From: Reini U. <ru...@x-...> - 2004-09-23 20:50:48
|
Gerald Lucas schrieb: > Thanks, but why do I get the debug information on the login page? Does > it have something to do with "USER_AUTH_ORDER: PersonalPage => Db => > Forbidden"? I have tried many combinations, including the ones you > suggest, but nothing works, and nothing takes that DEBUG stuff off the > login page. Thanks. DEBUG=0 in config.ini If auth doesn't work at all as expected, try the latest CVS snapshot. Maybe I fixed a bug somewhen. > On Thu, 23 Sep 2004 20:03:00 +0200, Reini Urban <ru...@x-...> wrote: > > >>Ok; I'll have to add this to doc/README.phpwiki-auth >> >>* __~PersonalPage__: Store passwords in the users homepage metadata >>(simple) >>If users have not created a PersonalPage, they can still access their >>UserPreferences, and change their passwords, but the authmethod doesn't >>not know where to get and store this password, so it will fail. >>Same with prefs storage. >> >>The password is read from the first AuthMethod in $USER_AUTH_ORDER, >>checked and if it fails, the next methods are tried according the rules >>(= policy) in USER_AUTH_POLICY. >>"old" is kind of unpredictable. old uses strange automatic rules from >>the previous versions. >>I would suggest "stacked", since tries all available methods until it >>succeeds. "strict" is more secure. -- Reini Urban http://xarch.tu-graz.ac.at/home/rurban/ |