The mailing list for listmasters using Sympa

[Daniel Bidwell <address@concealed>]

On Fri, 2014-06-27 at 09:35 +0200, David Verdin wrote:
> Hi,
> 
> It depends on the version of Sympa you're using.

I am using the Ubuntu 14.04 release sympa  6.1.17~dfsg-1.  Is this a
reasonably recent stable version?

I now have it configured to forward the web requests from pound to the
sympa nginx via https.

both the server and client machine are within a fraction of a second of
each other (checking against the same ntp server).

> It looks like the old Sympa behaviour regarding non SSL web access,
> where session was renewed on each request (causing occasionnaly
> sessions to break when an eaction implied more than one HTTP request).
> Maybe, with your particular setting, Sympa considers itself in non SSL
> context (which may be the case, if transactions between your proxy and
> the sympa server are non SSL). If, for some reason, there are more
> than one exchange between the two server for one HTTP query, then you
> will lose your sessions. The solution would be to upgrade to the
> latest stable 6.1 version.
> 
> Showing us the Sympa logs when you access the web interface woulde
> certainly put some light on your problem.

I have log_level in sympa.conf set to 4.  Is this the best level for
this kind of debugging?  This generates lots of continuous log entries.
What is the best log_level or way to bracket a single web transaction?
> 
> Cheers,
> 
> David
> 
> Le 27/06/14 06:00, Daniel Bidwell a écrit :
> 
> > Here is what I have.  Sympa running under nginx with the following
> > lines in sympa.conf
> > 
> > http_host https://sympa.andrews.edu
> > domain    sympa.andrews.edu
> > wwsympa_url https://sympa.andrews.edu/wws
> > 
> > and in wwsympa.conf:
> > 
> > cookie_domain sympa.andrews.edu
> > 
> > I can log in and it shows that I am a listmaster, but when I click
> > on Sympa_admin it takes me back to the login screen endlessly.
> > 
> > On Fri, 2014-06-27 at 03:34 +0000, Steve Shipway wrote: 
> > > > I have attempted to put sympa behind this service and I can log in
> > > > successfully, but the session doesn't seem to live for me to actually 
> > > > do
> > > > anything without asking me to log in again.  I have check the time on 
> > > > the
> > > > servers and they are all synchronized.  I don't see anything in the 
> > > > debug 
> > > > logs
> > > > that helps me.
> > > 
> > > We don't use a reverse proxy for sympa, but I suspect your issue is 
> > > going to 
> > > be cookie domains.
> > > 
> > > For the hostname that users use, to access the sympa server, set 
> > > cookie_domain 
> > > in the wwsympa.conf or robot.conf.  We have to do this because we have 
> > > many 
> > > robot domains all pointing to the same Sympa server, and need their 
> > > auth 
> > > cookies to be kept separate.
> > > 
> > > Eg, if your sympa server is mysympa.subdom.andrews.edu
> > > But your reverse proxy hides it as www.andrews.edu/sympa
> > > Then set the options
> > > cookie_domain www.andrews.edu
> > > http_host  www.andrews.edu
> > > host www.andrews.edu
> > > wwsympa_url http://www.andrews.edu/sympa
> > > 
> > > Steve
> > > 
> > > Steve Shipway
> > > address@concealed
> > > 
> > > 
> > 
> > -- 
> > Daniel R. Bidwell | address@concealed
> > Andrews University | Information Technology Services
> > If two always agree, one of them is unnecessary
> > Karma is getting what you deserve, mercy is not getting what you
> > deserve,
> > grace is getting what you do not deserve.
> > "In theory, theory and practice are the same.
> > In practice, however, they are not." 
> 
> -- 
> A bug in Sympa? Quick! To the bug tracker! 
> RENATER logo
>   
> David Verdin
> Études et projets applicatifs
>   
> 
> Tél : +33 2 23 23 69 71
> Fax : +33 2 23 23 71 21
>   
> www.renater.fr
> 
> RENATER
> 263 Avenue du Gal Leclerc
> 35042 Rennes Cedex
> 
> 
> 
> 

-- 
Daniel R. Bidwell | address@concealed
Andrews University | Information Technology Services
If two always agree, one of them is unnecessary
Karma is getting what you deserve, mercy is not getting what you
deserve,
grace is getting what you do not deserve.
"In theory, theory and practice are the same.
In practice, however, they are not."