rejetto forum

Testing build #204

rejetto · 29 · 18764

0 Members and 1 Guest are viewing this topic.

Offline Novox

  • Occasional poster
  • *
    • Posts: 84
    • View Profile
Login bug.. When I login to the private folder with a correct username and password, it always pop-up request for a password and in HFS console said "Login Failed"


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13521
    • View Profile
I just tried the login thing, and it worked perfectly to me.
Please double check, and if the problem exists provide more details so i can reproduce it on my computer.


Offline Novox

  • Occasional poster
  • *
    • Posts: 84
    • View Profile
Hi dev,

What kind of detail do you want? I dont config something special. Only update #203 to #204 then try to login but can't. I don't know why.

I have try to update it again today, but I get the same problem can't login (Login Failed). I'm try to create a new user and password but it doesn't work.

So now, I'm stick with #203

Thanks!


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13521
    • View Profile
The fact 203 works right for you and 204 does not is a very important detail.
I'll investigate on this and let you know.


Offline Novox

  • Occasional poster
  • *
    • Posts: 84
    • View Profile
Hi rejetto,

For more details, I have used a customized template (Terayon v1.3.2) with some modified sourcecode to make it compatible with Apache ProxyPass. My HFS running on port 88 and I have redirect it to port 80 by using ProxyPass.

Thanks,
Novox


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13521
    • View Profile
1. does the problem happen by clicking the protected folder, or a "login" link?
2. can you create a folder, restrict access to a single account, and then try to access it? tell me if this works or not.


Tyson

  • Guest
it is when you try and login to the private folder. so if i were to goto blabla.com/privatefolder/ thats pass protected even if i have the right username and password it gives me a login failed.


i am also experiencing this problem =(


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile

Just tried a local login directly to a protected folder - no problem.
(http://my server.com/protected folder/)

Here is the log ...
Quote
11:21:32 PM Server start
11:23:32 PM maverick@127.0.0.1:1153 Requested GET /applications/
maverick


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13521
    • View Profile
Ok, i think i finally got the problem: it's only with the "set user/pass", and not with accounts.
Right?


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
Just tested with "set user/pass" and it works ok for me.  No problems that I found with set user/pass or accounts.
maverick


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13521
    • View Profile
i was able to reproduce the problem
fixed in next build


Offline maverick

  • Tireless poster
  • ****
    • Posts: 1052
  • Computer Solutions
    • View Profile
Maybe something else has to be enabled or disabled for the problem to appear...........  Don't know, just that I haven't seen it.
maverick


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13521
    • View Profile
i forgot to put this in the what's new of this build

* disabled accounts' credentials were accepted for unprotected resources, now are not (just a formal thing, not a security problem)


to reproduce
1 create an account
2 disable it
3 access an unprotected folder
4 log in
5 enter user/pass of the disabled account
6 the login is accepted

you won't access anything you should not, so this is not a security problem, but it's formally wrong i think, so i changed it.


Offline r][m

  • Tireless poster
  • ****
    • Posts: 347
    • View Profile
Build 204
Added the delete feature to my template.
Its great, and thanks! ;D
Haven't found any problems here.