This problem appears to be described in this issue: http://drupal.org/node/325540. That is marked as a duplicate, but the issue that it's supposedly a duplicate of doesn't appear to be related to the issue that I'm having.

I have the following versions of software:

* Microsoft Windows 2000 Advanced Server
* Internet Information Services v.5
* PHP Version 4.4.7
* MySQL 4.1.20-max-log
* Drupal 6.6 (downloaded and installed today)

Here's what happens. I go through, create the database, and complete the installation. Once that's completed, I have my admin user and I'm logged in as that user and can change configuration, create and edit content, and do everything I should be able to. I have the domain cookies that are present when validated and logged in attached to this posting.

The problem comes when I log out. I can't log back in. On the main page, I just get turned back, no message or anything to indicate that the login failed. I've attached the headers for this in ignored_login_http_headers.txt. I can't check on Access Denied or anything in the logs because of course at this point I'm locked out of the site.

When I try to do a reset password, I get the email OK, but then when I actually go to do the reset, that's where I get the Access Denied error.

You can actually see all of these things in action:

* Go to http://www.elyconsultingengineering.com and click Create new account.
* Put in a user name and email and click Create new account button.
* Once you get the email you can try to log in. That won't work.
* Try to reset the password. That won't work either.

Now this is complicated by the fact that the create new account function is no longer working, although it did earlier. The account itself is actually created, but then it's just grinding and not actually mailing the password. The CGI script is timing out. This may be a transitory ISP issue.

This is really frustrating, everything's gone quite smoothly up until this point, and now I've spent literally HOURS trying to figure out something that should be quite basic!

One other note: I don't seem to have the login_destination module mentioned in some other similar issues. Here's the contents of my module folder:

  • aggregator
  • block
  • blog
  • blogapi
  • book
  • color
  • comment
  • contact
  • dblog
  • filter
  • forum
  • help
  • locale
  • menu
  • node
  • openid
  • path
  • php
  • ping
  • poll
  • profile
  • search
  • statistics
  • syslog
  • system
  • taxonomy
  • throttle
  • tracker
  • translation
  • trigger
  • update
  • upload
  • user
CommentFileSizeAuthor
#2 fail_headers.txt3.25 KBrherrick
ignored_login_http_headers.txt2.07 KBrherrick
auth_cookies.zip989 bytesrherrick

Comments

rherrick’s picture

rherrick commented

Update: The user account creation is now working. You can create a new account, get the password emailed to you, then try to log in with that. Then try to reset it. None of it works.

rherrick’s picture

rherrick commented
StatusFileSize
new fail_headers.txt3.25 KB

I have narrowed this down. Basically something goes weird when I'm trying to reset user passwords. As I mentioned, when I install and configure the site, I have a valid admin session and can add content, add and administer users, etc. It seems I can do almost anything. But when I add a user, then go back and try to change that user's password, I get the header sequence shown in the attachment "fail_headers.txt" below. This may happen when I just try to update a user without updating the password, but I'm not sure (it's time consuming to go through these processes repeatedly!).

So there appear to be two problems, which I think are probably related:

  • Users can't log in. The front page just cycles through and returns without a message.
  • Changing user passwords causes an HTTP 403, which in turn causes the session to fail. Then I'm logged out and denied totally, because of course I can't log back in.

Please, any insight into this issue would be hugely helpful, even it's that I need to move ISP, although as this isn't my own site, that's a last resort.

geodaniel’s picture

geodaniel commented

It sounds like this should be an issue posted in the support forums instead of the issue queue for login destination module, if you're not using that module.

Do you have any non core modules installed?

rherrick’s picture

rherrick commented

I actually have cross-posted it over there at http://drupal.org/node/342442. I ended up posting here because I found that related issue that I mentioned in my original post, but then realized that it may not have been the appropriate spot!

No, in this particular installation, I have no non-core modules installed and in fact have only the default core modules enabled (i.e. forums isn't on, etc.).

geodaniel’s picture

geodaniel commented
Status: Active » Closed (duplicate)

Let's close this issue and move the discussion over there to the other issue.