View Issue Details

This bug affects 1 person(s).
 8
IDProjectCategoryView StatusLast Update
13386Bug reports_ Unknownpublic2018-02-21 14:22
Reporterephemeralenergy Assigned Toc_schmitz  
PrioritynoneSeveritypartial_block 
Status closedResolutionunable to reproduce 
Product Version3.1.x 
Summary13386: Version 3.3.1/3.4.0 issue - get logged out all the time
Description

Having done a clean install of version 3.3.1 and 3.4.0 I experience the same issue of getting logged out whenever I try to interact with an existing survey or create a new one. After almost every click sometimes.

I haven't exhaustively tested all areas of LS, but I was able to browse through the settings alright without being booted out.

I've cleared cookies and cache in my web browsers used for testing (Chrome, Safari and Firefox) on MacOS and Windows 10. Back-end DB is MySQL, running PHP7. SSL encyption on the server.

I've done several installations of LSover the years, so I don't think I've missed something in the installation process. I first thought the issue was due to trying to upgrade from version 2.something, but, as I've noted above, I've had the same trouble with clean installations of the most recent versions of LS.

Steps To Reproduce

After a clean install on my webhost. Log in as the admin user. Add a new survey. Add the basic info (title, URL, etc). Click save. Go to "structure" and try to add a question group. Or click to preview. Or anything it seems. At that point, I get booted out all the time.

TagsNo tags attached.
Bug heat8
Complete LimeSurvey version number (& build)3.4.0+180219
I will donate to the project if issue is resolvedYes
BrowserFirefox, Chrome, Safari
Database type & versionMySQL 5.6.39
Server OS (if known)Linux (CentOS)
Webserver software & version (if known)Apache/2.2.3
PHP Version7

Users monitoring this issue

There are no users monitoring this issue.

Activities

ollehar

ollehar

2018-02-20 14:18

administrator   ~46614

Can you check session timeout settings in php ini?

ephemeralenergy

ephemeralenergy

2018-02-20 14:36

reporter   ~46615

session.gc_maxlifetime: 1440

Or is there another variable?

c_schmitz

c_schmitz

2018-02-20 16:26

administrator   ~46622

Last edited: 2018-02-20 16:28

This is most likely a server issue. A possible reason is that the session lifetime is modified by another application on the same webspace.
Check out https://manual.limesurvey.org/Troubleshooting

ephemeralenergy

ephemeralenergy

2018-02-21 09:35

reporter   ~46628

I'll have a look through the trouble shooting guide, thank you. However, it doesn't quite add up to me yet since version 2.whatever I had installed before worked fine on the same webhost.

ephemeralenergy

ephemeralenergy

2018-02-21 10:11

reporter   ~46629

I had a look at the trouble shooting guide. Nothing that I see related to this I'm afraid.

I don't think the issue has anything to do with other applications on the server affecting the session lifetime. I can stay logged and navigate everything in LS fine, until I touch a survey. Immediately logged out.

So, I browse settings. I set up a user. I look at the updater (currently up-to-date). I look at themes. Whatever ..., for several minutes. I can view the list of surveys and still stay logged in. As soon as I've selected a survey and attempt to do anything more with it (like adding a question group), I get thrown out instantly.

Is there a way to enable and retrieve log files that may help identify what's going on? For uncaught PHP errors, my webserver adds an error log file in the directory of the file outputting the error, but I didn't notice such files (though I am not familiar with the codebase, so I may have omitted some directories).

c_schmitz

c_schmitz

2018-02-21 10:40

administrator   ~46631

You are using standard PHP sessions, right?
Or do you have database sessions configured in config.php?

ephemeralenergy

ephemeralenergy

2018-02-21 11:15

reporter   ~46636

As far as I know, standard PHP sessions. I haven't modified the config.php file - using things out of the box. The sessions stuff in that file is still commented out:

            // Uncomment the following line if you need table-based sessions
            // 'session' => array (
                    // 'class' => 'application.core.web.DbHttpSession',
                    // 'connectionID' => 'db',
                    // 'sessionTableName' => '{{sessions}}',
            // ),
jelo

jelo

2018-02-21 11:50

partner   ~46642

@c_schmitz: How should a different application in the same webspace change the sessiontime of php?
If phpinfo inside LimeSurvey shows 1440 it is 1440. htaccess and other ways to change php-settings would be displayed via phpinfo.
The only external impact I can thing of is that the session path of php is tmp and tmp is cleaned/modifed by other applications.
That way session files crucial for LS can be deleted.

@ephemeralenergy
Who installed CentOS? Is e.g. SELinux configured or deactivated?

ephemeralenergy

ephemeralenergy

2018-02-21 12:09

reporter   ~46644

My website is hosted by fasthostst.co.uk - and I've had to dig a bit to try and find out about SELinux. (disclaimer: I'm rusty when it comes to Linux).

It looks like it's not even installed.

'sestatus' and 'getenforce' are not recognized as commands.

