[dev] serious bug in horde sessions (?)

[Vilius Šumskas]

Hello,

just updated horde from cvs (2004-07-06). When I go to horde login page
first time, I get loop. Snip from httpd log:

81.7.83.71 - - [06/Jul/2004:14:33:34 +0300] "GET /horde/ HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:34 +0300] "GET /horde/login.php?Horde=23f57d0f511de59485505f5fe670a785 HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:34 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:34 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:35 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:35 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:35 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:36 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:36 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:33:36 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -

And apache is looping until I press enter twice. Then the loop seems
to stop and I can login. Same problem with logout link:

81.7.83.71 - - [06/Jul/2004:14:39:11 +0300] "GET /horde/login.php?logout_reason=logout HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:39:12 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:39:13 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:39:13 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:39:14 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:39:14 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -
81.7.83.71 - - [06/Jul/2004:14:39:14 +0300] "GET /horde/login.php?frameset= HTTP/1.1" 302 -

I tried clearing explorer's cache and cookies. This doesn't help. Any
clues?

-- 
  Vilius