Forced out of admin, unable to use admin until quit browser

[dharma]

I have been having this issue for a while, at first I thought it might be related to one of my mods, but now with a bare bones ZC and almost no mods I am not so sure.

Occasionally, I will be working in the admin and then will be forced out to the login admin page, I will then login in again, but if I try any link, I am kicked out again to the login page. The only way to get out of this loop is to quit my browser, then everything works fine.

I am not sure why this happenening, This is not due to a session timeout as I am activity working, has anyone else seen this? I have a very clean install of ZC 1.3.7.

Could it be my server? I have a https://secure.mydomain.com perhaps symlinks/domain mapping is doing this, but then why only some of the time?

[kobra]

Do you have the admin set to be a secure session? i.e. when you are in the admin are you at a http:// address or a https:// address?

[dharma]

Hello Kobra!

I have my admin login and index pages set to secure pages, I was not aware that all admin pages could be secure....

admin login page: https://secure.mydomain.com/admin/login.php
admin index page: https://secure.mydomain.com/admin/index.php
all other admin pages: http://mydomain.com/admin/...

[kobra]

You might try moving your admin to the secure.mydomain.com sub dir if I understand how your SSL is issued and applied

[dharma]

I have domain mapping to route all https requests to the secure.mydomain.com pages.

I suppose I could move the admin folder from the root into the Secure_Server folder and change the configs etc..

I would imagine then that all the admin pages would be https not just the login & index, but as ZC 1.3.7's admin is not set up this way I am nervous about moving the admin around.

Do you think this would help the issue I have been having?

[kobra]

Sorry, after re-reading this if all files are at xxx.com in the normal Zen structure, and your SSL is issued to xxx.com, you should not be needing a secure.xxx.com sub at all nor sym-links as only login need to be secure and ZC will auto switch to https for this

[dharma]

my SSL is issued to secure.mydomain.com and have domain mapping to route all secure page requests to https://secure.mydomain.com

all my files (admin/catalog) are on the root level

With domain mapping I avoid having 2 sets of files (one set in the secure_server folder)

Perhaps the domain mapping is doing this? It seems odd that when I quit the browser and re-open it works ok

[kobra]

If asked upfront, this is not how I would have advised. Having one issued to mydomain.com or www.mydomain.com functions just fine - no concerns about directories/symlinks etc. If this is a major pain another cert can be obtained for less than $20 USD.

Perhaps a re-look at the links or a dev might be aware of something that while you are in http and the admin side that is trying to be secure and possibly causing this

[dharma]

Thanks Kobra,

I know its a pain to have my pages set up this way unfortunately, my current host, who pushed for this config....has very high installation/request cert fees..

So I am stuck with this set up...unless you absolutely think it is a bad idea to have this set up?

[kobra]

unless you absolutely think it is a bad idea to have this set up?

Nothing is bad if it is working and supported...as they suggested this I would get with them.

They actually charge you to install the cert???