Possible Permission errors after running host OS update

[cobolicious]

Symptoms:
Unable to log out of user.
Unable to post/reply. Results in error Your session timed out while posting. Please try to re-submit your message.
Unable to access administration panel. Results in error (after asking for admin password confirmation) Session verification failed. Please try logging out and back in again, and then try again.

Onset of Symptoms:
SMF running without issue until after updating OS X server from 10.7.5 to 10.9.2

Attempted Resolutions:
Just to see... chmod 777 .../cache no change
attempted to run repair_settings.php from wmf result in following errorSettings.php cannot be written to by your webserver. Please modify the permissions on this file to allow write access.

Configuration:
A link to your forum. -NA internal site on our local network only
Is this a dedicated server or shared host. Dedicated Server
If it is a dedicated server, what spec is the server and what else runs on the server? OS X 10.9.2 Server v3. PostgresSQL running SMF (also running Apple's Profile Manager without issue) Reads as follows from:

serveradmin full status postgres: postgres:PG_VERSION = "9.2.4"
postgres:dataDir = "/Library/Server/PostgreSQL/Data"
postgres:postgresIsResponding = yes
postgres:dataDirIsDirectory = yes
postgres:PGserverVersion = 90204
postgres:dataDirExists = yes
postgres:setStateVersion = 1
postgres:state = "RUNNING"

If it is a shared host post a link to the hosts site the package you are on
The Number of posts your forum has. 428
The Average number of users you have online during peak time and over what time period that is over, e.g 400 users over 15 mins. 8 users max over 8hr period.
A list of mods which you have installed Completely stock setup
Do you still have performance issues if you use the default theme? Yes
A list of the suggestions you have already implemented from the README: Checklist for performance problems as well as Twenty-four things you can do to make SMF go faster topics. Unable to locate applicable fixes, unable to find related topics in search

Directory permissions of root folder (from ls -ld): drwxrwxrwx  22 root  wheel  748 Apr  2 21:41 .
Directory permissions for /cache (from ls -ld): drwxrwxrwx  10 root  wheel  340 Apr  2 21:42


Any ideas would be greatly appreciated. Thank you.

[kat]

Yet another hunch, on my part... Although the CHMOD permissions seem OK, are the CHOWN ones overriding those? Do you still have full ownership of the files?

[margarett]

Can you get us a phpinfo?
What is a phpinfo() file?

[kat]

OO! Good finkin', Bruno!

[青山 素子]

How are you running PHP? Module? CGI? What version and from where did you get it (Apple provided, homebrew, etc)? Based on the messages, it looks like there might be some configuration errors causing the permission problems.

[cobolicious]

Thank you guys for the warm welcome and the speedy replies. 

PHP setup is stock, out of the box for OS X server. Profile manager seems to be running just fine (also uses PHP/Postgres).

As for permissions / ownership / groups I am rather unfamiliar with the nitty gritty (I live in the GUI 99% of the time), here is the permissions list for everything in the root directory for our SMF install coming at you from ls -l:

total 448
drwxr-xr-x    6 root      wheel    204 Apr  1 17:42 Packages
-rw-r--r--    1 root      wheel  73193 Apr  1 17:42 SSI.php
-rw-r--r--    1 root      wheel   2456 Apr  1 17:42 Settings.php
-rw-r--r--    1 root      wheel   1962 Apr  1 17:42 Settings_bak.php
drwxr-xr-x    6 root      wheel    204 Apr  1 17:42 Smileys
drwxr-xr-x  110 root      wheel   3740 Apr  1 17:42 Sources
drwxr-xr-x    5 root      wheel    170 Apr  1 17:42 Themes
-rw-r--r--    1 root      wheel   3355 Apr  1 17:42 agreement.txt
drwxr-xr-x   28 root      wheel    952 Apr  1 17:42 attachments
drwxr-xr-x    6 root      wheel    204 Apr  1 17:42 avatars
drwxrwxrwx   23 root      wheel    782 Apr  3 15:35 cache
-rw-r--r--    1 root      wheel  13981 Apr  1 17:42 index.php
-rw-r--r--    1 root      wheel   1490 Apr  1 17:42 license.txt
-rw-r--r--    1 root      wheel   2569 Apr  1 17:42 news_readme.html
-rw-r--r--@   1 adminuser  wheel     19 Apr  3 23:41 phpinfo.php
-rw-r--r--    1 root      wheel  22204 Apr  1 17:42 readme.html
-rwxrwxrwx@   1 adminuser  staff  39755 Jul  4  2013 repair_settings.php
-rw-r--r--    1 root      wheel  28560 Apr  1 17:42 ssi_examples.php
-rw-r--r--    1 root      wheel   6070 Apr  1 17:42 ssi_examples.shtml
-rw-r--r--    1 root      wheel   8604 Apr  1 17:42 subscriptions.php

Can you get us a phpinfo?
What is a phpinfo() file?

