Re: [Phpwiki-talk] No new user in http://www.exit0.us/index.php/RecentVisitors

[Norberto M. <nu...@me...>]

Hi Reini et al,
I've seen several references to passwords (and other preferences) being 
kept in a user's homepage...but so far I haven't found any documentation 
on it.

a) is there any docs on this...if so, would you mind pointing me in the 
right direction?
b) If there is no such doc...would you mind explaining to all ? I'm 
happy to translate it all into end-user words if needed
c) how does (if at all) this feature relate / link to the new user / 
group / per page auth features you said you are working on?

Running 1.3.4 on FreeBSD / Apache/ mod_php / MySQL, 1.3.7 on win 2k /  
Apache/ mod_php / MySQL and soon 1.3.7 on Linux & Solaris

Thanks!!
Beto
Reini Urban wrote:

> AltGrendel schrieb:
>
>> On Tue, 2004-01-27 at 17:10, Chr. von Stuckrad wrote:
>>
>>> Eighter I'm pretty dumb tonight or something
>>> is wrong with creating a new user in the Wiki?
>>>
>>> Wanting to comment on an error in the new script
>>> for debugging regexps,
>>> I tried to edit with a NEW Name ('stucki') and
>>> a password (to be created I thought), and all
>>> I get is:
>>>
>>> PHP Warnings
>>> lib/WikiUser.php:229: Warning[512]: Unable to connect to LDAP server 
>>> localhost
>>>
>>> Somethig broken?
>>> Curious,    Stucki
>>
>>
>> Shouldn't be. As the administrator of the exit0.us wiki, I think I can
>> safely state that there is no password authentication enabled.
>> I have noticed that there are some users that are having problems
>> creating home pages. Is there a minimum character limit on the name of a
>> user's page? For example, it won't let you create a page for Bob(3
>> characters) but it will for Robert(6 characters).
>
>
> No, no char limit on the username. from 1.3.8 on one can set a 
> password char limit.
>
>> I'm not tying to hijack this thread because I've had other users
>> complain of the same basic thing. They try to create a user page but get
>> an "Invalid UserID or password" message. I've tried to check the
>> archives for this but haven't found anything.
>
>
> Old Auth Scheme (1.3.4 - 1.3.8) and new auth scheme (auth_policy = old):
>
> On REQUIRE_SIGNIN_BEFORE_EDIT = true:
> When the given username - password is invalid or not found, it tries 
> the next methods (imap, ldap, ...).
> If no matching user-passwd pair is found, "Invalid UserID or password" 
> is returned.
>
> So it looks like you enabled bogo login (ALLOW_BOGO_LOGIN = true), 
> which means that your users must login with a valid WikiWord. Robert 
> and Bob are no valid WikiWords.
>
> I suggest to set REQUIRE_SIGNIN_BEFORE_EDIT = false, so that any 
> username is accepted with or withour password. Then the password is 
> only checked if the user has a homepage, where the password is 
> actually stored.


-- 
Norberto Meijome | numard at meijome dot net
"Everything is interesting if you go into it deeply enough." - Richard Feynman