rc2 login weirdness

Tuesday 11 February 2003 3:22:21 am

Im having a login problem with rc2 with a site im building.

I've created a few users that can read and add content to the site, and when i login to the user site via the usual action={"/user/login/"|ezurl}, i find that in addition to being logged in to the user site that user has also been logged into the admin site, replacing the admin user. i then have to relogin the admin user...

Im not sure if this is a setup problem (site.ini.php). Im using ports to distinguish the admin/user site.

Has anyone else seen this?

Thanks

Paul

Tuesday 11 February 2003 4:35:57 pm

> Again, following my own mail up...
>
> From what i've seen today both admin and user seem to be
> sharing the same $current_user variable. Change it on site
> and it changes on the site and vice versa.
>
> It does look as if something has went wrong in the setup.
> However, im a bit stumped as to how to fix this. When i goto
> my admin site, 192.168.1.11:1141 for example, and
> 192.168.1.11:1140 for the user site, shouldn't they be
> running in different sessions?
>
> Any help would be appreciated.
>
> Paul

I am experiensing something quite like what you're describing om my testingsite: www.bredbandavisen.no (english). Somehow visitors are required to logon to the content module of my user site even afte logon is set to false in [site access]... Anyone got a good anwer here?

------------------------
I made eZ run on www.eigersund.kommune.no, bjerkreim.kommune.no, lund.kommune.no and sokndal.kommune.no. Municipalities should use open source!

Wednesday 12 February 2003 2:06:11 am

> > Again, following my own mail up...
> >
> > From what i've seen today both admin and user seem to be
> > sharing the same $current_user variable. Change it on
> site
> > and it changes on the site and vice versa.
> >
> > It does look as if something has went wrong in the
> setup.
> > However, im a bit stumped as to how to fix this. When i
> goto
> > my admin site, 192.168.1.11:1141 for example, and
> > 192.168.1.11:1140 for the user site, shouldn't they be
> > running in different sessions?
> >
> > Any help would be appreciated.
> >
> > Paul
>
>
> I am experiensing something quite like what you're
> describing om my testingsite: www.bredbandavisen.no
> (english). Somehow visitors are required to logon to the
> content module of my user site even afte logon is set to
> false in [site access]... Anyone got a good anwer here?

I face the same problem: user site requires login of anonymous visitors even after you set user-login required=false. The problem was not present in rc1. After thorough examination of ini.parameters, I am convinced there is a bug. I shall report this.

Sunday 16 February 2003 3:56:22 am

> With rc2 you need to given your anonymous user explicit
> rights to login. Go to the roles section and add to your
> anonymous user the line: 'User Login *'
>
> Hope this helps.
>
> Paul

There is still a way to restore the old behaviour of account-less sessions for anonymous users: Open your index.php-file and alter the hard-wired settings for the $Site Basics - array there:
Switch the following two parameters from "true" to "false":

$userObjectRequired = true; (Line 42 - index.php)
$sessionRequired = true; (Line 43 - index.php)

Monday 17 February 2003 8:32:26 am

> Try using two different browsers, one for the admin site and
> one for the user. Does this solve the problem?

This does stop the problem from occuring. If i use mozilla and konqueror, say, I can log in seperate users at the same time.

Does this suggest that the port number is somehow being ignored when a session is assigned to a user? Im not very familiar with how a session is put together for a user...

Paul