About HyperNews
 Next-in-Thread Next-in-Thread
 Next Message Next Message

Feedback directories, authentication 

Forum: HyperNews Security
Date: 1999, Feb 03
From: D Robinson

I recently installed version 1.9.9, and the first problem I've run into is accessing http://<my-server>/HyperNews/SECURED/edit-member.pl because edit-member.pl is in the .scripts directory. So I typed .scripts in place of SECURED in the browser location bar... unfortunately edit-member.pl tries to run SECURED/change-member.pl, but change-member.pl is also in the .scripts directory! So I made a copy of change-member.pl into .scripts, but I'm not sure that's how things are supposed to work.

The next problem I ran into was with user authentication after doing a multiple installation. The original installation and installation #2 are in different directories in my cgi-bin, but the .scripts directories are linked. For installation #2, the admin ID had no password set, so I went through .scripts/edit-member.pl to set both a new password and ID. Now when I try to add a message to the board, I get past the authentication dialog window with the new ID and password, _but_ the page that loads has a nice big red error message that says, "... Board does not know who the user is and an unknown user is not permitted to perform this action." The ID and password from installation #1 do not work here.

Another problem with installation #2: in order to get into edit-member.pl in installation #2, I had to use the ID and password from installation #1.

If these problems were my own doing, oh well. If other people have run into these same problems, then at least I've made a mention of them. :)

 Next-in-Thread Next-in-Thread
 Next Message Next Message
Inline:
 1 1
 All All
Outline:
 1 1
 2 2
 All All

 Add Add
to: "directories, authentication"

 Members Members
 Subscribe Subscribe
 Admin Mode Admin Mode
 Show Frames Show Frames
 Help Help


Installation Topics:
  • Creating Base Articles, also called Forums.
  • Security Issues regarding HyperNews
  • Bidirectional E-mail gateway

    Earn money with Scour!
    Google
     
    Web www.HyperNews.org
    Earn money with Scour!