Well got this message after creating the first user on a windows system.
(Apache/2.0.55 (Win32) PHP/5.0.5 and Mysql 4.1 also in MySql 5)
On my Linux System it work well. Same Apache and PHP version.

Have no idea what to do

Comments

moshe weitzman’s picture

We need some more information on this. Anyone else experiencing same?

puregin’s picture

I can confirm that this problem exists:

Drupal HEAD, CVS updated Dec 13, 2005 at 9:22pm PST.
Apache 2.0.54, PHP 5.0.4, Mysql 4.1.15, Fedora Core 4.

Created a new database per INSTALL.mysql.txt, INSTALL.txt

Created the first user by clicking on the link on the
first welcome page, got the e-mail.

Clicking on the generated login link embedded in the email
takes me to my site, but I get 'Access denied/You are not authorized
to access this page'

Using mysql, I can confirm that the user entry was created
in the users table.

Sigh.

rituka’s picture

dats not a bug .actually this version is designed such dat after making first account it keeps u logged in .you just have to change your password there n the admin account is ready to use.

As u were already logged in so when u clicked on login link provided in your password mail u got the access denied page.

puregin’s picture

No, that's not the problem.

There is no option to change the password.

puregin’s picture

There is no 'access' attribute set for the path /user/1/edit

puregin’s picture

Sorry - w/ reference to the last post, this is in

_menu_item_is_accessible()

in menu.inc. So access is denied...

Chris Johnson’s picture

This looks like it must be a PHP5 related problem. I just tried to duplicate it using PHP 43.10, MySQL 4.1.12 and Apache 1.3.33, and it worked fine.

puregin’s picture

I've been poking about, and here's what I've found:

If a user logs in via a one-time password, user_pass_reset() checks their one-time password, and redirects them using drupal_goto('user/' . $user->uid . '/edit')

Note $user is a global object.

Unfortunately, in PHP5, between the call and the invocation, $user->uid has been set to '0' (since the user is doing this without having logged in, i.e., is an anonymous user). Hence the check 'access' => $admin_access || $user->uid == arg(1) fails.

Suggestions?

puregin’s picture

Status: Active » Fixed

OK, after way too many hours staring at this, I believe that this problem can be traced to the .htaccess file.

When I removed the .htaccess file, everything started working as I expected. After tweaking the .htaccess file, I found that the configuration option that seemed to be the culprit was:

php_value mbstring.func_overload 0

Take this out, I get the bug as reported; put it in, everything works fine. This seems to cause problems only in this odd special case of the first account being created.

So - try removing your .htaccess file, and see if that fixes the problem

tsedeke, I'm marking this as 'fixed' - if you still have a problem, we'll reopen.

Djun

puregin’s picture

Just to follow up: if removing the .htaccess file does resolve the problem, examine it carefully, fix up any errors, and replace it to enable clean URLs, and to protect various files.

The "recommended" .htaccess file can be found here:http://cvs.drupal.org/viewcvs/drupal/drupal/.htaccess?view=markup

dumbo12’s picture

When I install the CVS version from 12.12.2005 the problem was fixed.
Hope you have all the same experience.

Anonymous’s picture

Status: Fixed » Closed (fixed)