Developers of Sympa

[David Verdin <address@concealed>]

Hi Adam,

Yes, Sympa is developped on mod_fcgid. During a short period, we stopped supporting mod_fastcgi but it went back under development, so it looked like a good choice again.
On our production server we use mod_fcgid and nvere-ever had any problem with sessions. So it could be a good culprit for this problem.

So here's what we'll do:
1- We'll advertise to sympa-announce that a potential threat to session management can be suppressed if the admins switch from mod_fastcgi mod_fcgid - with detailed informations on how to switch.
2- We'll post a detailed report to the mod_fastcgi developpers about the problem encountered, the versions on which the problem was observed and anything we can find that could help them debug this. Because frankly it would be a shame that this nice mod would be banned from Sympa because of this problem.

Thanks for your feedback! It helped indeed. ;)

Regards,

David

Le 23/09/2010 23:06, Adam Bernstein a écrit :

address@concealed">Hey all.  We were still having weird problems with session management even after applying that recent fix, including cross-talk between different virtual robots and between SSL and non-SSL connections.

So, I just tried switching from mod_fastcgi to mod_fcgid, and although I haven't been able to do a lot of testing yet, I think that seems to have fixed it.  I'm crossing my fingers and hoping.

Is Sympa being developed now on mod_fcgid?  If so, I think the best solution here is probably for you to no longer advertise compatibility with mod_fastcgi, which seems to do some bad things with sessions, and require everyone to move to mod_fcgid.  It was a *very* easy transition for me.

I hope this helps.

    adam

--
David Verdin
Comité réseau des universités

Due to the limitations of human brain, I fail to remember all the mails.
So if you want your bug reports or feature requests for Sympa to be processed, please post them to the Sympa tracker