Here is the result of running the phpinfo.php tool:

PHP Logo
PHP Version 5.4.24


System   Darwin hxxp:myhostname.com [nonactive] 13.1.0 Darwin Kernel Version 13.1.0: Thu Jan 16 19:40:37 PST 2014; root:xnu-2422.90.20~2/RELEASE_X86_64 x86_64
Build Date   Jan 19 2014 21:18:21
Configure Command    '/private/var/tmp/apache_mod_php/apache_mod_php-87.2~1/php/configure' '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-dependency-tracking' '--sysconfdir=/private/etc' '--with-apxs2=/usr/sbin/apxs' '--enable-cli' '--with-config-file-path=/etc' '--with-config-file-scan-dir=/Library/Server/Web/Config/php' '--with-libxml-dir=/usr' '--with-openssl=/usr' '--with-kerberos=/usr' '--with-zlib=/usr' '--enable-bcmath' '--with-bz2=/usr' '--enable-calendar' '--disable-cgi' '--with-curl=/usr' '--enable-dba' '--enable-ndbm=/usr' '--enable-exif' '--enable-fpm' '--enable-ftp' '--with-gd' '--with-freetype-dir=/BinaryCache/apache_mod_php/apache_mod_php-87.2~1/Root/usr/local' '--with-jpeg-dir=/BinaryCache/apache_mod_php/apache_mod_php-87.2~1/Root/usr/local' '--with-png-dir=/BinaryCache/apache_mod_php/apache_mod_php-87.2~1/Root/usr/local' '--enable-gd-native-ttf' '--with-icu-dir=/usr' '--with-ldap=/usr' '--with-ldap-sasl=/usr' '--with-libedit=/usr' '--enable-mbstring' '--enable-mbregex' '--with-mysql=mysqlnd' '--with-mysqli=mysqlnd' '--without-pear' '--with-pdo-mysql=mysqlnd' '--with-mysql-sock=/var/mysql/mysql.sock' '--with-readline=/usr' '--enable-shmop' '--with-snmp=/usr' '--enable-soap' '--enable-sockets' '--enable-sqlite-utf8' '--enable-sysvmsg' '--enable-sysvsem' '--enable-sysvshm' '--with-tidy' '--enable-wddx' '--with-xmlrpc' '--with-iconv-dir=/usr' '--with-xsl=/usr' '--enable-zend-multibyte' '--enable-zip' '--with-pcre-regex=/usr'
Server API   Apache 2.0 Handler
Virtual Directory Support   disabled
Configuration File (php.ini) Path   /etc
Loaded Configuration File   /etc/php.ini
Scan this dir for additional .ini files   /Library/Server/Web/Config/php
Additional .ini files parsed   /Library/Server/Web/Config/php/php.ini
PHP API   20100412
PHP Extension   20100525
Zend Extension   220100525
Zend Extension Build   API220100525,NTS
PHP Extension Build   API20100525,NTS
Debug Build   no
Thread Safety   disabled
Zend Signal Handling   disabled
Zend Memory Manager   enabled
Zend Multibyte Support   provided by mbstring
IPv6 Support   enabled
DTrace Support   disabled
Registered PHP Streams   https, ftps, compress.zlib, compress.bzip2, php, file, glob, data, http, ftp, phar, zip
Registered Stream Socket Transports   tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
Registered Stream Filters   zlib.*, bzip2.*, convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk

Zend logo This program makes use of the Zend Scripting Language Engine:
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies

PHP Credits

Configuration

apache2handler

Apache Version   Apache/2.2.26 (Unix) DAV/2 PHP/5.4.24 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y
Apache API Version   20051115
Server Administrator   [email protected]
Hostname:Port   MYHOSTNAME:80
User/Group   _www(70)/70
Max Requests   Per Child: 100000 - Keep Alive: on - Max Per Connection: 100
Timeouts   Connection: 300 - Keep-Alive: 15
Virtual Server   Yes
Server Root   /usr
Loaded Modules   core prefork http_core mod_so mod_authn_file mod_authz_host mod_cache mod_disk_cache mod_dumpio mod_reqtimeout mod_ext_filter mod_filter mod_substitute mod_deflate mod_log_config mod_log_forensic mod_logio mod_env mod_mime_magic mod_cern_meta mod_expires mod_headers mod_ident mod_usertrack mod_setenvif mod_version mod_proxy mod_proxy_http mod_proxy_scgi mod_proxy_balancer mod_ssl mod_mime mod_dav mod_autoindex mod_asis mod_info mod_cgi mod_dav_fs mod_vhost_alias mod_negotiation mod_dir mod_imagemap mod_actions mod_speling mod_alias mod_rewrite mod_php5 mod_proxy_ajp mod_hfs_apple2 mod_bonjour2 mod_auth_apple2 mod_digest_apple2 mod_xsendfile mod_status_apple mod_fastcgi

Directive   Local Value   Master Value
engine   1   1
last_modified   0   0
xbithack   0   0

Apache Environment

Variable   Value
SCRIPT_URL   /forums/phpinfo.php
SCRIPT_URI   http://MYHOSTNAME/forums/phpinfo.php
SafariUploadWorkaround   1
proxy-nokeepalive   1
HTTP_HOST   hxxp:myhostname.com [nonactive]
HTTP_ACCEPT   text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
HTTP_CONNECTION   close
HTTP_COOKIE   PHPSESSID=v34u6o4j8dir05r602ihaon0cvhblp5pssc030gr3hlql0912la4d4n1rl96oa8a1kjqdhish5rejpgf0e6fi0hnm562fkbico3jqe1; SMFCookie747=a%3A4%3A%7Bi%3A0%3Bs%3A2%3A%2210%22%3Bi%3A1%3Bs%3A40%3A%22b629066a73d08f700a0947c476b7e1b4ae73c709%22%3Bi%3A2%3Bi%3A1583690500%3Bi%3A3%3Bi%3A0%3B%7D
HTTP_USER_AGENT   Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.74.9 (KHTML, like Gecko) Version/7.0.2 Safari/537.74.9
HTTP_ACCEPT_LANGUAGE   en-us
HTTP_CACHE_CONTROL   max-age=0
HTTP_ACCEPT_ENCODING   gzip, deflate
HTTP_X_FORWARDED_PROTO   http
HTTP_X_APPLE_SERVICE_WEBAUTH_ENABLED   true
HTTP_X_APPLE_SERVICE_PROFILE_MANAGER_ENABLED   true
PATH   /usr/bin:/bin:/usr/sbin:/sbin
SERVER_SIGNATURE   <address>Apache/2.2.26 (Unix) DAV/2 PHP/5.4.24 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y Server at hxxp:myhostname.com [nonactive] Port 80</address>
SERVER_SOFTWARE   Apache/2.2.26 (Unix) DAV/2 PHP/5.4.24 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y
SERVER_NAME   hxxp:myhostname.com [nonactive]
SERVER_ADDR   LOCALIPADDRESS
SERVER_PORT   80
REMOTE_ADDR   LOCALIPADDRESS
DOCUMENT_ROOT   /Library/Server/Web/Data/Sites/Default
SERVER_ADMIN   [email protected]
SCRIPT_FILENAME   /Library/Server/Web/Data/Sites/Default/forums/phpinfo.php
REMOTE_PORT   49405
GATEWAY_INTERFACE   CGI/1.1
SERVER_PROTOCOL   HTTP/1.1
REQUEST_METHOD   GET
QUERY_STRING   no value
REQUEST_URI   /forums/phpinfo.php
SCRIPT_NAME   /forums/phpinfo.php

