By rherrick on

This problem appears to be described in this issue: http://drupal.org/node/325540. That is marked as a duplicate, but the issue that it's supposedly a duplicate of doesn't appear to be related to the issue that I'm having. I've also posted this as an issue at http://drupal.org/node/342412.

I have the following versions of software:

* Microsoft Windows 2000 Advanced Server
* Internet Information Services v.5
* PHP Version 4.4.7
* MySQL 4.1.20-max-log
* Drupal 6.6 (downloaded and installed today)

Here's what happens. I go through, create the database, and complete the installation. Once that's completed, I have my admin user and I'm logged in as that user and can change configuration, create and edit content, and do everything I should be able to. I have the domain cookies that are present when validated and logged in attached to the issue posting http://drupal.org/node/342412.

The problem comes when I log out. I can't log back in. On the main page, I just get turned back, no message or anything to indicate that the login failed. I've attached the headers for this in ignored_login_http_headers.txt to the issue posting http://drupal.org/node/342412. I can't check on Access Denied or anything in the logs because of course at this point I'm locked out of the site.

When I try to do a reset password, I get the email OK, but then when I actually go to do the reset, that's where I get the Access Denied error.

You can actually see all of these things in action:

* Go to http://www.elyconsultingengineering.com and click Create new account.
* Put in a user name and email and click Create new account button.
* Once you get the email you can try to log in. That won't work.
* Try to reset the password. That won't work either.

Now this is complicated by the fact that the create new account function is no longer working, although it did earlier. The account itself is actually created, but then it's just grinding and not actually mailing the password. The CGI script is timing out. This may be a transitory ISP issue.

This is really frustrating, everything's gone quite smoothly up until this point, and now I've spent literally HOURS trying to figure out something that should be quite basic!

One other note: I don't seem to have the login_destination module mentioned in some other similar issues. Here's the contents of my module folder:

* aggregator
* block
* blog
* blogapi
* book
* color
* comment
* contact
* dblog
* filter
* forum
* help
* locale
* menu
* node
* openid
* path
* php
* ping
* poll
* profile
* search
* statistics
* syslog
* system
* taxonomy
* throttle
* tracker
* translation
* trigger
* update
* upload
* user

Update: The user account creation is now working. You can create a new account, get the password emailed to you, then try to log in with that. Then try to reset it. None of it works.

⋅ Categories: Drupal 6.x

Comments

rherrick’s picture

rherrick commented

I have narrowed this down. Basically something goes weird when I'm trying to reset user passwords. As I mentioned, when I install and configure the site, I have a valid admin session and can add content, add and administer users, etc. It seems I can do almost anything. But when I add a user, then go back and try to change that user's password, I get the header sequence shown in the attachment "fail_headers.txt" in the issue posted. This may happen when I just try to update a user without updating the password, but I'm not sure (it's time consuming to go through these processes repeatedly!).

So there appear to be two problems, which I think are probably related:

  • Users can't log in. The front page just cycles through and returns without a message.
  • Changing user passwords causes an HTTP 403, which in turn causes the session to fail. Then I'm logged out and denied totally, because of course I can't log back in.

Please, any insight into this issue would be hugely helpful, even it's that I need to move ISP, although as this isn't my own site, that's a last resort.

geodaniel’s picture

geodaniel commented

I've tried signing up on your site and I also can't log in. It seems like it's logging me in, redirecting me to my account page, but by that point I've lost my session. I still have the cookie in my browser though, due to expire next month. Are the sessions definitely being stored in your sessions table?

snoop168’s picture

snoop168 commented

If you look in your sessions table after you attempt to login for some reason it is regenerating another session and making it UID 0 which is anonymous. But the session for UID 1 is also present in the table. This means that for some reason you are being logged in as UID 1 but then immediately changed to UID 0.

This problem seems to be correlated to the version of PHP that is running on the server, as I get this problem on my live server, but my local test server works fine.... Anyone have any clue what it is?

My Live server (the one with the problem) = PHP 4.4.7
My Test Server (working) = PHP 5.2

Does anyone know a fix to this? I see a lot of people having this problem but no concrete answers.

Version of Drupal is 6.8 but the problem existed in 6.6 and 6.7 also. Probably prior to those versions also but I just started using it.

splunge’s picture

splunge commented

And it results in me being completely locked-out of my website. Needless to say, I am not pleased. Surely this is a top-priority issue, because if admins are unable to login to their own sites, all other discussions here are essentially moot.

I'm on v6.4.

Dogtag’s picture

Dogtag commented

I cannot log onto my site from my desktop, but I can from my laptop. This makes me think it is something local but I cannot figure out what it is. My Drupal install is 6.8, on an Apache server (hostgator). Desktop is WinXP Pro SP2, FF 2.0.0.20 and IE 7.0.5730.13. Laptop is WinXP Pro SP2 and FF 3.0.5. I do not like FF 3 and do not plan to use it on the desktop for as long as possible. I can log into my default site without a problem but my newly-installed other site (multi-site) acts as described above. I cannot log in from the desktop with IE, either.

I have tried the following:

  • Cleared browser cache
  • Cleared browsing history
  • Cleared all cookies added by the site
  • Cleared authenticated sessions
  • Closed/reopened browser (made sure it closed all the way)

Any ideas? I'd be grateful for any suggestions.

Thanks,
~Dogtag

kjl’s picture

kjl commented

Rherrick, you might want to check if PHP is running in CGI mode:

http://drupal.org/node/56654

That will cause this problem on IIS.