SID-02010: After successful login authentication, page not found

Status:	Answered	TWiki version:	6.0.1	Perl version:	5.2
Category:	CategorySecurity	Server OS:	Windows Server 2008 R2	Last update:	10 years ago

I can access most web pages OK. From WebHome (http://localhost:90/bin/view.pl/TWiki/WebHome) I launched the login page and entered the correct user name and password. The system authenticated my credential OK and attempted to redirect when it said the page is not found. My WikiName is listed as a user. I have set {ScriptSuffix} = '.pl'. Here is the IIS error:

HTTP Error 404.0 - Not Found
The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.
Module IIS Web Core
Notification MapRequestHandler
Handler StaticFile
Error Code 0x80070002

Requested URL http://localhost:90/bin/view/TWiki/WebHome?twiki_redirect_cache=3814ef248aa744f1e74b8eeeae84eee4
Physical Path E:\IIS7Pub\wwwroot\Twiki\bin\view\TWiki\WebHome
Logon Method Anonymous
Logon User Anonymous

If I go straight to http://localhost:90/bin/view.pl/TWiki/WebHome then the page comes up OK. I am probably not logged in at this point. If I manually add the .pl and changed to login page to http://localhost:90/bin/login.pl/TWiki/WebHome?origurl=/bin/view.pl/TWiki/WebHome then the authentication went OK and it redirected me back to the original WebHome page. At this point if I fly the cursor on the Account dropdown link at upper right, the only options are Log In and Register User. I would expect the Log Out option instead. So I am not if it logged me in or not.

-- Steve Tran - 2015-01-13

Discussion and Answer

The "Requested URL" is definitely wrong: It lacks the '.pl' suffix. This is kinda strange, if you came from http://localhost:90/bin/view.pl/TWiki/WebHome.

Could you please repeat the procedure and report the URL you see in your browser in the login form? That would help to narrow it down.

It should be http://localhost:90/bin/login.pl/TWiki/WebHome?origurl=/bin/view.pl/TWiki/WebHome - note .pl in the origurl parameter.

As far as I can say, the redirection target is directly built from the URL from which you launch the login page, regardless of any ScriptSuffix setting. In theory, the suffix could be lost if TWiki constructs URLs from its components and "forgets" to add the suffix, but this doesn't happen - neither when building origurl, nor when doing the redirection after successful login.

-- Harald Jörg - 2015-01-13

This is my login link: http://localhost:90/bin/login.pl/TWiki/WebHome?origurl=/bin/view/TWiki/WebHome. Note that on the error page, the web link becomes http://localhost:90/bin/login.pl/TWiki/WebHome.

-- Steve Tran - 2015-01-13

Ok, The origurl parameter in this login link is wrong, we need to figure out why. It is ok that the query string (the question mark and everything after it) are removed on the error page. This will take some time, I'm currently too busy tracking another problem down.

Anyway, if you manually go to http://localhost:90/bin/view.pl/TWiki/WebHome, you should be successfully authenticated and everything is fine - correct?

-- Harald Jörg - 2015-01-13

I still have this issue. It looks to me that the origurl is actually = /bin/view/Twiki/WebHome before the .pl is added by the {ScriptSuffix} setting. Calling Login page from the Account dropdown on the banner will create an origurl without adding this .pl.

"Anyway, if you manually go to http://localhost:90/bin/view.pl/TWiki/WebHome, you should be successfully authenticated and everything is fine - correct?" Correct, the page will come up OK. From here I select Login from the menu to go to the login page. This is when the origurl has the missing ".pl". As I move around, I also found that some other pages also have the missing ".pl" in the origurl. For a test, I made a copy of the Twiki folder and set it up with Apache and the origurl is built correctly.

-- Steve Tran - 2015-01-18

Strange, indeed. I just mangled my test installation to use an extension and it just works fine, including the login url in the account banner. So please check:

• Is the redirection after login the only place where TWiki links don't work? Can you browse, edit, search without problems? It would be helpful to know places where .pl is present and where it isn't, because sometimes URLs are built "from scratch", sometimes by examining the current request - and sometimes in a template, sometimes in Perl code.
• As a next experiment we can check whether it happens in the template or in the code. Please create a topic in the Sandbox web with just the two lines below.
  • If you are authenticated (logged in), LOGIN should be empty.
  • Do LOGIN and LOGINURL contain the .pl suffix in both places (login.pl as action and view.pl in origurl)?

      * LOGIN = %LOGIN%
      * LOGINURL = %LOGINURL%

-- Harald Jörg - 2015-01-21

I couldn't find other links that have this issue. Any attempt to make an edit will direct me to a login page and that is where it will fail. To create a test topic I have to log in. But I can't log in because of the origurl issue. This is the login url: http://localhost:90/bin/login.pl/Sandbox/WebHome?origurl=/bin/view/Sandbox/WebHome. I have set up TWiki with Apache server and it seems to work well. I may stay with Apache going forward. It's OK to close this question if it takes too much time. Thanks.

-- Steve Tran - 2015-01-29

Closing this question after more than 30 days of inactivity. Feel free to reopen if needed. Consider engaging one of the TWiki consultants if you need timely help. We invite you to get involved with the community, it is more likely you get community support if you support the open source project!

-- Peter Thoeny - 2015-12-03

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.