HTTP Headers Information

HTTP Request Headers
HTTP Request   GET /forums/phpinfo.php HTTP/1.1
Host   hxxp:myhostname.com [nonactive]
Accept   text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Connection   close
Cookie   PHPSESSID=v34u6o4j8dir05r602ihaon0cvhblp5pssc030gr3hlql0912la4d4n1rl96oa8a1kjqdhish5rejpgf0e6fi0hnm562fkbico3jqe1; SMFCookie747=a%3A4%3A%7Bi%3A0%3Bs%3A2%3A%2210%22%3Bi%3A1%3Bs%3A40%3A%22b629066a73d08f700a0947c476b7e1b4ae73c709%22%3Bi%3A2%3Bi%3A1583690500%3Bi%3A3%3Bi%3A0%3B%7D
User-Agent   Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.74.9 (KHTML, like Gecko) Version/7.0.2 Safari/537.74.9
Accept-Language   en-us
Cache-Control   max-age=0
Accept-Encoding   gzip, deflate
X_FORWARDED_PROTO   http
x-apple-service-webauth-enabled   true
x-apple-service-profile-manager-enabled   true
HTTP Response Headers
X-Powered-By   PHP/5.4.24

bcmath

BCMath support   enabled

Directive   Local Value   Master Value
bcmath.scale   0   0

bz2

BZip2 Support   Enabled
Stream Wrapper support   compress.bzip2://
Stream Filter support   bzip2.decompress, bzip2.compress
BZip2 Version   1.0.6, 6-Sept-2010

calendar

Calendar support   enabled

Core

PHP Version   5.4.24

Directive   Local Value   Master Value
allow_url_fopen   On   On
allow_url_include   Off   Off
always_populate_raw_post_data   Off   Off
arg_separator.input   &   &
arg_separator.output   &   &
asp_tags   Off   Off
auto_append_file   no value   no value
auto_globals_jit   On   On
auto_prepend_file   no value   no value
browscap   no value   no value
default_charset   no value   no value
default_mimetype   text/html   text/html
disable_classes   no value   no value
disable_functions   no value   no value
display_errors   Off   Off
display_startup_errors   Off   Off
doc_root   no value   no value
docref_ext   no value   no value
docref_root   no value   no value
enable_dl   Off   Off
enable_post_data_reading   On   On
error_append_string   no value   no value
error_log   no value   no value
error_prepend_string   no value   no value
error_reporting   24575   24575
exit_on_timeout   Off   Off
expose_php   On   On
extension_dir   /usr/lib/php/extensions/no-debug-non-zts-20100525   /usr/lib/php/extensions/no-debug-non-zts-20100525
file_uploads   On   On
highlight.comment   #FF8000   #FF8000
highlight.default   #0000BB   #0000BB
highlight.html   #000000   #000000
highlight.keyword   #007700   #007700
highlight.string   #DD0000   #DD0000
html_errors   Off   Off
ignore_repeated_errors   Off   Off
ignore_repeated_source   Off   Off
ignore_user_abort   Off   Off
implicit_flush   Off   Off
include_path   .:   .:
log_errors   On   On
log_errors_max_len   1024   1024
mail.add_x_header   On   On
mail.force_extra_parameters   no value   no value
mail.log   no value   no value
max_execution_time   30   30
max_file_uploads   20   20
max_input_nesting_level   64   64
max_input_time   60   60
max_input_vars   1000   1000
memory_limit   128M   128M
open_basedir   no value   no value
output_buffering   4096   4096
output_handler   no value   no value
post_max_size   8M   8M
precision   14   14
realpath_cache_size   16K   16K
realpath_cache_ttl   120   120
register_argc_argv   Off   Off
report_memleaks   On   On
report_zend_debug   On   On
request_order   GP   GP
sendmail_from   no value   no value
sendmail_path   /usr/sbin/sendmail -t -i    /usr/sbin/sendmail -t -i
serialize_precision   17   17
short_open_tag   Off   Off
SMTP   localhost   localhost
smtp_port   25   25
sql.safe_mode   Off   Off
track_errors   Off   Off
unserialize_callback_func   no value   no value
upload_max_filesize   2M   2M
upload_tmp_dir   no value   no value
user_dir   no value   no value
user_ini.cache_ttl   300   300
user_ini.filename   .user.ini   .user.ini
variables_order   GPCS   GPCS
xmlrpc_error_number   0   0
xmlrpc_errors   Off   Off
zend.detect_unicode   On   On
zend.enable_gc   On   On
zend.multibyte   Off   Off
zend.script_encoding   no value   no value

ctype

ctype functions   enabled

curl

cURL support   enabled
cURL Information   7.30.0
Age   3
Features
AsynchDNS   Yes
Debug   No
GSS-Negotiate   Yes
IDN   No
IPv6   Yes
Largefile   Yes
NTLM   Yes
SPNEGO   No
SSL   Yes
SSPI   No
krb4   No
libz   Yes
CharConv   No
Protocols   dict, file, ftp, ftps, gopher, http, https, imap, imaps, ldap, ldaps, pop3, pop3s, rtsp, smtp, smtps, telnet, tftp
Host   x86_64-apple-darwin13.0
SSL Version   SecureTransport
ZLib Version   1.2.5

date

date/time support   enabled
"Olson" Timezone Database Version   2013.8
Timezone Database   internal
Default timezone   America/Phoenix

