Forced out of admin, unable to use admin until quit browser

I have been having this issue for a while, at first I thought it might be related to one of my mods, but now with a bare bones ZC and almost no mods I am not so sure.

Occasionally, I will be working in the admin and then will be forced out to the login admin page, I will then login in again, but if I try any link, I am kicked out again to the login page. The only way to get out of this loop is to quit my browser, then everything works fine.

I am not sure why this happenening, This is not due to a session timeout as I am activity working, has anyone else seen this? I have a very clean install of ZC 1.3.7.

Could it be my server? I have a https://secure.mydomain.com perhaps symlinks/domain mapping is doing this, but then why only some of the time?:dontgetit

Do you have the admin set to be a secure session? i.e. when you are in the admin are you at a http:// address or a https:// address?

Hello Kobra!

I have my admin login and index pages set to secure pages, I was not aware that all admin pages could be secure....

admin login page: https://secure.mydomain.com/admin/login.php
admin index page: https://secure.mydomain.com/admin/index.php
all other admin pages: http://mydomain.com/admin/...

You might try moving your admin to the secure.mydomain.com sub dir if I understand how your SSL is issued and applied

I have domain mapping to route all https requests to the secure.mydomain.com pages.

I suppose I could move the admin folder from the root into the Secure_Server folder and change the configs etc..

I would imagine then that all the admin pages would be https not just the login & index, but as ZC 1.3.7's admin is not set up this way I am nervous :unsure: about moving the admin around.

Do you think this would help the issue I have been having?

Sorry, after re-reading this if all files are at xxx.com in the normal Zen structure, and your SSL is issued to xxx.com, you should not be needing a secure.xxx.com sub at all nor sym-links as only login need to be secure and ZC will auto switch to https for this

my SSL is issued to secure.mydomain.com and have domain mapping to route all secure page requests to https://secure.mydomain.com

all my files (admin/catalog) are on the root level

With domain mapping I avoid having 2 sets of files (one set in the secure_server folder)

Perhaps the domain mapping is doing this? It seems odd that when I quit the browser and re-open it works ok

If asked upfront, this is not how I would have advised. Having one issued to mydomain.com or https://www.mydomain.com functions just fine - no concerns about directories/symlinks etc. If this is a major pain another cert can be obtained for less than $20 USD.

Perhaps a re-look at the links or a dev might be aware of something that while you are in http and the admin side that is trying to be secure and possibly causing this

Thanks Kobra,

I know its a pain to have my pages set up this way unfortunately, my current host, who pushed for this config....has very high installation/request cert fees..

So I am stuck with this set up...unless you absolutely think it is a bad idea to have this set up?

unless you absolutely think it is a bad idea to have this set up?
Nothing is bad if it is working and supported...as they suggested this I would get with them.

They actually charge you to install the cert???

Yes they charge for both install and cert request, they are an older very conservative host, I hope they are worth it....