Question

My TWiki 4.1.1 sesssion tracking is not working. The Apache error_log has this:

[Mon Feb 05 18:43:07 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:07 2007] view: Couldn't store 54b3335b104e7592a22d3a1d129433d7 into /tmp/twiki/cgisess_54b3335b104e7592a22d3a1d129433d7: No such file or directory at /usr/local/apache2/twiki/lib/TWiki/Client.pm line 440.
[Mon Feb 05 18:43:07 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:07 2007] view: \t(in cleanup) could not flush: Couldn't store 54b3335b104e7592a22d3a1d129433d7 into /tmp/twiki/cgisess_54b3335b104e7592a22d3a1d129433d7: No such file or directory at /usr/local/apache2/twiki/bin/view line 0
[Mon Feb 05 18:43:07 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:07 2007] view: Couldn't store 5900c0f44714a3248dd1a371e7aeb2d3 into /tmp/twiki/cgisess_5900c0f44714a3248dd1a371e7aeb2d3: No such file or directory at /usr/local/apache2/twiki/lib/TWiki/Client.pm line 440.
[Mon Feb 05 18:43:07 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:07 2007] view: \t(in cleanup) could not flush: Couldn't store 5900c0f44714a3248dd1a371e7aeb2d3 into /tmp/twiki/cgisess_5900c0f44714a3248dd1a371e7aeb2d3: No such file or directory at /usr/local/apache2/twiki/bin/view line 0
[Mon Feb 05 18:43:08 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:08 2007] view: Couldn't store 5890c0b5a584d288ff2be6f1a5bf53d2 into /tmp/twiki/cgisess_5890c0b5a584d288ff2be6f1a5bf53d2: No such file or directory at /usr/local/apache2/twiki/lib/TWiki/Client.pm line 440.
[Mon Feb 05 18:43:08 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:08 2007] view: \t(in cleanup) could not flush: Couldn't store 5890c0b5a584d288ff2be6f1a5bf53d2 into /tmp/twiki/cgisess_5890c0b5a584d288ff2be6f1a5bf53d2: No such file or directory at /usr/local/apache2/twiki/bin/view line 0
[Mon Feb 05 18:43:08 2007] [error] [client 192.168.1.9] [Mon Feb  5 18:43:08 2007] view: Couldn't store 8a5d41cdb3ff486c57f87a1c19e42f46 into /tmp/twiki/cgisess_8a5d41cdb3ff486c57f87a1c19e42f46: No such file or directory at /usr/local/apache2/twiki/lib/TWiki/Client.pm line 440.

Environment

-- PeterThoeny - 08 Feb 2007

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

I posted above support question in response to known issue Bugs:Item3568 so that people can find it here in the Support web. See also Codev.SecurityAlert-CVE-2007-0669.

Workaround: Manually create directory tmp/twiki, make it owned by the Apache cgi user, and set the permission to 700.

-- PeterThoeny - 08 Feb 2007