Directive   Local Value   Master Value
date.default_latitude   31.7667   31.7667
date.default_longitude   35.2333   35.2333
date.sunrise_zenith   90.583333   90.583333
date.sunset_zenith   90.583333   90.583333
date.timezone   America/Phoenix   America/Phoenix

dba

DBA support   enabled
Supported handlers   cdb cdb_make inifile flatfile

Directive   Local Value   Master Value
dba.default_handler   flatfile   flatfile

dom

DOM/XML   enabled
DOM/XML API Version   20031129
libxml Version   2.9.0
HTML Support   enabled
XPath Support   enabled
XPointer Support   enabled
Schema Support   enabled
RelaxNG Support   enabled

ereg

Regex Library   Bundled library enabled

exif

EXIF Support   enabled
EXIF Version   1.4 $Id$
Supported EXIF Version   0220
Supported filetypes   JPEG,TIFF

Directive   Local Value   Master Value
exif.decode_jis_intel   JIS   JIS
exif.decode_jis_motorola   JIS   JIS
exif.decode_unicode_intel   UCS-2LE   UCS-2LE
exif.decode_unicode_motorola   UCS-2BE   UCS-2BE
exif.encode_jis   no value   no value
exif.encode_unicode   ISO-8859-15   ISO-8859-15

fileinfo

fileinfo support   enabled
version   1.0.5

filter

Input Validation and Filtering   enabled
Revision   $Id: 6496ccdb6a0a4792ced7f000203981dd4afe3657 $

Directive   Local Value   Master Value
filter.default   unsafe_raw   unsafe_raw
filter.default_flags   no value   no value

ftp

FTP support   enabled

gd

GD Support   enabled
GD Version   bundled (2.1.0 compatible)
FreeType Support   enabled
FreeType Linkage   with freetype
FreeType Version   2.4.2
GIF Read Support   enabled
GIF Create Support   enabled
JPEG Support   enabled
libJPEG Version   8
PNG Support   enabled
libPNG Version   1.6.2
WBMP Support   enabled
XBM Support   enabled

Directive   Local Value   Master Value
gd.jpeg_ignore_warning   0   0

hash

hash support   enabled
Hashing Engines   md2 md4 md5 sha1 sha224 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru snefru256 gost adler32 crc32 crc32b fnv132 fnv164 joaat haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5

iconv

iconv support   enabled
iconv implementation   libiconv
iconv library version   1.11

Directive   Local Value   Master Value
iconv.input_encoding   ISO-8859-1   ISO-8859-1
iconv.internal_encoding   ISO-8859-1   ISO-8859-1
iconv.output_encoding   ISO-8859-1   ISO-8859-1

json

json support   enabled
json version   1.2.1

ldap

LDAP Support   enabled
RCS Version   $Id$
Total Links   0/unlimited
API Version   3001
Vendor Name   OpenLDAP
Vendor Version   20428
SASL Support   Enabled

Directive   Local Value   Master Value
ldap.max_links   Unlimited   Unlimited

libxml

libXML support   active
libXML Compiled Version   2.9.0
libXML Loaded Version   20900
libXML streams   enabled

mbstring

Multibyte Support   enabled
Multibyte string engine   libmbfl
HTTP input encoding translation   disabled
libmbfl version   1.3.2

mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.

Multibyte (japanese) regex support   enabled
Multibyte regex (oniguruma) backtrack check   On
Multibyte regex (oniguruma) version   4.7.1

Directive   Local Value   Master Value
mbstring.detect_order   no value   no value
mbstring.encoding_translation   Off   Off
mbstring.func_overload   0   0
mbstring.http_input   pass   pass
mbstring.http_output   pass   pass
mbstring.http_output_conv_mimetypes   ^(text/|application/xhtml\+xml)   ^(text/|application/xhtml\+xml)
mbstring.internal_encoding   no value   no value
mbstring.language   neutral   neutral
mbstring.strict_detection   Off   Off
mbstring.substitute_character   no value   no value

mysql

MySQL Support   enabled
Active Persistent Links   0
Active Links   0
Client API version   mysqlnd 5.0.10 - 20111026 - $Id: 2d8f599f49e5e8d2f5ba7112b5c444b3e2e48cdf $

Directive   Local Value   Master Value
mysql.allow_local_infile   On   On
mysql.allow_persistent   On   On
mysql.connect_timeout   60   60
mysql.default_host   no value   no value
mysql.default_password   no value   no value
mysql.default_port   3306   3306
mysql.default_socket   /var/mysql/mysql.sock   /var/mysql/mysql.sock
mysql.default_user   no value   no value
mysql.max_links   Unlimited   Unlimited
mysql.max_persistent   Unlimited   Unlimited
mysql.trace_mode   Off   Off

mysqli

MysqlI Support   enabled
Client API library version   mysqlnd 5.0.10 - 20111026 - $Id: 2d8f599f49e5e8d2f5ba7112b5c444b3e2e48cdf $
Active Persistent Links   0
Inactive Persistent Links   0
Active Links   0

