forced to login multiple times to admin console

[jayhawk785]

anything else? I can't even get the 4.2.1 software or 5.0.4 software to install to test to see if the issue exists on a clean db. All I see are unexpected text and encoding issues--I've tried it on two different boxes and see the same issue.

I'd really like to resolve the issue in this thread though--is there anything I could be missing php/server side that would cause it? anything in the db/encoding? character sets need to be installed? latin-swedish/vs. utf-8 etc?

help please

[jayhawk785]

Lynne, yes--same result.

[jayhawk785]

screenshot of the cookies

[Lynne]

The stuff from RewriteEngine On looks to all be default vb .htaccess. Have you tried removing the stuff above there and seeing if you still have the same issue?

[jayhawk785]

DNS cache shouldn't be an issue (disabled the site on any other box it resided on) - I use google DNS and if I'm going through my SSH proxy it's going to resolve inside that network. I also was forcing it in my client hosts file at one point - and I use chrome incognito/clear cookies etc to retest.

cookie domain I believe I set back to default (nothing) and i force the domain to redirect to www.hostname.com

htacces

DirectoryIndex index.php
AddOutputFilter DEFLATE css js

#<FilesMatch "\.(css|js|mp3|jpg|jpeg|png|gif|swf)$">
#ExpiresDefault A604800
#</FilesMatch>

<FilesMatch "\.(gif|jpe?g|png|css|js|ico|pdf|swf|flv)$">
Header set Cache-Control "max-age=604800, public"
</FilesMatch>

RewriteEngine On
RewriteBase /
Options +FollowSymlinks
RewriteCond %{HTTP_HOST} ^domain\.com
RewriteRule ^(.*)$ http://www.domain.com/$1 [R=301,L]
RewriteCond %{HTTP_HOST} ^(www\.)?domain\.com$ [NC]

#RewriteCond %{REMOTE_HOST} 10\.0\.1\.182 [NC]
#RewriteCond %{REQUEST_URI} !^/dns\.html$
#RewriteRule ^(.*)$ http://www.domain.com/dns.html [R=307,L]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d

RewriteRule ^.*$ - [NC,L]

# Forum
RewriteRule ^threads/.* showthread.php [QSA]
RewriteRule ^forums/.* forumdisplay.php [QSA]
RewriteRule ^members/.* member.php [QSA]
RewriteRule ^blogs/.* blog.php [QSA]
RewriteRule ^entries/.* entry.php [QSA]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d

RewriteRule ^.*$ - [NC,L]

# MVC
RewriteRule ^(?:(.*?)(?:/|$))(.*|$)$ $1.php?r=$2 [QSA]

# Check MVC result
RewriteCond %{REQUEST_FILENAME} -f
RewriteRule ^(.*)$ - [NC,L]
RewriteRule ^(.*)$ - [R=404,L]

[Lynne]

What is your cookie domain set to? And are you perhaps going back and forth between www.site.com and just site.com? Do you have an .htaccess file at all?

[Wayne Luke]

Have you flushed your DNS cache so you're not bouncing between boxes?

[jayhawk785]

I did disable hooks as well, same issue.

Let me add--

Same happens with modcp -- multiple login requests
Same happens with spam deletion (re-request authorization several times for verification) - eventually goes through

on the admincp, i login initially, then sometimes it might display one frame, but i have to relogin for the left frame or top frame--multiple times in each.

[jayhawk785]

I've spent a good week troubleshooting this and narrowing down the problem. I've recently moved servers (both my own- just different racks, servers). Initially the php version was different, i was routing through HAProxy, and a firewall (hardware) in front of the boxes. In order to narrow down the problem, I've downgraded apache to 2.2 (down from 2.4.6), downgraded php to 5.3 (stated with 5.5, then 5.4)- and I still see the issues.

Here's where I'm at:

5.3.3-7
Apache v2.2.22

mysqli + 5.5.29 - mariadb (galera cluster, through glbd)

my cookie settings have been reset in the browser (multiple times)
I'm proxied through SSH / socks to hit the machine 'locally' bypassing the hardware firewall

I've switched between memcached and files for php session handler (same results)
changed dns to point to only one machine, bypassing haproxy

are there any permissions on the filesystem that would affect this, or anything in the db I can reset (session table was truncated initially)

thanks!!