Using Putty to connect, so that shell may be limited. However, I find nothing in '/etc/sysconfig/selinux'.

c_schmitz

c_schmitz

2018-02-21 12:28

administrator   ~46646

@jelo In PHP the sessions are represented as files with a certain creation date/time in one directory. The same webspace usually uses the same directory to store all the session files, no matter what application.
If a different application on the same webspace shortens the session time it is very probable (not on every call but with a certain probability) that the session files older than that set session time are being discarded.
That's why it does not make sense to set session time in a PHP application (for the default PHP file-based sessions) because it will mess with other applications.

c_schmitz

c_schmitz

2018-02-21 12:28

administrator   ~46647

ephemeralenergy: Does it happen with every survey? Even with a very short 1-question survey?

ephemeralenergy

ephemeralenergy

2018-02-21 12:52

reporter   ~46655

I can't even create a simple survey :-/ Well, I can fill in the basics, name, etc., but when I try to add a question group, or anything else, I generally get booted out immediately.

Perhaps the best way to proceed is that I change the admin user and password and you can log in and experience it for yourself?

username: lsadmin
password: lsadminpassword

You'll see a survey there. Try to click it and, for example, go to "structure" to add a question group and try to preview. So far, I haven't managed to do even that.

ephemeralenergy

ephemeralenergy

2018-02-21 12:53

reporter   ~46656

Would help if I gave a URL too :)

https://www.ephemeralenergy.com/survey/index.php/admin/authentication/sa/login

jelo

jelo

2018-02-21 13:14

partner   ~46658

Thanks for the testaccount.
LimeSurvey is reacting slow and logouts occuring from time to time.

To me this looks like a issue in the session storage concept.
PHP.ini is set to:
session.save_handler memcached memcached
session.save_path 10.10.111.52:11211,10.10.111.53:11211

Sessions are saved in the RAM, not file or database.
You should ask your provider to check the session handling.
I cannot sense a bug in LS at the moment.

ephemeralenergy

ephemeralenergy

2018-02-21 13:30

reporter   ~46660

Ok, I'll take it to fasthosts. Thank you :)

jelo

jelo

2018-02-21 13:34

partner   ~46661

The implications of using cluster webhosting by fasthosts.co.uk are unclear.
Perhaps they have some issues with their platform. Perhaps there are some requirements, which applications have to fullfill.
How long do you use this account?

ephemeralenergy

ephemeralenergy

2018-02-21 13:38

reporter   ~46662

I've been with them for 2-3 years. And I've used limesurvey, wordpress and phpbb forum with them. Performance has never been their strong suit, especially when DBs have been involved, but I haven't experienced anything like this before.

c_schmitz

c_schmitz

2018-02-21 13:58

administrator   ~46666

See https://howto.biapy.com/en/debian-gnu-linux/servers/php/store-php-sessions-in-memcached
With memcached the session size is limited to 1MB.
That is useless for LimeSurvey as sessions are usually bigger than that.

This issue will be closed soon as it is obviously not a LimeSurvey bug.

c_schmitz

c_schmitz

2018-02-21 13:59

administrator   ~46668

To resolve this locally you could switch LimeSurvey to use database-base sessions.

ephemeralenergy

ephemeralenergy

2018-02-21 14:20

reporter   ~46674

Thank you, that did the trick - not getting booted out anymore :)

Just noticed another issue I need to investigate next. Some fields don't display (they flash for a moment and they're gone), like for question and help text (whilst the code field displays fine). Getting there.. :)

Issue History

Date Modified Username Field Change
2018-02-20 11:31 ephemeralenergy New Issue
2018-02-20 14:18 ollehar Note Added: 46614
2018-02-20 14:19 ollehar Status new => feedback
2018-02-20 14:36 ephemeralenergy Note Added: 46615
2018-02-20 14:36 ephemeralenergy Status feedback => new
2018-02-20 16:26 c_schmitz Note Added: 46622
2018-02-20 16:28 c_schmitz Note Edited: 46622
2018-02-21 09:35 ephemeralenergy Note Added: 46628
2018-02-21 10:11 ephemeralenergy Note Added: 46629
2018-02-21 10:40 c_schmitz Note Added: 46631
2018-02-21 11:15 ephemeralenergy Note Added: 46636
2018-02-21 11:50 jelo Note Added: 46642
2018-02-21 12:09 ephemeralenergy Note Added: 46644
2018-02-21 12:28 c_schmitz Note Added: 46646
2018-02-21 12:28 c_schmitz Note Added: 46647
2018-02-21 12:52 ephemeralenergy Note Added: 46655
2018-02-21 12:53 ephemeralenergy Note Added: 46656
2018-02-21 13:14 jelo Note Added: 46658
2018-02-21 13:30 ephemeralenergy Note Added: 46660
2018-02-21 13:34 jelo Note Added: 46661
2018-02-21 13:38 ephemeralenergy Note Added: 46662
2018-02-21 13:58 c_schmitz Assigned To => c_schmitz
2018-02-21 13:58 c_schmitz Status new => resolved
2018-02-21 13:58 c_schmitz Resolution open => unable to reproduce
2018-02-21 13:58 c_schmitz Note Added: 46666
2018-02-21 13:59 c_schmitz Note Added: 46668
2018-02-21 14:20 ephemeralenergy Note Added: 46674
2018-02-21 14:22 c_schmitz Status resolved => closed