[horde] Upgrade H5 (pear) to H6 ( composer), login possible, but "guest not authorized for" applications

[Brent]

  Quoting Torben Dannhauer <torben at dannhauer.info>:

> Zitat von Brent <impuser at bitrealm.com>:
>
>> Quoting Torben Dannhauer <torben at dannhauer.info>:
>>
>>> Hi together,
>>>
>>> I'm currently upgrading form H5 to H6alpha based on composer.
>>>
>>> Old:  Debian Stretch & PHP 7.4
>>>
>>> New: Debian Bookworm & PHP 8.2
>>>
>>> I managed the installation, config and DB migration and can log into Horde.
>>>
>>> On the landing page after login  I can see my widgets of imp incl  
>>> the newest
>>> mails, kronolith incl the next appointments and nag with its tasks.  ->
>>> Horde/the apps are able to retrieve the correct data.
>>>
>>> However, Every time I try to switch to one of this specific apps like imp,
>>> kronolith or turba via the top row menu I get kicked out and Horde logs
>>> "Guest not authorized to imp|kronolith|turba". -> Why does horde treat my
>>> login suddenly as "guest" - it was even possible to load the correct widget
>>> data for my user..)
>>>
>>> I get the login mask presented again after being kickout, but I cannot
>>> re-login into it. If I close the tab and start with the proper URL I can
>>> login back into horde but again only into the landing page.
>>>
>>> Some additional symptoms/information, maybe the tell you something I do not
>>> see:
>>>
>>> *        Session handling is filed based
>>> *        sessions are written into /tmp.
>>> *        Every time I get kicked out horde starts another session  
>>> and adds a
>>> session file to /tmp.
>>> *        If I enter the admin area and go to "sessions" in the left column
>>> (vendor/horde/horde/admin/sessions.php) , It takes some loading time ( 5-10
>>> seconds) until it opens that page. This is not happenin in my old 7.4
>>> installation, ther it opens instantaneously
>>>
>>> Does anyone know this symptoms and has an Idea where to start?
>>>
>>> Many thanks & Kind regards,
>>>
>>> Torben
>>>
>>>  
>>
>> What are you using for the Horde login backend? What's your url?  
>> Cookie path?
>>
>> Horde-> Admin: 
>> What backend should we use for authenticating users to Horde? 
>>
>> Typically it's "Let a horde appplication handle authentication"
>> I use imp and it is set to just "user" and not "user at domain" for the login.
>>
>> I have my URL set as "some.domain.com" and point the webroot for  
>> that DNS name to the horde directory. If it isn't like that, you  
>> might need to mess with cookie path.
>>
>> That's in:  Horde->General-> $conf[cookie][path]  . Mine is blank,  
>> I'm not sure what to set it to if you're using a subdir for the  
>> installation (eg:  www.test.com/horde[1]).
>>
>> You could have a caching issue...try an igcognito session or  
>> another browser to see if the problem persists.
>>
>> brent
>> --
>> Horde mailing list
>> Frequently Asked Questions: http://horde.org/faq/
>> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>
> Hi Brent,
>
> as you mentioned it was the cookie path  - this was a VERY valuable  
> hint since I spent already a night on it but still missed it - many  
> thanks :))
>
> Btw: the authentication itself etc was working flawless, the  
> installation was able to show my latest emails, so login is  
> technically working. Thanks to your hint I fixed the cookie path and  
> now it works.
>
> However this is a good transition to another general question  
> regarding the folder structure between Horde5 via Pear and H6 compose:
>
> Old setup:
> * horde reachable as www.domain.tld/horde[2], whereas  
> www.domain.tld[3] was a regular website -> so the horde content was  
> placed in the horde subfolder.
> * horde was installed via pear.
>
> New setup:
> Hmm, I somehow installed horde via compose
>
> * https://wiki.horde.org/Doc/Dev/H6/Installation
> * https://wiki.horde.org/Doc/Dev/H6/Installation/RootProject
> * https://wiki.horde.org/Doc/Dev/H6/Installation/InstallBase
> *  
> https://wiki.horde.org/Doc/Dev/H6/Installation/UpgradeH5Release?referrer=Doc%2FDev%2FH6%2FInstallation
>
> II am very confused about the new folder structure. Since the PoC is  
> now running I'm willing to reinstall from scratch, but what do I  
> need to do that I have all the web related functions in the "horde"  
> subfolder and all he "background" stuff like the horde CLi scripts  
> etc out of the webroot - as it was in the pear base setup?
>
> This is the intented setup I would like to keep:
>
> https://www.domain.tld/horde - horde entry point for users
> https://www.domain.tld - joomla webpage entrypoint
> /var/www/torben/web/ssl-domain.tdl/ as webroot for the domain
> /var/www/torben/web/ssl-domain.tdl/horde[4] as folder for the horde  
> web files.
>
> What do I need to do to achieve this?
>
> Many Thanks,
> Torben
>  

I've not setup horde as a "www.tld.com/horde" before. Let me setup a  
test environment and see how one would do that. I typically just make  
a "webmail.tld.com" and set the ServerRoot to be "/var/www/horde/web".  
I don't install horde under the "www.tld.com". Let me see if I can  
figure out how one would do that. Should be do-able...I just don't  
have firsthand experience with it.

Because of the default way compoer works, the pathing won't be as you  
list above as the "webroot" directory is "/web" by default and not  
"/horde" like the way the older version worked.

brent



Links:
------
[1] http://www.test.com/horde
[2] http://www.domain.tld/horde
[3] http://www.domain.tld
[4] http://ssl-domain.tdl/horde