Directive   Local Value   Master Value
mysqli.allow_local_infile   On   On
mysqli.allow_persistent   On   On
mysqli.default_host   no value   no value
mysqli.default_port   3306   3306
mysqli.default_pw   no value   no value
mysqli.default_socket   /var/mysql/mysql.sock   /var/mysql/mysql.sock
mysqli.default_user   no value   no value
mysqli.max_links   Unlimited   Unlimited
mysqli.max_persistent   Unlimited   Unlimited
mysqli.reconnect   Off   Off

mysqlnd

mysqlnd   enabled
Version   mysqlnd 5.0.10 - 20111026 - $Id: 2d8f599f49e5e8d2f5ba7112b5c444b3e2e48cdf $
Compression   supported
SSL   supported
Command buffer size   4096
Read buffer size   32768
Read timeout   31536000
Collecting statistics   Yes
Collecting memory statistics   No
Tracing   n/a
Loaded plugins   mysqlnd,example,debug_trace,auth_plugin_mysql_native_password,auth_plugin_mysql_clear_password
API Extensions   mysqli,pdo_mysql,mysql

mysqlnd statistics   
bytes_sent   0
bytes_received   0
packets_sent   0
packets_received   0
protocol_overhead_in   0
protocol_overhead_out   0
bytes_received_ok_packet   0
bytes_received_eof_packet   0
bytes_received_rset_header_packet   0
bytes_received_rset_field_meta_packet   0
bytes_received_rset_row_packet   0
bytes_received_prepare_response_packet   0
bytes_received_change_user_packet   0
packets_sent_command   0
packets_received_ok   0
packets_received_eof   0
packets_received_rset_header   0
packets_received_rset_field_meta   0
packets_received_rset_row   0
packets_received_prepare_response   0
packets_received_change_user   0
result_set_queries   0
non_result_set_queries   0
no_index_used   0
bad_index_used   0
slow_queries   0
buffered_sets   0
unbuffered_sets   0
ps_buffered_sets   0
ps_unbuffered_sets   0
flushed_normal_sets   0
flushed_ps_sets   0
ps_prepared_never_executed   0
ps_prepared_once_executed   0
rows_fetched_from_server_normal   0
rows_fetched_from_server_ps   0
rows_buffered_from_client_normal   0
rows_buffered_from_client_ps   0
rows_fetched_from_client_normal_buffered   0
rows_fetched_from_client_normal_unbuffered   0
rows_fetched_from_client_ps_buffered   0
rows_fetched_from_client_ps_unbuffered   0
rows_fetched_from_client_ps_cursor   0
rows_affected_normal   0
rows_affected_ps   0
rows_skipped_normal   0
rows_skipped_ps   0
copy_on_write_saved   0
copy_on_write_performed   0
command_buffer_too_small   0
connect_success   0
connect_failure   0
connection_reused   0
reconnect   0
pconnect_success   0
active_connections   0
active_persistent_connections   0
explicit_close   0
implicit_close   0
disconnect_close   0
in_middle_of_command_close   0
explicit_free_result   0
implicit_free_result   0
explicit_stmt_close   0
implicit_stmt_close   0
mem_emalloc_count   0
mem_emalloc_amount   0
mem_ecalloc_count   0
mem_ecalloc_amount   0
mem_erealloc_count   0
mem_erealloc_amount   0
mem_efree_count   0
mem_efree_amount   0
mem_malloc_count   0
mem_malloc_amount   0
mem_calloc_count   0
mem_calloc_amount   0
mem_realloc_count   0
mem_realloc_amount   0
mem_free_count   0
mem_free_amount   0
mem_estrndup_count   0
mem_strndup_count   0
mem_estndup_count   0
mem_strdup_count   0
proto_text_fetched_null   0
proto_text_fetched_bit   0
proto_text_fetched_tinyint   0
proto_text_fetched_short   0
proto_text_fetched_int24   0
proto_text_fetched_int   0
proto_text_fetched_bigint   0
proto_text_fetched_decimal   0
proto_text_fetched_float   0
proto_text_fetched_double   0
proto_text_fetched_date   0
proto_text_fetched_year   0
proto_text_fetched_time   0
proto_text_fetched_datetime   0
proto_text_fetched_timestamp   0
proto_text_fetched_string   0
proto_text_fetched_blob   0
proto_text_fetched_enum   0
proto_text_fetched_set   0
proto_text_fetched_geometry   0
proto_text_fetched_other   0
proto_binary_fetched_null   0
proto_binary_fetched_bit   0
proto_binary_fetched_tinyint   0
proto_binary_fetched_short   0
proto_binary_fetched_int24   0
proto_binary_fetched_int   0
proto_binary_fetched_bigint   0
proto_binary_fetched_decimal   0
proto_binary_fetched_float   0
proto_binary_fetched_double   0
proto_binary_fetched_date   0
proto_binary_fetched_year   0
proto_binary_fetched_time   0
proto_binary_fetched_datetime   0
proto_binary_fetched_timestamp   0
proto_binary_fetched_string   0
proto_binary_fetched_blob   0
proto_binary_fetched_enum   0
proto_binary_fetched_set   0
proto_binary_fetched_geometry   0
proto_binary_fetched_other   0
init_command_executed_count   0
init_command_failed_count   0
com_quit   0
com_init_db   0
com_query   0
com_field_list   0
com_create_db   0
com_drop_db   0
com_refresh   0
com_shutdown   0
com_statistics   0
com_process_info   0
com_connect   0
com_process_kill   0
com_debug   0
com_ping   0
com_time   0
com_delayed_insert   0
com_change_user   0
com_binlog_dump   0
com_table_dump   0
com_connect_out   0
com_register_slave   0
com_stmt_prepare   0
com_stmt_execute   0
com_stmt_send_long_data   0
com_stmt_close   0
com_stmt_reset   0
com_stmt_set_option   0
com_stmt_fetch   0
com_deamon   0
bytes_received_real_data_normal   0
bytes_received_real_data_ps   0

example statistics   
stat1   0
stat2   0

openssl

OpenSSL support   enabled
OpenSSL Library Version   OpenSSL 0.9.8y 5 Feb 2013
OpenSSL Header Version   OpenSSL 0.9.8y 5 Feb 2013

pcre

PCRE (Perl Compatible Regular Expressions) Support   enabled
PCRE Library Version   8.02 2010-03-19

