM Einstellungen(LAM Settings) and Allgemeine >>> Einstellungen(General Settings) (sess123 file still in place) and get >> the >>> password prompt in German - sess123 is now sess234. >>> 4. I use lam as a password and get the same password prompt in German >> - >>> sess file disappears. >>> 5. I use lam again and get the password prompt in English - sess file >>> still not there. >>> 6. I use lam again and get the general settings page and no sess >> file. I >>> change some settings and get to the password prompt. >>> 7. I repeat steps 4-5 get another sess file, nothing really changes. >>> >>> I changed some the port of my ldap server and the dn for my user in the >>> config file. >>> >>> Do you have any special PHP settings (anything changed in php.ini or >>>> additional modules)? >>>> You can also try to upgrade PHP to 5.4.34 which is in stable security >>>> update repository. >>>> >>> Got the latest stable (php 5.4.35) and got the same issue. >>> Just some increased memory settings, nothing special... >>> >>> >>>> Anything like SELinux or AppArmor active? >>>> >>> Nothing like that. >>> >>> Best regards, >>> Chris >>> >>> >>> >>> >> ------------------------------------------------------------------------------ >>> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server >>> from Actuate! Instantly Supercharge Your Business Reports and Dashboards >>> with Interactivity, Sharing, Native Excel Exports, App Integration & more >>> Get technology previously reserved for billion-dollar corporations, FREE >>> >> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk >>> >>> >>> >>> _______________________________________________ >>> Lam-public mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/lam-public >>> >> >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming! The Go Parallel Website, >> sponsored by Intel and developed in partnership with Slashdot Media, is >> your >> hub for all things parallel software development, from weekly thought >> leadership blogs to news, videos, case studies, tutorials and more. Take a >> look and join the conversation now. http://goparallel.sourceforge.net >> _______________________________________________ >> Lam-public mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/lam-public >> >> > > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming! The Go Parallel Website, > sponsored by Intel and developed in partnership with Slashdot Media, is your > hub for all things parallel software development, from weekly thought > leadership blogs to news, videos, case studies, tutorials and more. Take a > look and join the conversation now. http://goparallel.sourceforge.net > > > > _______________________________________________ > Lam-public mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/lam-public >
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Dive into the World of Parallel Programming! The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________ Lam-public mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/lam-public
