picklefactory (picklefactory) wrote in lj_everywhere,
picklefactory
picklefactory
lj_everywhere

  • Mood:

Cookie expiration date issues: users can't log in

Hi all,

I think my lj setup from svn has been fairly successful -- but I'm having one issue: users can't log in.

A login with a failed password results in the normal access denied error.  A login with a good password just brings a user back to the front page without actually logging him/her in.

I dug a little deeper into this, and it looks like the cookies being set have an expiration date well into the past -- here's an example cookie from a successful response to a login, which I pulled out with TamperData:

Set-Cookie=ljmastersession=v1:u1:s20:azS6DG11GVZ//; domain=lj1.foo.com:20080; path=/; HttpOnly
ljloggedin=u1:s20; domain=lj1.foo.com:20080; path=/; HttpOnly
BMLschemepref=; expires=Thursday, 01-Jan-1970 00:00:05 GMT; domain=lj1.foo.com:20080; path=/
langpref=; expires=Thursday, 01-Jan-1970 00:00:05 GMT; domain=lj1.foo.com:20080; path=/

01-Jan-1970?  Sounds quite epochal!  In any case, a given browser obviously won't store such a cookie, so it doesn't get passed back on the next GET request.

Any thoughts on what might be causing this?  I've got the latest weblib.pl -- I believe the function called is LJ::make_cookie, though I'm not enough of a coder to tell where it's being called from, or what's setting the expiration date.

checkconfig.pl throws the usual errors, but none of these seem to be involved in setting cookie times:

Missing optional module Class::Data::Inheritable: Required for TheSchwartz job submission
Missing optional module Crypt::DH: Required for OpenID support.
Missing optional module GnuPG::Interface: Required for email posting
Missing optional module IP::Country::Fast: Required for country lookup with IP address.
Missing optional module Image::Magick: Required for the userpic factory.
Missing optional module Mail::GnuPG: Required for email posting
Missing optional module Math::BigInt::GMP: Aides Crypt::DH so it isn't crazy slow.
Missing optional module Text::vCard: Used to generate user vCards.
Missing optional module URI::Fetch: Required for OpenID support.
Missing optional module XML::Atom: Required for AtomAPI support.
[Checking LJ Environment...]
Unable to add Blockwatch hooks to Cache::Memcached client object: Can't locate object method "add_hook" via package "Cache::Memcached" at /opt/lj/cgi-bin/LJ/Blockwatch.pm line 344.
Warning: BetaFeatures module cannot be used unless 'betafeatures' cap is configured.
Problem:
  * Config errors: Unknown config option: $ALLOW_CLUSTER_SELECT,
        Unknown config option: $BIRTHDAY_NOTIFS_ADVANCE,
        Unknown config option: $DIR_DB,
        Unknown config option: $DIR_DB_HOST,
        Unknown config option: $MAX_32BIT_SIGNED,
        Unknown config option: $MAX_32BIT_UNSIGNED,
        Unknown config option: $MAX_HINTS_LASTN,
        Unknown config option: $RANDOM_USER_PERIOD,
        Unknown config option: $SMS_DOMAIN,
        Unknown config option: $SMS_TITLE,
        Unknown config option: $SYN_LASTN_S1,
        Unknown config option: $TEMP,
        Unknown config option: $VAR,
        Unknown config option: $_LJLIB_INIT,
        Unknown config option: %AJAX_URI_MAP,
        Unknown config option: @EVENT_TYPES,
        Unknown config option: @NOTIFY_TYPES

Any help would be much appreciated.
Subscribe
  • Post a new comment

    Error

    Comments allowed for members only

    Anonymous comments are disabled in this journal

    default userpic

    Your IP address will be recorded 

  • 2 comments