aboutsummaryrefslogtreecommitdiff
path: root/doc/bugs/login_problem.mdwn
diff options
context:
space:
mode:
authorJoey Hess <joeyh@joeyh.name>2018-01-04 19:17:45 -0400
committerJoey Hess <joeyh@joeyh.name>2018-01-04 19:17:45 -0400
commit4601dabd427e52a54052ba6f7aef27e0ab1613f3 (patch)
tree12ec76905ef6c0dfdc6df24aad64757bb55b006f /doc/bugs/login_problem.mdwn
parent43a9b6b3326caf0485fa8605e560c175ed47bfd2 (diff)
downloadikiwiki-4601dabd427e52a54052ba6f7aef27e0ab1613f3.tar
ikiwiki-4601dabd427e52a54052ba6f7aef27e0ab1613f3.tar.gz
correction; I did not reproduce this
I was manually reloading /ikiwiki.cgi?do=login, and postsignin is not set when that's done, which is a bug, but not the bug I was after.
Diffstat (limited to 'doc/bugs/login_problem.mdwn')
-rw-r--r--doc/bugs/login_problem.mdwn24
1 files changed, 2 insertions, 22 deletions
diff --git a/doc/bugs/login_problem.mdwn b/doc/bugs/login_problem.mdwn
index c83cd5870..374fb51dc 100644
--- a/doc/bugs/login_problem.mdwn
+++ b/doc/bugs/login_problem.mdwn
@@ -2,30 +2,10 @@ For around 2 weeks, I've been getting an increasing quantity of nonspecific
reports from users of login problems on ikiwiki sites, mostly joeyh.name
and git-annex.branchable.com. A few users are still logging in
successfully, but it seems to be hitting many users; post volume has gone
-down more than holidays would explain. --[[Joey]]
+down more than holidays would explain.
It doesn't seem limited to any login method; email and password have both
been said not to work. (Openid too, but could be openid provider problem
there.)
-After a few tries
-I seem to have reproduced the problem with email login; I ended up at a
-"Error: login failed, perhaps you need to turn on cookies?"
-page but my browser had an ikiwiki session cookie. And,
-looking in the session database file, the cookie id was in there. Then I
-went to "/do=prefs" in the same browser, and I was actually already
-logged in.
-
-That points at a problem with the "postsignin" redirect;
-if the session does not get a postsignin url set, it can error out that way
-despite being logged in.
-
-Reproducing again, I posted the login form, and before clicking on the
-login link, looked at the session.db -- it contained an entry for my session,
-but without a postsignin url.
-
- $ strings sessions.db
- $D = {'_SESSION_ID' => 'xxx','_SESSION_REMOTE_ADDR' => 'yyy','_SESSION_ATIME' => 1515106022,'_SESSION_CTIME' => 1515105990};;$D
-
-The postsignin url is certianly getting set at other times though,
-and why would this have only recently started to affect lots of users?
+I have not managed to reproduce the problem myself. --[[Joey]]