[Nfb-web] Can't log in after enabling ssl

erik burggraaf burggraaferik at gmail.com
Thu Apr 30 17:10:02 UTC 2015


Hi all,

I have an interesting one here.  We were starting to attract unwanted attention on the NFB nevada site.  So, I put in an edit password which should have been done a long time ago in retrospect.  I had an administrator password to begin with  at least.

Once I had the site password protected I decided to enable SSl so no one could sniff out the passwords and force entry.  To enable SSL, I first installed a certificate in the webspace for the nfbnevada website on the NFBNet server.

Then I used method 3 found here to enable ssl.
http://www.pmwiki.org/wiki/Cookbook/SwitchToSSLMode <http://www.pmwiki.org/wiki/Cookbook/SwitchToSSLMode>

This code does work.  I can see that all logins, edit pages, and well, I'm assuming administration actions are working, but I can't test administration.  

Here's  the thing.  Since I enabled SSL, the site refuses to accept my admin password.  The site also bypasses my edit password and allows me to simply edit any page.  If I revert to before ssl, the passwords work just fine.

The lines for my passwords look like this.
$DefaultPasswords['admin'] = crypt('password');
$DefaultPasswords['edit'] = crypt('password');
The word password inside the apostrophes is a place holder of cours.  I'm not using the word password as my administrator password.  :)

I am seeing this on my own shared hosting space as well.  Very similar server configuration.  I'm wondering if we need to declare these passwords using a different syntax for ssl than we do for standard?  Honestly, it's as if there were no passwords at all when ssl is enabled.

I've asked the pmwiki user group for help and it's probable they will be able to shead some light on this, but if anyone here has a clue, I would appreciate it.  The pmwiki users can be a bit slow and sometimes uninformative, though they do try to help when they can.

Thanks,

Erik


More information about the NFB-Web mailing list