Betr.: RE: [Xerte] Cannot Log In as Admin

[Ger Tielemans]

To help myself as admin, I made the icons on the frontpage clickable: if I click on Xerte (left) I get the normal login, if I click on the Notingham Castle (right) I get the management,php login page.   

>>> Patrick Lockley <Patrick.Lockley at nottingham.ac.uk> 22-05-09 14:00 >>>
Not obviously. Let me mangle.

 

Management.php is quite new, and a lot of people haven't found it yet -
ours works ok, but it was new with this release so has yet to take a
proper pounding like most of the rest of the code.

 

Attached is a mangled management.php that echoes out some of the data
sent and received.

 

For reference, do not replace management.php with this, add it as a new
file to the root of your install (e.g. the toolkits folder). Also, for
security purposes, I would recommend you rename it before you upload it
to a server so people won't be able to find it.

 

Let me know what you see.

 

Thanks

 

From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Jeremy
Hopkins
Sent: 22 May 2009 12:25
To: Xerte discussion list
Subject: RE: [Xerte] Cannot Log In as Admin

 

Hello Pat, Thanks for your reply

 

I get the message 

 

"Sorry that password combination was not correct"

 

As I said, I tried re-installing, I also messed with the enctype and
charset to no avail... very frustrating.

 

I have seen this kind of issue with before with charsets behaving
differently in IE / FF and preventing login (in IE), however, I have
tried this in IE7, FF and Opera and have the same response in all of
them.... Do you have any suggestions?

 

Jeremy

 

________________________________

From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 22 May 2009 11:41
To: Xerte discussion list
Subject: RE: [Xerte] Cannot Log In as Admin

 

Hello,

 

Yes management.php, it is LDAP free.

 

If you go to your sitedetails table, you can set the admin_username and
admin_password. Assuming these are set, and it sounds like they are -
does it just say they aren't correct. Mine works fine - I think
Johnathan's works as well - pretty sure Ron's works too.

 

Re MD5 - yep, over sight on my part - reasoning - we had a lot of people
with 0.5 and 0.8 installs where there was no admin role. When we moved
to 0.9 and 1.0 originally we modded the logindetails table to allow for
a user role flag, but this would mean everyone with an install modding
their tables. Which seemed a hassle. So I put the admin username into
the sitedetails table at the last minute instead, and left it.

 

You're welcome to MD5 it yourself though - you'd just need to put an un
md5 command into config.php. 

 

I'll put it in the list for the next version.

 

Pat

 

From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Jeremy
Hopkins
Sent: 22 May 2009 11:32
To: xerte at lists.nottingham.ac.uk
Subject: [Xerte] Cannot Log In as Admin

 

Hello All,

 

I have installed the full version Xerte on a linux virtual server. All
seemed to go according to plan until I came to log in.

 

I cannot log in using the administrators username and password. I have
re-installed / checked fields in database etc and it still will not
allow me in.

 

I have not got LDAP running yet, but am assuming that LDAP is not
required for the admin account, and that admin is completely independent
of the normal routines with the credential residing in the sitedetails
table? (would it not be better to MD5 the password in site details?)

 

Has anyone else experienced this problem?

 

Thanks, Jeremy