Permanent panel logout on https connection on Uberspace


#21

And I still get the following error when I try to add a new user:

mod_fcgid: stderr: PHP Fatal error:  Call to a member function direction() on null in /var/www/virtual/[user]/html/domain.de/panel/app/src/panel.php on line 353, referer: https://www.domain.de/panel/users/add

This is a fresh install of the plain kit for testing, but I probably open a new topic for this.


#22

So I heard back from the uberspace guys: can’t be an issue with their platform and seems to be caused by the Kirby .htaccess and the panel. Everything’s works fine on http but the rewrite rules for the panels don’t work on https and I always get back to the login form sometimes immediately sometimes after a few clicks.

I installed wordpress for testing: everything works fine.

What should I do now? → Raised an issue on github: https://github.com/getkirby/panel/issues/713

On http I’m also able to create users now.


#23

Bug in mod_rpaf → https://twitter.com/ubernauten/status/682196018071494656 uberspace will roll out a fix to their systems.


#24

Hope that will fix the issue, currently I cannot even finish the panel install routine; it worked yesterday on https, today it fails completely.


#25

It does, they already fixed it on there server I’m working on. :slight_smile:


#26

Has anybody got a solution for this?

I have a site with Kirby 2.5.9 running on Uberspace where I absolutely need the panel to work.

Sometimes, the login into the panel works and I can do some edits. Sometimes, I can do some edits and get thrown out when I try to save. Sometimes, I can´t login at all.

Already contacted (the always great) Uberspace support, but they couldn´t offer a solution. In their reply, they told me, that mod_rpaf was only one of three issues. There were also problems with mod_nprf and their reverse-proxy that they couldn´t fix.

Any help really appreciated!


#27

Is that a problem you have because you updated to 2.5.9 or do you have the same issue with older Kirby versions?


#28

Hi texnixe,

already checked that: It´s the same with 2.5.8.


#29

My first guess would be that Kirby’s session fingerprinting is responsible for this.

Could you please put the following code into your site/config/config.php:

s::$fingerprint = function() {
  return '';
};

We will remove session fingerprinting in Kirby 3 as it doesn’t actually improve security by much but causes a lot of those “being kicked out of the Panel” issues.


#30

Hi Lukas,

thank you very much! Will try this later today and report back asap.


#31

Hi Lukas,

updated my config.php with your code, logged into the panel, did some edits, no logout so far. Looks very promising!


#32

I can finally confirm, that the solution Lukas suggested works: Used the Panel every day for the last week, no single logout.

Many thanks again!

Thomas


#33

Thanks for confirming! As I said this behavior will be the default in Kirby 3.