6.0.0-alpha12
6/6/25

[#5925] Authentication assumes that exists a horde session
Summary Authentication assumes that exists a horde session
Queue Kronolith
Queue Version HEAD
Type Bug
State Resolved
Priority 2. Medium
Owners chuck (at) horde (dot) org
Requester almarin (at) um (dot) es
Created 11/26/2007 (6402 days ago)
Due 11/20/2007 (6408 days ago)
Updated 12/03/2007 (6395 days ago)
Assigned 11/29/2007 (6399 days ago)
Resolved 12/03/2007 (6395 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch No

History
12/03/2007 05:36:37 AM Chuck Hagenbuch Comment #4
Assigned to Chuck Hagenbuch
State ⇒ Resolved
Reply to this comment
I managed to run into this issue tonight in a different context, even. 
Should be fixed with this commit:



http://lists.horde.org/archives/cvs/Week-of-Mon-20071203/072846.html
11/29/2007 08:42:37 AM almarin (at) um (dot) es Comment #3 Reply to this comment
Notice: Undefined offset: 0 in 
/usr/share/php/Horde/Cipher/blowfish.php on line 337

Notice: Undefined offset: 1 in 
/usr/share/php/Horde/Cipher/blowfish.php on line 337

Notice: Undefined offset: 2 in 
/usr/share/php/Horde/Cipher/blowfish.php on line 337

...

Notice: Undefined offset: 71 in 
/usr/share/php/Horde/Cipher/blowfish.php on line 337



The trace of this case is:

ics.php: line 41, $auth->authenticate....

   Auth::authenticate(): line 172, $this->setAuth...

   Auth::setAuth(): line 691, $credentials = Secret::write(Secret::getKey...



       NOTE: here, Secret::getKey() return a empty value because in 
line 146 uses session_id(), and no session has been started



   Secret.php::write():line 52, $cipherCache[$cacheIdx]->setKey($key);

      NOTE: secret.php charge 'blowfish' as default Cipher.php, and 
because $key is empty, blowfish.php gives all the Notice messages.



Hope that information is useful for you



Alfonso




11/29/2007 04:28:10 AM Chuck Hagenbuch Comment #2
State ⇒ Feedback
Reply to this comment
Can you please include (the first few should be enough if there really 
are a lot) the actual error messages?
11/26/2007 12:21:08 PM almarin (at) um (dot) es Comment #1
Priority ⇒ 2. Medium
Type ⇒ Bug
Summary ⇒ Authentication assumes that exists a horde session
Due ⇒ 11/20/2007
Queue ⇒ Kronolith
State ⇒ Unconfirmed
Reply to this comment
In some cases, authentication proccess is done without a horde session 
started. That is the case of ics.php.



When you authenticate, throw Auth::setAuth(), there are a 
Secret::getKey('auth') call, and that call uses session_id(). If you 
don have started a horde session, session_id() return a empty value, 
and that causes a lot of Notice php messages in 
Horde/Cipher/blowfish.php (and i don't know if any malfunction)




Saved Queries