Your session has expired. Please login again.

JPS · Post by **JPS** » Mon Mar 24, 2014 2:31 am

Hi,
From today morning i have this issue " Your session has expired. Please login again." It happens with in 5min or less and asks to enter usernames and password again. A browser reload will fix the issue. But it's happening repeatedly.
In my server:-
Admin console auth token lifetime is 12Hrs
Auth token lifetime is 2Days
Session idle timeout 0 Dys
I installed Release "7.2.2_GA_2852.RHEL5_64_20121204211814 RHEL5_64 FOSS edition" on "Red Hat Enterprise Linux Server release 5.4 (Tikanga)" "x86_64".

Regards,
JPS

chauvetp · Post by **chauvetp** » Mon Mar 24, 2014 1:13 pm

Is this happening across browsers? If it is only happening in one browser, which browser/version/OS?
Also - You need to update your version of Zimbra as soon as possible. It is exploitable and there are people actively exploiting that version. Version 7.2.6 will be fine, you don't need to jump to version 8 yet.

JPS · Post by **JPS** » Mon Mar 24, 2014 11:13 pm

It's happening with all browsers. Ie; Chrome (Version 33.0.1750.154 m), Firefox (28.0), Explorer (8). Am using win-7 64bit & XP- 32 bit (different computers ).
Below is the message which my mailbox.log shows when session expires,
2014-03-25 09:29:37,037 INFO [btpool0-161://(mydomain)/service/soap/NoOpRequest] [name=(mailid);mid=18;ip=(private IP);ua=ZimbraWebClient - FF3.0 (Win)/7.2.2_GA_2852;] soap - NoOpRequest elapsed=0

2014-03-25 09:32:57,009 INFO [Pop3Server-57] [ip=(mail server private IP);oip=(system IP);] pop - POP3 client identified as: (system Ip)

2014-03-25 09:32:57,009 INFO [Pop3Server-57] [name=(mail id).org;ip=(mail server private IP);oip=(system IP);] pop - user (mail-id) authenticated, mechanism=LOGIN

2014-03-25 09:32:57,068 INFO [Pop3Server-57] [name=(mail-id);ip=(mail server private IP);oip=(system IP);] pop - quit from client

2014-03-25 09:34:37,287 INFO [btpool0-173://(my domain)/service/soap/NoOpRequest] [name=(mail-id);mid=18;ip=(system IP);ua=ZimbraWebClient - FF3.0 (Win)/7.2.2_GA_2852;] soap - NoOpRequest elapsed=0

But as said earlier if i reload the browser it will re-login automatically (it will expire again with in 6minut).

JPS · Post by **JPS** » Tue Mar 25, 2014 3:28 am

Hi,
One thing i noticed is that when it says "" Your session has expired. Please login again.", if i enter username and password there the session remains active till i log out. This is really confusing me. Please help.

mocdyfer2 · Post by **mocdyfer2** » Tue Mar 25, 2014 4:39 am

install new java on client computer and add mail host to "site list"

JPS · Post by **JPS** » Tue Mar 25, 2014 4:48 am

Is there anything that i can do from server end to fix the issue?

dannybv · Post by **dannybv** » Tue Mar 25, 2014 6:41 am

This problem started on 17-18 March on many servers. I have the same problem, I upgraded to version 8.0.6 and not resolved.

The problem appears only if you use the AJAX version, the message will not appear again if you press "ESC".