[Tickets #14524] CalDAV does not work with $conf[session][max_time]

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14524
------------------------------------------------------------------------------
  Ticket             | 14524
  Created By         | vectro at vectro.org
  Summary            | CalDAV does not work with  $conf[session][max_time]
  Queue              | Horde Framework Packages
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


vectro at vectro.org (2016-11-27 19:30) wrote:

Using Thunderbird, CalDAV does not work with  $conf[session][max_time]  
set to a value other than zero. It generates log messages like this:
HORDE: User ... is not authorized (Remote host: ...) [pid ... on line  
1573 of "/usr/share/php/Horde/Registry.php"]

Further debugging reveals that the $session->begin used on line 2652  
of Registry.php is from the time when the calendar was added to  
Thunderbird. And setting $conf[session][max_time] to 0 resolves the  
error.

I'm not sure, but I think the fix should be to ignore session cookies  
for CalDAV requests.

This bug was observed in Horde 5.2.6, but the relevant code doesn't  
seem to have changed since.