Re: Authentication puzzles

On Thursday 10 September 2009 13:32, Reini Urban wrote:

> 2009/9/9 Antony Stone <[email protected]>:
> > On Wednesday 09 September 2009 16:35, Reini Urban wrote:
> >> 2009/9/9 Antony Stone <[email protected]>:
> >> > On Sunday 06 September 2009 14:02, Antony Stone wrote:
> >> >> ; True User Authentication:
> >> >> ; To require user passwords:
> >> >> ;   ALLOW_ANON_USER = false
> >> >> ;   ALLOW_ANON_EDIT = false
> >> >> ;   ALLOW_BOGO_LOGIN = false,
> >> >> ;   ALLOW_USER_PASSWORDS = true.
> >> >>
> >> >> I have set all four variables to the required values and restarted
> >> >> Apache, and yet it is still possible to log in with a random username
> >> >> and no password (ie: a Bogo login).

> > I have not explicitly set USER_AUTH_ORDER (the instructions for getting
> > True User Authentication don't tell me I need to)

> > Should I select "USER_AUTH_ORDER = Db" instead (since I am using a MySQL
> > backend database, I'd quite like all the authentication data to be in
> > there as well)?
>
> Yes, please. "USER_AUTH_ORDER = Db" for Mysql auth

Thanks, that has created the "Login required" functionality that I needed (I 
think it would be good if the docs in the config file said that this is 
necessary).  I put a username / password into the MySQL 'pref' table by hand, 
and I can log in with those credentials.


Now I just need to deal with my other problem - how to allow the Admin user to 
log in so that s/he can manage the other user accounts.

I have set

ADMIN_USER = Admin
ADMIN_PASSWD = Admin

in config.ini, but I can't log in with these credentials.

Do I need to manually insert them into the MySQL table as well, so that this 
Admin User can then add the other normal accounts?

The documentation is not too clear on how the accounts are managed, and since 
I haven't been able to log in as Admin yet, I'm simply assuming that it's 
done through the /PhpWikiAdministration page...

Any helpful guidance would be much appreciated.


Thanks,


Antony.

-- 
In the Beginning there was nothing, which exploded.

 - Terry Pratchett

                                                     Please reply to the list;
                                                           please don't CC me.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july