{"action":"created","issue":{"url":"https://api.github.com/repos/wallabag/wallabag/issues/1145","labels_url":"https://api.github.com/repos/wallabag/wallabag/issues/1145/labels{/name}","comments_url":"https://api.github.com/repos/wallabag/wallabag/issues/1145/comments","events_url":"https://api.github.com/repos/wallabag/wallabag/issues/1145/events","html_url":"https://github.com/wallabag/wallabag/issues/1145","id":59726493,"number":1145,"title":"New install, can't log in - just get the login page ","user":{"login":"pokrface","id":1255703,"avatar_url":"https://avatars.githubusercontent.com/u/1255703?v=3","gravatar_id":"","url":"https://api.github.com/users/pokrface","html_url":"https://github.com/pokrface","followers_url":"https://api.github.com/users/pokrface/followers","following_url":"https://api.github.com/users/pokrface/following{/other_user}","gists_url":"https://api.github.com/users/pokrface/gists{/gist_id}","starred_url":"https://api.github.com/users/pokrface/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pokrface/subscriptions","organizations_url":"https://api.github.com/users/pokrface/orgs","repos_url":"https://api.github.com/users/pokrface/repos","events_url":"https://api.github.com/users/pokrface/events{/privacy}","received_events_url":"https://api.github.com/users/pokrface/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/wallabag/wallabag/labels/Bug","name":"Bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-03T23:43:57Z","updated_at":"2015-03-04T09:14:09Z","closed_at":null,"body":"Same symptoms as [issue 1040](https://github.com/wallabag/wallabag/issues/1040)—new installation, and after installation, I'm directed to enter my credentials at the login screen. Doing so results in the login screen again. Installation indicates all prerequisites are satisfied and no errors are displayed on screen at any point, including after the login page is re-displayed.\r\n\r\nEnvironment:\r\nUbuntu 14.04 server\r\nNginx 1.7.10\r\nPHP 5.6.6 (using PHP-FPM)\r\nVarnish 3.0.6\r\n\r\nHave tried current versions of Firefox, Chrome, and Safari. Results are the same.\r\n\r\nHave tried installing Wallabag via downloading latest.zip and also via composer; results are the same.\r\n\r\nHave tried using MySQL (actually MariaDB 10.0.17) and PostgreSQL (9.3); results are the same.\r\n\r\nHave tried using HTTP or HTTPS (completely bypassing Varnish); results are the same. Even disabled Varnish completely and tried with HTTP that way; results are the same.\r\n\r\nNo errors (or any messages at all) register in the PHP log file.\r\n\r\nNo `log.txt` exists anywhere beneath the wallabag `cache` directory.\r\n\r\nNginx access log just shows a post and a get:\r\n```\r\nPOST /?login HTTP/1.1 302 520 \"https://wallabag.bigdinosaur.org/\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:36.0) Gecko/20100101 Firefox/36.0\" \"-\"\r\nGET / HTTP/1.1 200 2068 \"https://wallabag.bigdinosaur.org/\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:36.0) Gecko/20100101 Firefox/36.0\" \"-\"\r\n```\r\n\r\nNo errors are displayed in the Nginx error log (except for one complaining about a missing favicon).\r\n\r\nThe MySQL (or postgresql) database I create does get populated with starter values from the install; I see several tables (config, entries, tag, tag_entries, users, and users_config) and most of them have at least one row.\r\n\r\nPHP-PFM does appear to be working. The login form is displayed, obviously, and when I supply invalid login credentials, I receive an error from the wallabag application in the nginx error log:\r\n\r\n```\r\n2015/03/03 17:33:24 [error] 12184#0: *1810 FastCGI sent in stderr: \"PHP message: user lee authentication failure\" while reading response header from upstream, client: 10.10.10.110, server: wallabag.bigdinosaur.org, request: \"POST /?login HTTP/1.1\", upstream: \"fastcgi://unix:/var/run/php5-fpm.soc:\", host: \"wallabag.bigdinosaur.org\", referrer: \"https://wallabag.bigdinosaur.org/\"\r\n```\r\n\r\nFor reference, here's the nginx vhost configuration I'm using. The HTTP side is listening on 8881 because Varnish is on port 80.