Can't login after update to 1.2.14

[ISekan]

Cacti 1.2.14/Centos7/MariaDB/Apache

Users can't login after update
But I can use their logins and all's ok
In logs cacti and apache nothing criminal
It doesn't depend from browsers and cookies

[ISekan]

I found the bug:
If first login with admin user - all works and you can log out and use others users logins without problem
If first login with no admin user - can't login

[TheWitness]

This might have to do with Firefox trying real hard to cache files that have changed, namely the JavaScript files, which have changed between releases. So, maybe just that upgrade issue. We've done a number of things to "trick" the various browsers from Caching expired JavaScript and CSS, but they keep making it more difficult.

[ISekan]

It doesn't matter of type browser. Also I tried to clear all cache and reinstall browsers. Working only one way - first login with admin or user with similar rights like admin

[TheWitness]

Are you using the LDAP integration? Just curious.

[ISekan]

@TheWitness, only Built-in Authentication

[ISekan]

I use different DNS name for cacti - http://cacti.***.com.by/cacti
The problem disappears if use original server name http://srv-***cacti-02/cacti

[TheWitness]

That sounds like an issue that's more up @cigamit or @netniV's alley. You should check your apache error log too.

[ISekan]

No errors in apache log

[TheWitness]

You might have to share your access log's, I'm betting there are some 304's or 302's in there, and where they are redirecting ain't working. Something in the Web Server configuration. Someone reported the same problem the other day, and their $url_path variable in config.php was wrong too.

[ISekan]

@TheWitness
in config.php no changes from previous version
$url_path = '/cacti/';
access log in attach
cacti_access_log.zip

thanks

[TheWitness]

So, being that this appears to be a Mac, I'm not going to be of much help. It may have something to do with SameSite cookies. Go into the config.php.dist, and pull out the setting from there and disable it. The config.php has changed quite a bit in recent versions, and the SameSite implementation in PHP7 was not very robust.

[ISekan]

and one more thing
http://cacti-02/ - login doesn't work
http://cacti-02/cacti/ - working

[TheWitness]

Oh, that's something completely different. Put the following in your document root

index.php

<?php

header("Location:cacti/index.php");

[TheWitness]

No restart required.

[TheWitness]

This is not really a bug then. Web server configuration. I'll close, you can still comment though.

[ISekan]

in config.php $url_path = '/cacti/'; to $url_path = '/'; solverd the problem
thanks to cacti forum - https://forums.cacti.net/viewtopic.php?f=2&t=61184

[ISekan]

Is it need to change $url_path in new versions cacti or will be solved?

[netniV]

You only need to do that if you keep replacing your config.php file. SameSite cookies are a bane now because whilst its improving security it also blocks doing daft things like mixing site urls which people have been doing for years. Then it suddenly looks like a software problem when really its just the browsers reaching the state of security they should have had originally anyway 👍