[horde] strange forced logout

l.kiraly at madalbal.hu l.kiraly at madalbal.hu
Fri Jul 12 12:10:54 UTC 2013


Idézet (Andreas Schulze <sca at andreasschulze.de>):

> Zitat von Jan Schneider <jan at horde.org>:
>
>>> I guess it was the checkip option, but I didn't see any message  
>>> about bad ip addresses in the debug log.
>>
>> I'm not sure you would see it in the logs, but I definitely get a  
>> logout message about a changed IP if this is what happens.
>
> Hello,
>
> the "checkip option" verify if an authenticated session changes to  
> an other source ip address.
> That mean usualy the session was hijacked.
>
> But there is a second case:
> imagine users using a proxy.
> imagine *really many* users using a proxy: the proxy will be a farm  
> of proxies.
> The user no longer talk to a dedicated proxy but to a loadbalancer.

In this chase it isn't the problem. There is only one proxy with one  
ip address.

I think the problem is that the proxy's ip has a lot of domain names  
in the dns,
and maybe the Net_DNS2_Resolver resolves sometimes to different domain name.

Could this be the problem?

Best regards,
László Király
-- 
Üdvözlettel: Király László
Madal Bal Kft (http://www.madalbal.hu)



More information about the horde mailing list