Directive   Local Value   Master Value
pcre.backtrack_limit   1000000   1000000
pcre.recursion_limit   100000   100000

PDO

PDO support   enabled
PDO drivers   mysql, sqlite, pgsql

pdo_mysql

PDO Driver for MySQL   enabled
Client API version   mysqlnd 5.0.10 - 20111026 - $Id: 2d8f599f49e5e8d2f5ba7112b5c444b3e2e48cdf $

Directive   Local Value   Master Value
pdo_mysql.default_socket   /var/mysql/mysql.sock   /var/mysql/mysql.sock

pdo_pgsql

PDO Driver for PostgreSQL   enabled
PostgreSQL(libpq) Version   9.2.4
Module version   1.0.2
Revision    $Id$

pdo_sqlite

PDO Driver for SQLite 3.x   enabled
SQLite Library   3.7.7.1

pgsql

PostgreSQL Support   enabled
PostgreSQL(libpq) Version   9.2.4
PostgreSQL(libpq)   PostgreSQL 9.2.4 on x86_64-apple-darwin13.0, compiled by Apple LLVM version 5.0 (clang-500.0.68) (based on LLVM 3.3svn), 64-bit
Multibyte character support   enabled
SSL support   enabled
Active Persistent Links   0
Active Links   0

Directive   Local Value   Master Value
pgsql.allow_persistent   On   On
pgsql.auto_reset_persistent   Off   Off
pgsql.ignore_notice   Off   Off
pgsql.log_notice   Off   Off
pgsql.max_links   Unlimited   Unlimited
pgsql.max_persistent   Unlimited   Unlimited

Phar

Phar: PHP Archive support   enabled
Phar EXT version   2.0.1
Phar API version   1.1.1
SVN revision   $Id: c85687ef5cec51a63c41cffb9ec3972cb8c3f7f3 $
Phar-based phar archives   enabled
Tar-based phar archives   enabled
ZIP-based phar archives   enabled
gzip compression   enabled
bzip2 compression   enabled
OpenSSL support   enabled

Phar based on pear/PHP_Archive, original concept by Davey Shafik.
Phar fully realized by Gregory Beaver and Marcus Boerger.
Portions of tar implementation Copyright (c) 2003-2009 Tim Kientzle.

Directive   Local Value   Master Value
phar.cache_list   no value   no value
phar.readonly   On   On
phar.require_hash   On   On

posix

Revision   $Id: 32db6705f5b617967a546be3114e178a4138c1ca $

Reflection

Reflection   enabled
Version   $Id: 803b12b031413f268441ec8c2709628deb97a3b3 $

session

Session Support   enabled
Registered save handlers   files user
Registered serializer handlers   php php_binary wddx

Directive   Local Value   Master Value
session.auto_start   Off   Off
session.cache_expire   180   180
session.cache_limiter   nocache   nocache
session.cookie_domain   no value   no value
session.cookie_httponly   Off   Off
session.cookie_lifetime   0   0
session.cookie_path   /   /
session.cookie_secure   Off   Off
session.entropy_file   /dev/random   /dev/random
session.entropy_length   20   20
session.gc_divisor   1000   1000
session.gc_maxlifetime   1440   1440
session.gc_probability   1   1
session.hash_bits_per_character   5   5
session.hash_function   sha512   sha512
session.name   PHPSESSID   PHPSESSID
session.referer_check   no value   no value
session.save_handler   files   files
session.save_path   no value   no value
session.serialize_handler   php   php
session.upload_progress.cleanup   On   On
session.upload_progress.enabled   On   On
session.upload_progress.freq   1%   1%
session.upload_progress.min_freq   1   1
session.upload_progress.name   PHP_SESSION_UPLOAD_PROGRESS   PHP_SESSION_UPLOAD_PROGRESS
session.upload_progress.prefix   upload_progress_   upload_progress_
session.use_cookies   On   On
session.use_only_cookies   On   On
session.use_trans_sid   0   0

shmop

shmop support   enabled

SimpleXML

Simplexml support   enabled
Revision   $Id: 2358f2be6570ab413d0ead3a931a5365adf94af9 $
Schema support   enabled

snmp

NET-SNMP Support   enabled
NET-SNMP Version   5.6
PHP SNMP Version   0.1

soap

Soap Client   enabled
Soap Server   enabled

Directive   Local Value   Master Value
soap.wsdl_cache   1   1
soap.wsdl_cache_dir   /tmp   /tmp
soap.wsdl_cache_enabled   1   1
soap.wsdl_cache_limit   5   5
soap.wsdl_cache_ttl   86400   86400

sockets

Sockets Support   enabled

SPL

SPL support   enabled
Interfaces   Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
Classes   AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, CallbackFilterIterator, DirectoryIterator, DomainException, EmptyIterator, FilesystemIterator, FilterIterator, GlobIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, MultipleIterator, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveCallbackFilterIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RecursiveTreeIterator, RegexIterator, RuntimeException, SplDoublyLinkedList, SplFileInfo, SplFileObject, SplFixedArray, SplHeap, SplMinHeap, SplMaxHeap, SplObjectStorage, SplPriorityQueue, SplQueue, SplStack, SplTempFileObject, UnderflowException, UnexpectedValueException