\r\n\r\n```\r\nserver {\r\n\tserver_name wallabag.bigdinosaur.org;\r\n        listen 8881;\r\n\troot /var/www-wallabag/wallabag;\r\n\tindex index.html index.php;\r\n\tautoindex off;\r\n\r\n\tlocation / {\r\n\t\tallow 10.10.10.0/24;\r\n\t\tallow 127.0.0.1;\r\n\t\tdeny all;\r\n\t}\r\n\r\n\tlocation ~ /.*\\.php {\r\n\t\tallow 10.10.10.0/24;\r\n\t\tallow 127.0.0.1;\r\n\t\tdeny all;\r\n\t\ttry_files $uri =404;\r\n\t\tinclude fastcgi_params;\r\n\t\tfastcgi_pass php5-fpm-sock;\r\n\t\tfastcgi_intercept_errors on;\r\n\t\tfastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n\t\tfastcgi_param SERVER_PORT 80;\r\n\t}\r\n\r\n}\r\n\r\n# HTTPS server\r\nserver {\r\n\tlisten 443 ssl spdy;\r\n\tserver_name wallabag.bigdinosaur.org;\r\n\troot /var/www-wallabag/wallabag;\r\n\tindex index.html index.php;\r\n\tautoindex off;\r\n\r\n\tssl on;\r\n\tssl_certificate redacted;\r\n\tssl_certificate_key redacted;\r\n\tssl_protocols TLSv1.2 TLSv1.1 TLSv1;\r\n\tssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;\r\n\tssl_prefer_server_ciphers on;\r\n\tssl_ecdh_curve secp384r1;\r\n\r\n\tlocation / {\r\n\t\tallow 10.10.10.0/24;\r\n\t\tallow 127.0.0.1;\r\n\t\tdeny all;\r\n\t}\r\n\r\n\tlocation ~ /.*\\.php {\r\n\t\tallow 10.10.10.0/24;\r\n\t\tallow 127.0.0.1;\r\n\t\tdeny all;\r\n\t        try_files $uri =404;\r\n\t        include fastcgi_params;\r\n\t        fastcgi_pass php5-fpm-sock;\r\n\t        fastcgi_param HTTPS on;\r\n\t\tfastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n\t}\r\n\r\n}\r\n```\r\nI've also got a pass statement set in varnish's `sub vcl_recv` so that it stays out of the way for now. Plus, of course, when I'm using HTTPS it's not a factor.\r\n\r\n```\r\n\t# Ignore all traffic sent to our Wallabag instance for now\r\n\tif (req.http.host ~\"wallabag.bigdinosaur.org\") {\r\n\t\treturn (pass);\r\n\t}\r\n```\r\n\r\nIs there any additional information I can supply that would assist in troubleshooting?"},"comment":{"url":"https://api.github.com/repos/wallabag/wallabag/issues/comments/77121239","html_url":"https://github.com/wallabag/wallabag/issues/1145#issuecomment-77121239","issue_url":"https://api.github.com/repos/wallabag/wallabag/issues/1145","id":77121239,"user":{"login":"tcitworld","id":2197836,"avatar_url":"https://avatars.githubusercontent.com/u/2197836?v=3","gravatar_id":"","url":"https://api.github.com/users/tcitworld","html_url":"https://github.com/tcitworld","followers_url":"https://api.github.com/users/tcitworld/followers","following_url":"https://api.github.com/users/tcitworld/following{/other_user}","gists_url":"https://api.github.com/users/tcitworld/gists{/gist_id}","starred_url":"https://api.github.com/users/tcitworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tcitworld/subscriptions","organizations_url":"https://api.github.com/users/tcitworld/orgs","repos_url":"https://api.github.com/users/tcitworld/repos","events_url":"https://api.github.com/users/tcitworld/events{/privacy}","received_events_url":"https://api.github.com/users/tcitworld/received_events","type":"User","site_admin":false},"created_at":"2015-03-04T09:14:09Z","updated_at":"2015-03-04T09:14:09Z","body":"Thanks a lot for such detailing your issue. :)\r\n\r\n> Have tried using MySQL (actually MariaDB 10.0.17) and PostgreSQL (9.3); results are the same.\r\n\r\nDid you try SQLite so that we can exclude a database issue ?\r\n\r\n> No errors (or any messages at all) register in the PHP log file.\r\n\r\nMaybe set your error level to E_ALL to catch them.\r\n\r\n> No log.txt exists anywhere beneath the wallabag cache directory.\r\n\r\nYou need to activate debug mode into the `inc/poche/config.inc.php` config file.\r\n\r\nIn that same file, you will find a constant named `HTTP_PORT`. Please try and changing it to 8881 to see how it goes without varnish (I've seen you already tried over https, but I'm just trying all I can think of right now).\r\n\r\nFinally, after trying to log in, do you have any cookies saved (there should be `__cfduid` and `poche`).\r\n\r\nHope we manage to fix this this time."}}