Question

Hi All, Thanks for your help on my last question. I have installed TWiki and can register. I set myself up as an administrator. I can login as such.

However when I go to change preferences, I get a popup to login and I am denied access to make those changes. I am wondering if anyone else has had that problem.

Thanks, Jim

Environment

-- JimOBrien1 - 16 May 2007

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

I should say that I wonder if this has something to do with the .htaccess file. I limited access to the .config file there and I wonder if there was supposed to be a link to the passcodes.

The other thing I am thinking about is that I get the popup (same as to login here) to modify the preferences, groups, etc. But when I login, use a form in TWiki (no grey popu).

-- JimOBrien1 - 16 May 2007

And I am in the htpasswd file

-- JimOBrien1 - 16 May 2007

I just noticed something else weird. I had edited the page to make myself an administrator using the edit button. It gave no grey pop up. Now when I try and edit, I get a grey popup.

-- JimOBrien1 - 16 May 2007

Are you a registered user and a member of the TWikiAdminGroup?

-- PeterThoeny - 16 May 2007

Yes. My login name shows up to the right of the admin group. in the group box.

-- JimOBrien1 - 16 May 2007

You say you get a login popup; but are you able to log in? Does your username appear at the top of the menu bar? (pattern skin)

-- CrawfordCurrie - 18 May 2007

Hi CC, thanks for your help on the last topic and nice to see you again.

Yes, I find this very wierd. I login without the grey popup. There is a field for a user name and passcode within the page. My user name appears in the top right hand corner just as it does here. However on this site, I login using the grey popup. The grey popup only appears on my site when I try to edit something now (it didn't the first time I edited something).

Thanks, Jim

-- JimOBrien1 - 19 May 2007

Hey all. I just thought of something. Is that grey popup linked to that apache generated code for confirming users? In other words, if it was turned off or not installed, would logins not involve the grey pop up?

-- JimOBrien1 - 20 May 2007

Quite possibly. it sounds like you have selected TemplateLogin. Check your .htaccess for lines of the form:

require valid-user

and if you find any, comment them out (using a #)

-- CrawfordCurrie - 20 May 2007

**Ignore this post**I had set apache for the password handler but not the login or vice versa. I just set both to apache and get the grey popup consistently (login, edit, preferences). However, I can no longer login. I've tried to reregister after making those changes. The registration is completed and I start logged in. However, if I log out, I can no longer log back in with the same name. In other words, the grey popup never works for my site.

Is there another place besides the password handler and the login that I need to set for the apache confirmation?

The passwords are showing up in data/.htpasswd file even when I have the apache set for both password handler and the login. Would I be able to see the passwords in data/.htpasswd if the apache code was done wrong or not at all but it was set for apache? *Ignore this post*

-- JimOBrien1 - 24 May 2007

Sorry. Ignore the previous post. I've figured some things out.

I should say that I think the Apache config file wasn't done right. I figured out why I would get passwords to show up in the in data/.htpasswd file if I selected the apache password handler but my apache addition wasn't working right.

So I am wondering 2 things. First, is there another place besides the password handler and the login that I need to set for the apache confirmation when I am configuring the site?

Second, I might switch back to the template login while I figure the apache bit out. If I do and I comment out all the require valid user areas, does that mean a guest can attach, edit, etc. without registering and loging on? I mean, doesn't the use of the template login set people up as valid users?

Thanks, Jim

-- JimOBrien1 - 24 May 2007

One third thing. Why would that grey popup appear if the Apache authentication code wasn't working? I assumed that the grey popup was linked with the Apache authentication code.

Thanks, Jim

-- JimOBrien1 - 24 May 2007

Correct. It's part of apache, and nothing to do with TWiki.

-- CrawfordCurrie - 26 May 2007

I turned off the apache in the configuration and still get the grey popup and it still blocks me from editing.

If I comment out require valid-user to edit, etc. Would that let any visitor edit the page without logging in?

-- JimOBrien1 - 31 May 2007

If you are using ApacheLogin and comment out the require valid-user, anybody can change content without logging in.

-- PeterThoeny - 31 May 2007

Good to know. I played around with it and that was the way it seemed to me. There also seemed to be other security issues...

-- JimOBrien1 - 02 Jun 2007

-- JimOBrien1 - 02 Jun 2007