[Phpgroupware-tracker] [Bug #847] multiple domains not isolated

[nobody]

=================== BUG #847: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=847&group_id=509

Changes by: Dave Hall <address@hidden>
Date: 2002-Nov-24 20:24 (Australia/Melbourne)

            What     | Removed                   | Added
---------------------------------------------------------------------------
            Severity | 5 - Major                 | 3
            Priority | None                      | Low
         Assigned to | None                      | skwashd


------------------ Additional Follow-up Comments ----------------------------
Hi Michael,

I understand where you are coming from with this, but i think that is not 
really a bug.  The multiple domain support is to allow multiple domains not 
directories to be used on the one server, using virtual hosts.  For example you 
could have http://totschnig.net/phpgroupware, http://michael.net/phpgroupware 
and http://dev-box.uqam.ca/phpgroupware

Each domain should then be properly isolated.  Have you tried to replicate this 
using db sessions with virtual hosts?

I will downgrade this one, and if you agree close it.

Cheers



=================== BUG #847: FULL BUG SNAPSHOT ===================


Submitted by: totschnig                 Project: phpGroupWare                   
Submitted on: 2002-Jul-13 03:37
Category:  API - phpGWapi               Bug Group:  0.9.14 release              
Severity:  3                            Priority:  Low                          
Resolution:  None                       Assigned to:  skwashd                   
Status:  Open                           Component Version:  None                
Platform Version:  Linux - RedHat       Reproducibility:  Every Time            

Summary:  multiple domains not isolated

Original Submission:  After configuring header.inc.php with multiple domain 
support,
I had to realize that the isolation between domains doesnot work. the first 
login to the second or third domains works, but after logging out and 
relogging, phpgroupware reads the database of the default domain!!! I think the 
problem could be related to the passing of sessionid with cookies. even if all 
domains have "Use cookies to pass sessionid" set to no, phpgroupware sends one 
cookie at the beginning of the session, three other at the end. Another problem 
might be that phpgroupware has a problem with distingishing the URLs of the 
different domains. in my case the domains share the same DNS, the default 
domain is http://myhost.com/phpgroupware, the other domains 
http://myhost.com/secondomain, etc.
I attach header.inc.php.

Follow-up Comments
*******************

-------------------------------------------------------
Date: 2002-Nov-24 20:24             By: skwashd
Hi Michael,

I understand where you are coming from with this, but i think that is not 
really a bug.  The multiple domain support is to allow multiple domains not 
directories to be used on the one server, using virtual hosts.  For example you 
could have http://totschnig.net/phpgroupware, http://michael.net/phpgroupware 
and http://dev-box.uqam.ca/phpgroupware

Each domain should then be properly isolated.  Have you tried to replicate this 
using db sessions with virtual hosts?

I will downgrade this one, and if you agree close it.

Cheers


CC list is empty


File Attachments
****************

-------------------------------------------------------
Date: 2002-Jul-13 03:37  Name: header.inc.php  Size: 5KB   By: totschnig

http://savannah.gnu.org/bugs/download.php?group_id=509&amp;bug_id=847&amp;bug_file_id=52


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=847&group_id=509