Cannot Login to Admin post-install

[wlansource]

Installation goes smoothly without errors. The main blog page displays correctly. After clicking on the admin login link the details entered during installation are used. However the login fails and says incorrect details were entered.

Attempted to reset the password via phpmyadmin and this made no difference.

We are using zend optimised PHP and MySQL on a Bluequartz customised image of CentOS.

Any advice is appreciated.

Thanks
jeremy

[azel]

When you reset the password, did you make a new MD5 hash?

Perhaps Garvins instructions in this thread might help: http://www.s9y.org/forums/viewtopic.php ... t+password

[Michael Harrison]

I tried to upgrade my blog to the latest nightly snapshot and now can't login. I've used the md5 that garvin recommended "john" but when I login using a username that's in the sql table the blog still comes back with "You appear to have entered an invalid username or password"

Any ideas?

[garvinhicking]

Hi Michael!

Are you by any chance using any .htaccess password protection on your blog? This overrides the internal login routine.

Regards,
Garvin

[Michael Harrison]

Unfortunately no, I've turned that off before attempting a login.

[garvinhicking]

Hi!

How exactly did you turn it off? How does your .htaccess look like now?

Also, can you check if the author still exists in your serendipity_authors table? If necessary, try to set the proper MD5 hash you need again?

Best regards,
Garvin

[Michael Harrison]

I'm turning it off by commenting out the relevant lines in .htaccess. Here's my current version.

I'm now restoring a complete backup of 1.0 and attempting the upgrade from scratch. Hopefully that will go better.


---------------------

ErrorDocument 403 /403.shtml

#AuthType Basic
#AuthName "Authorisation: Serendipity Upgrade IN PROGRESS"
#AuthUserFile /home/dragon5/.htpasswd
#require valid-user

# BEGIN s9y
ErrorDocument 404 /blog/index.php
DirectoryIndex /blog/index.php
php_value session.use_trans_sid 0
php_value register_globals off

RewriteEngine On
RewriteBase /blog/
RewriteRule ^(archives/([0-9]+)-[0-9a-z\.\_!;,\+\-\%]+\.html) index.php?/$1 [NC,L,QSA]
RewriteRule ^(authors/([0-9]+)-[0-9a-z\.\_!;,\+\-\%]+) index.php?/$1 [NC,L,QSA]
RewriteRule ^(feeds/categories/([0-9;]+)-[0-9a-z\.\_!;,\+\-\%]+\.rss) index.php?/$1 [NC,L,QSA]
RewriteRule ^(feeds/authors/([0-9]+)-[0-9a-z\.\_!;,\+\-\%]+\.rss) index.php?/$1 [NC,L,QSA]
RewriteRule ^(categories/([0-9;]+)-[0-9a-z\.\_!;,\+\-\%]+) index.php?/$1 [NC,L,QSA]
RewriteRule ^archives([/A-Za-z0-9]+)\.html index.php?url=/archives/$1.html [NC,L,QSA]
RewriteRule ^([0-9]+)[_\-][0-9a-z_\-]*\.html index.php?url=$1-article.html [L,NC,QSA]
RewriteRule ^feeds/(.*) index.php?url=/feeds/$1 [L,QSA]
RewriteRule ^unsubscribe/(.*)/([0-9]+) index.php?url=/unsubscribe/$1/$2 [L,QSA]
RewriteRule ^approve/(.*)/(.*)/([0-9]+) index.php?url=approve/$1/$2/$3 [L,QSA]
RewriteRule ^delete/(.*)/(.*)/([0-9]+) index.php?url=delete/$1/$2/$3 [L,QSA]
RewriteRule ^(admin|entries)(/.+)? index.php?url=admin/ [L,QSA]
RewriteRule ^archive/? index.php?url=/archive [L,QSA]
RewriteRule ^(index|atom[0-9]*|rss|b2rss|b2rdf).(rss|rdf|rss2|xml) rss.php?file=$1&ext=$2
RewriteRule ^(plugin|plugin)/(.*) index.php?url=$1/$2 [L,QSA]
RewriteRule ^search/(.*) index.php?url=/search/$1 [L,QSA]
RewriteRule ^comments/(.*) index.php?url=/comments/$1 [L,QSA]
RewriteRule ^(serendipity\.css|serendipity_admin\.css) index.php?url=/$1 [L,QSA]
RewriteRule ^index\.(html?|php.+) index.php?url=index.html [L,QSA]
RewriteRule ^htmlarea/(.*) htmlarea/$1 [L,QSA]
RewriteRule (.*\.html?) index.php?url=/$1 [L,QSA]

<Files *.tpl.php>
deny from all
</Files>

<Files *.tpl>
deny from all
</Files>

<Files *.sql>
deny from all
</Files>

<Files *.inc.php>
deny from all
</Files>

<Files *.db>
deny from all
</Files>

# END s9y




Options All -Indexes

<Files 403.shtml>
order allow,deny
allow from all
</Files>

<Files .htaccess>
order allow,deny
deny from all
</Files>

order deny,allow

[Michael Harrison]

It turns out that the .htaccess password control does *not* interfere with normal s9y logon.

I've just restored a backup of the blog and login works fine with the password control in place.

I've got other issues with my hosting company (folder permissions and such) to work out before I attempt the upgrade again. They recently moved my "server" to a different machine and screwed a number of permission settings.

[davened]

Hi, I'm also having trouble loggin into the administration system.
I CAN login using the set passwords in a fresh install
admin, admin

I log into the administration area and can see all the links available on the site.

When I click on any of the navigational links on the site it takes me back to the login page asking for my username and password?

Platform IIS 6, PHP 5.1.4 , No ImageMagik

can login but can't navigate as admin?
Please help.

[garvinhicking]

Hi!

When using IIS 6 please read http://blog.s9y.org/archives/160-Serend ... s-IIS.html

Regards,
Garvin