539141 - Randomly unlogged from tiki-trunk.mozilla.com

Status: RESOLVED WONTFIX

(support.mozilla.org :: Knowledge Base Software, task)

Description

[Marc Laporte]

To reproduce, log in and do "normal things".
Edit some pages
Translate some pages
Approve a staging page
Etc.

In my case, within a few minutes, I get unlogged. I have not found a fail-proof way to reproduce. Seems random.

Comment 1

[James Socol [:jsocol, :james]]

Marc, when you find yourself logged out, can you double-check that you're still on HTTPS? We've had issues with that in the past.

Comment 2

[Marc Laporte]

HTTPS is off at the moment. So everything in HTTP.

Comment 3

[Marc Laporte]

However, 
http://tiki-trunk.mozilla.com/tiki-admin.php?page=general

Admin -> General -> Navigation -> Use TikiWiki feature as homepage 
Attempting to change Forum to Wiki has kicked me out at least 5 times in a row.

Comment 4

[Laura Thomson :laura]

I can reproduce with that case.

Comment 5

[Laura Thomson :laura]

Actually, I could, but now I can't.

Comment 6

[James Socol [:jsocol, :james]]

Were there any other ways to trigger this? I upped the session lifetime (was 40 minutes, now 120) and follow the steps in comment 3, I can't make this happen. Actually, I can't make it happen at all so far.

Comment 7

[Louis-Philippe Huberdeau]

I still had the problem although not as close. I moved the value to an excessive 3600 minutes and I no longer had the issue. Could this be related to timezones?

Comment 8

[Louis-Philippe Huberdeau]

Just to tell me wrong, it happened again just as I posted the last comment.

Comment 9

[James Socol [:jsocol, :james]]

I'm trying to reproduce this locally, but the database upgrade script never finished yesterday, so I'm recreating it and trying again.

Since no headers are changing--the session cookie remains set and doesn't change even after logging back in--which it probably should--my guess is that session data in the database is expiring too early.

Comment 10

[Louis-Philippe Huberdeau]

I just commited a fix to the PDO session handling in tiki. For one, it would not respect the session_lifetime directive. There were also several other issues. Hopefully this will help on next update. (r24568 in trunk)

Comment 11

[Paul Craciunoiu [:paulc]]

Quick note: Locally, I stay logged in for more than a few hours; on tiki-trunk I've been logged out within an hour of inactivity. Might be worth testing again tomorrow, after comment 10 is surely up and went through. If not, maybe ask IT to clear cache.

Comment 12

[Marc Laporte]

For the record, I just tested and got kicked out...