It appears that it was a configuration issue, looks like cookies were 
being created for the wrong subdir on the server. Sorting this has 
stopped the problem.



Apologies for drawing on your time, and thanks a lot for all the help.



Great software guys, keep up the good work.

Cheers

Paul

There is no reason that an existing Horde cookie should cause login to 
fail. For instance, if a site's session storage were to reset for some 
reason, I should be able to login even though I have an existing cookie.



Besides, we set a _new_ session cookie forcibly on login to prevent 
session fixation. So something odd is going on for you, either in the 
browser (is this consistent on all platforms for you? Have you tested 
multiple browser/os combinations?) or the PHP side.

The Lifetime for the cookie does not appear to be set, I will try with 
it set, however, upon logout, the system should set the expiry to the 
past for the cookie to be removed, regardless of the lifespan

Any chance you configured a lifetime for cookies in Horde's configuration?

Setup to use PHP Session management, IMP is handling Auth

Which session handler did you configure?

Cookie names:

Horde

imp_key

auth_key



Removing the Horde Cookie causes the site to function as expected.



Regards

Paul

Which cookies?

Logout process leaves cookies behind, which interfere with login 
process on next attempt. Does not affect ability to login with 
standard Imp interface, but will stop login from a custom page.



To reproduce, clear cookies, log into Imp, then log out.



Try to use a post from a separate form (eg on a website front end) the 
login will fail. Deleting cookies from the client machine fixes the 
issue.



Paul