sqlite3

SQLite3 support   enabled
SQLite3 module version   0.7
SQLite Library   3.7.7.1

Directive   Local Value   Master Value
sqlite3.extension_dir   no value   no value

standard

Dynamic Library Support   enabled
Path to sendmail   /usr/sbin/sendmail -t -i

Directive   Local Value   Master Value
assert.active   1   1
assert.bail   0   0
assert.callback   no value   no value
assert.quiet_eval   0   0
assert.warning   1   1
auto_detect_line_endings   0   0
default_socket_timeout   60   60
from   no value   no value
url_rewriter.tags   a=href,area=href,frame=src,input=src,form=fakeentry   a=href,area=href,frame=src,input=src,form=fakeentry
user_agent   no value   no value

sysvmsg

sysvmsg support   enabled
Revision   $Id: a57e25e6c32775fb53ad02fa294f63e934911815 $

tidy

Tidy support   enabled
libTidy Release   31 October 2006 - Apple Inc. build 15.12
Extension Version   2.0 ($Id$)

Directive   Local Value   Master Value
tidy.clean_output   no value   no value
tidy.default_config   no value   no value

tokenizer

Tokenizer Support   enabled

wddx

WDDX Support   enabled
WDDX Session Serializer   enabled

xml

XML Support   active
XML Namespace Support   active
libxml2 Version   2.9.0

xmlreader

XMLReader   enabled

xmlrpc

core library version   xmlrpc-epi v. 0.51
php extension version   0.51
author   Dan Libby
homepage   hxxp:xmlrpc-epi.sourceforge.net [nonactive]
open sourced by   hxxp:epinions.com [nonactive]

xmlwriter

XMLWriter   enabled

xsl

XSL   enabled
libxslt Version   1.1.28
libxslt compiled against libxml Version   2.9.0
EXSLT   enabled
libexslt Version   1.1.28

zip

Zip   enabled
Extension Version   $Id: 31c66a56d4f09c504ea8e150f8918af55eec1253 $
Zip version   1.11.0
Libzip version   0.10.1

zlib

ZLib Support   enabled
Stream Wrapper   compress.zlib://
Stream Filter   zlib.inflate, zlib.deflate
Compiled Version   1.2.5
Linked Version   1.2.5

Directive   Local Value   Master Value
zlib.output_compression   Off   Off
zlib.output_compression_level   -1   -1
zlib.output_handler   no value   no value

Additional Modules

Module Name
sysvsem
sysvshm

Environment

Variable   Value
PATH   /usr/bin:/bin:/usr/sbin:/sbin
__CF_USER_TEXT_ENCODING   0x0:0:0
SERVER_INSTALL_PATH_PREFIX   /Applications/Server.app/Contents/ServerRoot
XPC_SERVICES_UNAVAILABLE   1

PHP Variables

Variable   Value
_COOKIE["PHPSESSID"]   v34u6o4j8dir05r602ihaon0cvhblp5pssc030gr3hlql0912la4d4n1rl96oa8a1kjqdhish5rejpgf0e6fi0hnm562fkbico3jqe1
_COOKIE["SMFCookie747"]   a:4:{i:0;s:2:"10";i:1;s:40:"b629066a73d08f700a0947c476b7e1b4ae73c709";i:2;i:1583690500;i:3;i:0;}
_SERVER["SCRIPT_URL"]   /forums/phpinfo.php
_SERVER["SCRIPT_URI"]   http://MYHOSTNAME/forums/phpinfo.php
_SERVER["SafariUploadWorkaround"]   1
_SERVER["proxy-nokeepalive"]   1
_SERVER["HTTP_HOST"]   hxxp:myhostname.com [nonactive]
_SERVER["HTTP_ACCEPT"]   text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
_SERVER["HTTP_CONNECTION"]   close
_SERVER["HTTP_COOKIE"]   PHPSESSID=v34u6o4j8dir05r602ihaon0cvhblp5pssc030gr3hlql0912la4d4n1rl96oa8a1kjqdhish5rejpgf0e6fi0hnm562fkbico3jqe1; SMFCookie747=a%3A4%3A%7Bi%3A0%3Bs%3A2%3A%2210%22%3Bi%3A1%3Bs%3A40%3A%22b629066a73d08f700a0947c476b7e1b4ae73c709%22%3Bi%3A2%3Bi%3A1583690500%3Bi%3A3%3Bi%3A0%3B%7D
_SERVER["HTTP_USER_AGENT"]   Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.74.9 (KHTML, like Gecko) Version/7.0.2 Safari/537.74.9
_SERVER["HTTP_ACCEPT_LANGUAGE"]   en-us
_SERVER["HTTP_CACHE_CONTROL"]   max-age=0
_SERVER["HTTP_ACCEPT_ENCODING"]   gzip, deflate
_SERVER["HTTP_X_FORWARDED_PROTO"]   http
_SERVER["HTTP_X_APPLE_SERVICE_WEBAUTH_ENABLED"]   true
_SERVER["HTTP_X_APPLE_SERVICE_PROFILE_MANAGER_ENABLED"]   true
_SERVER["PATH"]   /usr/bin:/bin:/usr/sbin:/sbin
_SERVER["SERVER_SIGNATURE"]   <address>Apache/2.2.26 (Unix) DAV/2 PHP/5.4.24 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y Server at hxxp:myhostname.com [nonactive] Port 80</address>
_SERVER["SERVER_SOFTWARE"]   Apache/2.2.26 (Unix) DAV/2 PHP/5.4.24 mod_fastcgi/2.4.6 mod_ssl/2.2.26 OpenSSL/0.9.8y
_SERVER["SERVER_NAME"]   hxxp:myhostname.com [nonactive]
_SERVER["SERVER_ADDR"]   LOCALIPADDRESS
_SERVER["SERVER_PORT"]   80
_SERVER["REMOTE_ADDR"]   LOCALIPADDRESS
_SERVER["DOCUMENT_ROOT"]   /Library/Server/Web/Data/Sites/Default
_SERVER["SERVER_ADMIN"]   [email protected]
_SERVER["SCRIPT_FILENAME"]   /Library/Server/Web/Data/Sites/Default/forums/phpinfo.php
_SERVER["REMOTE_PORT"]   49405
_SERVER["GATEWAY_INTERFACE"]   CGI/1.1
_SERVER["SERVER_PROTOCOL"]   HTTP/1.1
_SERVER["REQUEST_METHOD"]   GET
_SERVER["QUERY_STRING"]   no value
_SERVER["REQUEST_URI"]   /forums/phpinfo.php
_SERVER["SCRIPT_NAME"]   /forums/phpinfo.php
_SERVER["PHP_SELF"]   /forums/phpinfo.php
_SERVER["REQUEST_TIME_FLOAT"]   1396593680.672
_SERVER["REQUEST_TIME"]   1396593680

