I'm writing from Rome Italy, My server has windows 2000 server, with PHP 4.4.2 and mysql 4.1.20 with an old version of Drupal everything works ok ,but with Drupal 4.7 and 5.1 I get the same problem:
once I have created the first account I can manage everything ok, once I get out I get the message:

Access denied You are not authorized to access this page.

If I ask to change my password and I get the email back, then I can log in again, but when I log out, still I can't log in again.
Il looks like Drupal does not autenticate users and is not distinguish between user 1 and other when trying to log in, even though once I'm in when I change the password, there is difference about users

is there any security check I must do?
Drupaò is also telling me that Microsoft IIS 5.0 is not tested

is there someone capable of helping me?
ciao
thanks

Comments

kredaz’s picture

has anybody encountered this problem?
thank you

rclimb514’s picture

I am having an identical problem on a Solaris machine. I'll be debugging it in the next few days, but this is the first Drupal installation I've worked on, so it might not be lightening fast. Regardless, I'll post when I've got it resolved.

rclimb

rclimb514’s picture

In my case, this problem turned out to be related to the fact that my site was using a nonstandard port number. This appeared to cause several browsers to reject the drupal cookie, incapacitating the login system. However, once I started using a hostname that connected on 80, the problem disappeared. If you aren't using 80, I suggest trying to.

rclimb

Jack_Sparrow’s picture

Try commenting out user.module at line 957:

//sess_regenerate();
return 'user/'. $user->uid;

Not too sure of the consequences of this, but it at least works for me.

Trust this helps.

JS

JStarcher’s picture

Yup, fairly common problem actually.

http://drupal.org/node/105114