Hi Everyone,

We've been having very good use of OST for over a month with no real major problems. Out of the blue we could no longer log in to admin panel. The right credentials would yield "Authentication Required" and the wrong ones would say "Invalid Login."

Here are some of the symptoms:

Some users would occassionally be able to login

There would be intermittent ability to login

The only fix to the problem was to implement the solution from (http://osticket.com/forums/showpost.php?p=6369&postcount=11)

echo(" ");

This would now allow us to login, but once in, if you clicked on anything in the application, it would immediately log you out.

In order to get full functionality, we had to implement the solution from Xrat (http://osticket.com/forums/project.php?issueid=174)

This is the only thing that has brought the application back to life for us. I really don't understand why it would only work intermittently, or why some users would be able to login sometimes, whereas others would not.

One oddity that one of the guys did here though, is that there are two user groups that have been created one named "admin" and the other "admins." And both have been assigned admin privileges. I do not know if this is what contributed to our sudden problem.

I do understand the security risks for having session information available. However, I've set permissions to 700. I would like feedback on the feasibility of this security measure. TIA.