PHP License

This program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSE

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact [email protected].

[LiroyvH]

You *really* need to fix the scripts owned by root.
In fact, if you're running Apache there is a vulnerability in it with symlink race condition that can actually cause privilege escalations; you should patch the server for sure but also just fix the ownership of those files to the proper user for your webserver; root is *not* a proper owner for PHP scripts really.
(Note: that's not a bug in SMF, but a security vulnerability in Apache.)

On top of that, did you try clearing your cookies? If you then login, can you log back out or still the same error? 
Do you use database driven sessions or no?

[Illori]

also you should not be keeping repair_settings.php around, it should be deleted after it is used.

[margarett]

Apart from the (excellent) tips by CoreISP, I think your problem with sessions relates to this:

Code Select Expand


session.hash_function   sha512   sha512

Your server is probably generating bigger session hashes than SMF database stores, so the hash is truncated.

[青山 素子]

Looking at the information, at least part of the problem could be permissions. It looks like the SMF files are owned by root/wheel, but the web server is running under the "www" user (or possibly "_www"). Try changing the owner of those files to that.

In fact, if you're running Apache there is a vulnerability in it with symlink race condition that can actually cause privilege escalations; you should patch the server for sure but also just fix the ownership of those files to the proper user for your webserver; root is *not* a proper owner for PHP scripts really.

If the user is running how they seem to say they are, it's the version of Apache HTTPd supplied by Apple directly. There isn't really a way to update that outside whatever Apple pushes short of running your own custom copy.

[cobolicious]

Thank you guys for the help so far.

Looking at the information, at least part of the problem could be permissions. It looks like the SMF files are owned by root/wheel, but the web server is running under the "www" user (or possibly "_www"). Try changing the owner of those files to that.

In fact, if you're running Apache there is a vulnerability in it with symlink race condition that can actually cause privilege escalations; you should patch the server for sure but also just fix the ownership of those files to the proper user for your webserver; root is *not* a proper owner for PHP scripts really.

If the user is running how they seem to say they are, it's the version of Apache HTTPd supplied by Apple directly. There isn't really a way to update that outside whatever Apple pushes short of running your own custom copy.

Changing the owner to "_www" allowed me to run SMF's "repair_settings.php" tool. I restored all of those settings to default. Also cleared my browser's cookies / cache. Restarted Apache, Postgres and PHP after changes were made. Still having the same issues. I am stuck. I am starting to wonder if it's a php or postgres problem. Anyone have any advice for a next step? Would restoring the PHP.ini to default make any sense? SMF and Profile Manager are the only two systems utilizing it and there wasn't any outside customization done. Should be a stock install.

[LiroyvH]

You could always look at changing the settings that margarett pointed out

[cobolicious]

Apart from the (excellent) tips by CoreISP, I think your problem with sessions relates to this:

Code Select Expand


session.hash_function   sha512   sha512

Your server is probably generating bigger session hashes than SMF database stores, so the hash is truncated.

sha512 = a memory allotment?
Not sure what session.hash_function is. Is 512 the default value?
Any recommendations on what the value should be changed TO?

[青山 素子]

Different hash functions create different length hashes. SHA512 creates hashes with a length of 128 characters. SHA256 is 64 characters long.

Try lowering the hash value and see if that helps.

By the way, That value returns "0" on a clean PHP install (confirmed against my server and PHP installed via Homebrew on OS X).

[cobolicious]

Different hash functions create different length hashes. SHA512 creates hashes with a length of 128 characters. SHA256 is 64 characters long.

Try lowering the hash value and see if that helps.

By the way, That value returns "0" on a clean PHP install (confirmed against my server and PHP installed via Homebrew on OS X).

^^^Very helpful^^^

Recap for anyone else stabling upon this thread with the same problem:

RESOLUTION:
Setting the SHA value to 128 in /library/server/web/config/php/php.ini. Anything bigger did not work in my case. All symptoms resolved after restarting.

Worth noting there were two php.ini files contributing to this setup. One in /library/server/web/config/php and and the other in /etc

ADDITIONAL STEPS TAKEN PRIOR TO RESOLUTION:
1. Reset permissions on root directory for our forums. 
2. Ran the settings_repair.php (can be found at http://download.simplemachines.org/?tools)



Very Helpful! Thank you all for your efforts (and patience) with my silly problem.