[Pkg-roundcube-maintainers] Bug#549428: roundcube-core: problem loging in with lighttpd and roundcube 0.3 - suhosin.session.encrypt Off

[Antoine Pardigon]

Package: roundcube
Version: 0.3-2
Severity: normal

Hi,

since upgrading to roundcube 0.3, I had to log in on every action.
(error no server, lots of 404 in the access logs).

It is due to lighttpd not taking into account the .htaccess file, where
one option is now a requirement :

suhosin.session.encrypt must be set to Off.

I solved this poorly setting this option off everywhere (in the php
settings), as I cannot find how to do it specifically for the roundcube
server; but this could be mentionned in the NEWS file.

Regards,

-- 
Antoine

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (800, 'unstable'), (750, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.29 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages roundcube-core depends on:
ii  apache2-mpm-prefork [htt 2.2.14-1        Apache HTTP Server - traditional n
ii  dbconfig-common          1.8.41          common framework for packaging dat
ii  debconf [debconf-2.0]    1.5.27          Debian configuration management sy
ii  libjs-jquery             1.3.3-2         JavaScript library for dynamic web
ii  libmagic1                5.03-1          File type determination library us
ii  lighttpd [httpd]         1.4.23-3+b1     A fast webserver with minimal memo
ii  php-auth                 1.6.1-1         PHP PEAR modules for creating an a
ii  php-mail-mime            1.5.2-0.1       PHP PEAR module for creating MIME 
ii  php-mdb2                 2.5.0b2-1       PHP PEAR module to provide a commo
ii  php-net-smtp             1.3.1-1         PHP PEAR module implementing SMTP 
ii  php-net-socket           1.0.9-2         PHP PEAR Network Socket Interface 
ii  php5                     5.2.11.dfsg.1-1 server-side, HTML-embedded scripti
ii  php5-gd                  5.2.11.dfsg.1-1 GD module for php5
ii  php5-mcrypt              5.2.11.dfsg.1-1 MCrypt module for php5
ii  php5-pspell              5.2.11.dfsg.1-1 pspell module for php5
ii  roundcube-sqlite         0.3-2           metapackage providing sqlite depen
ii  tinymce                  3.2.6-1         platform independent web based Jav
ii  ucf                      3.0022          Update Configuration File: preserv

roundcube-core recommends no packages.

roundcube-core suggests no packages.

roundcube depends on no packages.

-- debconf information:
* roundcube/dbconfig-install: true
  roundcube/db/dbname: roundcube
  roundcube/pgsql/authmethod-admin: ident
  roundcube/pgsql/admin-user: postgres
  roundcube/internal/skip-preseed: false
  roundcube/db/app-user:
  roundcube/dbconfig-reinstall: false
  roundcube/restart-webserver: true
  roundcube/dbconfig-upgrade: true
  roundcube/remote/port:
  roundcube/pgsql/no-empty-passwords:
  roundcube/passwords-do-not-match:
  roundcube/internal/reconfiguring: false
  roundcube/upgrade-error: abort
  roundcube/pgsql/authmethod-user: password
  roundcube/purge: false
  roundcube/language: fr_FR
  roundcube/remote/newhost:
  roundcube/pgsql/changeconf: false
  roundcube/upgrade-backup: true
  roundcube/install-error: abort
  roundcube/mysql/admin-user: root
  roundcube/hosts:
  roundcube/dbconfig-remove:
  roundcube/mysql/method: unix socket
  roundcube/remove-error: abort
  roundcube/pgsql/method: unix socket
  roundcube/pgsql/manualconf:
  roundcube/db/basepath: /var/lib/dbconfig-common/sqlite/roundcube
  roundcube/reconfigure-webserver: apache2, lighttpd
* roundcube/database-type: sqlite
  roundcube/remote/host:
  roundcube/missing-db-package-error: abort