Testing build #204

[Novox]

Login bug.. When I login to the private folder with a correct username and password, it always pop-up request for a password and in HFS console said "Login Failed"

[rejetto]

I just tried the login thing, and it worked perfectly to me.
Please double check, and if the problem exists provide more details so i can reproduce it on my computer.

[Novox]

Hi dev,

What kind of detail do you want? I dont config something special. Only update #203 to #204 then try to login but can't. I don't know why.

I have try to update it again today, but I get the same problem can't login (Login Failed). I'm try to create a new user and password but it doesn't work.

So now, I'm stick with #203

Thanks!

[rejetto]

The fact 203 works right for you and 204 does not is a very important detail.
I'll investigate on this and let you know.

[Novox]

Hi rejetto,

For more details, I have used a customized template (Terayon v1.3.2) with some modified sourcecode to make it compatible with Apache ProxyPass. My HFS running on port 88 and I have redirect it to port 80 by using ProxyPass.

Thanks,
Novox

[rejetto]

1. does the problem happen by clicking the protected folder, or a "login" link?
2. can you create a folder, restrict access to a single account, and then try to access it? tell me if this works or not.

[Tyson]

it is when you try and login to the private folder. so if i were to goto blabla.com/privatefolder/ thats pass protected even if i have the right username and password it gives me a login failed.


i am also experiencing this problem =(

[maverick]

Just tried a local login directly to a protected folder - no problem.
(http://my server.com/protected folder/)

Here is the log ...

11:21:32 PM Server start
11:23:32 PM maverick@127.0.0.1:1153 Requested GET /applications/

[rejetto]

Ok, i think i finally got the problem: it's only with the "set user/pass", and not with accounts.
Right?

[maverick]

Just tested with "set user/pass" and it works ok for me.  No problems that I found with set user/pass or accounts.

[rejetto]

i was able to reproduce the problem
fixed in next build

[maverick]

Maybe something else has to be enabled or disabled for the problem to appear...........  Don't know, just that I haven't seen it.

[rejetto]

i forgot to put this in the what's new of this build

* disabled accounts' credentials were accepted for unprotected resources, now are not (just a formal thing, not a security problem)


to reproduce
1 create an account
2 disable it
3 access an unprotected folder
4 log in
5 enter user/pass of the disabled account
6 the login is accepted

you won't access anything you should not, so this is not a security problem, but it's formally wrong i think, so i changed it.

[r][m]

Build 204
Added the delete feature to my template.
Its great, and thanks!
Haven't found any problems here.