[Nfb-web] Can't log in after enabling ssl

Andrews, David B (DEED) david.b.andrews at state.mn.us
Thu Apr 30 18:04:31 UTC 2015


If you don't get an answer, you could also ask in one of the cPanel forums, forums.cpanel.net

Dave



-----Original Message-----
From: Nfb-web [mailto:nfb-web-bounces at nfbnet.org] On Behalf Of erik burggraaf via Nfb-web
Sent: Thursday, April 30, 2015 12:10 PM
To: NFB Webmaster's List
Subject: [Nfb-web] Can't log in after enabling ssl

Hi all,

I have an interesting one here.  We were starting to attract unwanted attention on the NFB nevada site.  So, I put in an edit password which should have been done a long time ago in retrospect.  I had an administrator password to begin with  at least.

Once I had the site password protected I decided to enable SSl so no one could sniff out the passwords and force entry.  To enable SSL, I first installed a certificate in the webspace for the nfbnevada website on the NFBNet server.

Then I used method 3 found here to enable ssl.
http://www.pmwiki.org/wiki/Cookbook/SwitchToSSLMode <http://www.pmwiki.org/wiki/Cookbook/SwitchToSSLMode>

This code does work.  I can see that all logins, edit pages, and well, I'm assuming administration actions are working, but I can't test administration.  

Here's  the thing.  Since I enabled SSL, the site refuses to accept my admin password.  The site also bypasses my edit password and allows me to simply edit any page.  If I revert to before ssl, the passwords work just fine.

The lines for my passwords look like this.
$DefaultPasswords['admin'] = crypt('password'); $DefaultPasswords['edit'] = crypt('password'); The word password inside the apostrophes is a place holder of cours.  I'm not using the word password as my administrator password.  :)

I am seeing this on my own shared hosting space as well.  Very similar server configuration.  I'm wondering if we need to declare these passwords using a different syntax for ssl than we do for standard?  Honestly, it's as if there were no passwords at all when ssl is enabled.

I've asked the pmwiki user group for help and it's probable they will be able to shead some light on this, but if anyone here has a clue, I would appreciate it.  The pmwiki users can be a bit slow and sometimes uninformative, though they do try to help when they can.

Thanks,

Erik




More information about the NFB-Web mailing list