From: Antony S. <Ant...@ph...> - 2009-09-10 17:19:58
|
On Thursday 10 September 2009 13:32, Reini Urban wrote: > 2009/9/9 Antony Stone <Ant...@ph...>: > > On Wednesday 09 September 2009 16:35, Reini Urban wrote: > >> 2009/9/9 Antony Stone <Ant...@ph...>: > >> > On Sunday 06 September 2009 14:02, Antony Stone wrote: > >> >> ; True User Authentication: > >> >> ; To require user passwords: > >> >> ; ALLOW_ANON_USER = false > >> >> ; ALLOW_ANON_EDIT = false > >> >> ; ALLOW_BOGO_LOGIN = false, > >> >> ; ALLOW_USER_PASSWORDS = true. > >> >> > >> >> I have set all four variables to the required values and restarted > >> >> Apache, and yet it is still possible to log in with a random username > >> >> and no password (ie: a Bogo login). > > I have not explicitly set USER_AUTH_ORDER (the instructions for getting > > True User Authentication don't tell me I need to) > > Should I select "USER_AUTH_ORDER = Db" instead (since I am using a MySQL > > backend database, I'd quite like all the authentication data to be in > > there as well)? > > Yes, please. "USER_AUTH_ORDER = Db" for Mysql auth Thanks, that has created the "Login required" functionality that I needed (I think it would be good if the docs in the config file said that this is necessary). I put a username / password into the MySQL 'pref' table by hand, and I can log in with those credentials. Now I just need to deal with my other problem - how to allow the Admin user to log in so that s/he can manage the other user accounts. I have set ADMIN_USER = Admin ADMIN_PASSWD = Admin in config.ini, but I can't log in with these credentials. Do I need to manually insert them into the MySQL table as well, so that this Admin User can then add the other normal accounts? The documentation is not too clear on how the accounts are managed, and since I haven't been able to log in as Admin yet, I'm simply assuming that it's done through the /PhpWikiAdministration page... Any helpful guidance would be much appreciated. Thanks, Antony. -- In the Beginning there was nothing, which exploded. - Terry Pratchett Please reply to the list; please don't CC me. |