PDA

View Full Version : Admin Login Problem - [FIXED IN 2.01]


MMCM
4th of October 2006 (Wed), 18:02
After upgrading my test gallery to EE 2.0, the following problem occured:

Info: I do proctect my "admin" by http authentication, just in case that may interfere with the EE login. In EE 1.5 RC4 it worked without problems.

After the upgrade (with Firefox 1.5.0.7):
At first, I had to enter user & password for the http authentication.
At the EE login screen I entered the password of my EE 1.5 RC4 installtion.
After pressing enter, the same page reappeared without an other information.
BUT: Last login information was updated!

Then I cleared the according cookies and password entries in firefox, but that didn't help.

Then I unzipped the SETUP_reset.... file, filled in a different user & password in the .php file, and loaded it in the browser.

After several tries of deleting cookie, ... I could login. Somewhere between I removed all "." from the cookie name, maybe this was a problem?

Ok, I'm logged in now, but when I close the browser, delete EE cookies and reopen it again (or use IE instead of Firefox), only the http authentication is displayed.
No EE login page!?

Then I tried IE on another computer, and no EE login page there too.

When I press the "logout" link on the top of the admin page, I get redirected to the main gallery page. When I reenter the admin URL again, still no EE login page, but the admin page is displayed.

Very strange, isn't it?

Another problem: when I try to change the password in "editor settings", I get the message "PASSWORD NOT CHANGED: old password input did not match!".
The old password is entered exactly as it is set in the "...reset...php" file.

best regards
Martin

Pekka
4th of October 2006 (Wed), 19:27
The cookie name should contain only letters numbers and underscore to be on the safe side. The login is of course browser-specific because each browser handles its own cookies.

Login history stores all attempts.

Can you try the EE login without http authentication, see how it works then. Do the exact step below fail in some point? :

- open admin index
- log in to admin
- log out (should be redirected to index)
- open admin index
- log in to admin (admin index seen)
- close browser
- open same browser
- delete admin cookie
- open admin index
- log in to admin (admin index seen)

MMCM
5th of October 2006 (Thu), 03:32
Ok, next attempt at the office using firefox 1.5.0.7 with Gentoo Linux:

Disabled http authentication on the server for the admin directory
Cookie name contains only letters

Admin index opens without any need of authentication (EE login page)
Logout, redirect to public index page
Admin index still opens without login page
There are no cookies for that website in the cookie list of firefox.

(browser closed to continue with tests...)

Update will follow very soon...

After reopen of Firefox, still no cookie found.
Admin page opens without login
When I look at the Login History, the last eight entries are "LOGGED OUT", then a lot of "LOGGED IN" entries from previous tests, where the login page reoccured immediatly.

Renamed cookie to "testcookie", but nothing changes.

Strange...

P.S. Installation method was "For the hasty ones"

MMCM
5th of October 2006 (Thu), 03:55
P.S. Server info:
Server signature: Apache/2.2.0 (Linux/SUSE) Server at xxxxxxxxx Port 80
Server name: xxxxxxxxxxxx
Server protocol: HTTP/1.0
Http accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Http accept encoding: gzip,deflate
MySQL version (reported by MySQL server): 5.0.18
MySQL version (reported by PHP): 5.0.18
MySQL client library version: 5.0.18
MySQL server and connection type: Localhost via UNIX socket
PHP version: 5.1.2
PHP maximum script execution time: 1200 seconds
PHP maximum html form upload size: 2M
Database in use: xxxxxxxxx

Pekka
5th of October 2006 (Thu), 17:09
Can you let in in to your admin to test these things out? Would be the fastest way to solve this. PM me if you can.