[horde] session id contains illegal characters ... ?

[Oliver Kuhl]

> Is there anybody who can solve this problem???
> 
> 
> 2003-03-25 Marc G. Fournier wrote:
> > Just upgrading the demo site from CVS, and am seeing the following error
> > when trying to login ... /tmp is fine, with proper permissions ...
> > something else I should be looking at?
> >
> > Warning: Unknown(): The session id contains illegal characters, valid
> characters are \
> > only a-z, A-Z and 0-9 in Unknown on line 0
> >
> > Warning: Unknown(): Failed to write session data (files). Please verify
> that the \
> > current setting of session.save_path is correct (/tmp) in Unknown on line
> 0
> 
> 2003-04-03 Jens A. Tkotz wrote:
> > since a few days the login into horde is not working.
> > i get
> > Warning: Unknown(): The session id contains illegal characters, valid
> > characters are only a-z, A-Z and 0-9 in Unknown on line 0
I don't get this problem, but if I first visit my webmail.example.com, I get an 
automatically generated sessionid, i.e. this one in the URL:
   Horde-Dev=dfc40cdd0ccf8165cbb8db0a50ccae3a

Now I enter my username/password and get the loginpage back immediately - 
without any errormessage like "wrong password". The sessionid looks like that 
now:
   Horde-Dev=UG8xZ3puOEFBQUVBQUdyRUZjSQ%3D%3D
                                       ^^^^^^
I think the last %3D's are the problem. Its always the same since my last 
update from cvs somewhere in the last week of march.

> > Warning: Unknown(): Failed to write session data (files). Please verify
> > that the current setting of session.save_path is correct (/tmp) in
> > Unknown on line 0
I get this one only if I click on "guest ..." on the login page.

> I have the same problem. Before changing CVS version to newer
> everything wroked fine. The problem is that I dont have old release
> now and I can't download it from CVS horde's directory because
> it was removed. The oldest version is from 03-28 and it contains
> the same bug.

I don't have the problem with the current latest stable versions of horde and 
imp. So I think, that it's not a problem of my php-version, which is 4.2.3-12 
(debian linux).

I began debugging a bit and found out that
the call Auth->getAuth in this part of login.php returns false:

if (Auth::getAuth()) {
    if ($browser->isMobile()) {
        require HORDE_BASE . '/mobile.php';
    } else {
        require HORDE_BASE . '/portal.php';
    }
    exit;
}

Gruss,
   Ollie.