By apemantus on

I'm pulling my hair out here. Anonymous users cannot access /user to login - if they do so they just get the Access Denied page.

If you're logged in [via admin], even if that user has NO permissions (beyond what anonymous has), you can access /user. For various reasons, I need users to login via /user rather than /admin.

The Access Denied attempts by anonymous show up in the Access Denied log.

The only additional node access module I'm using is, I think, Domain Access, and that doesn't seem to be interfering.

It doesn't *seem* to be a permissions issue as users with no permissions can access it once logged in.

I've rebuilt menu and node permissions and cleared caches.

Any ideas on what's causing this? Any ideas on how to debug?

⋅ Categories: Drupal 6.x

Comments

j2parker’s picture

j2parker commented

When the 'access content' permission is removed for anonymous users I see access denied records in the log each time the front page is accessed prior to login.

Is the Access Denied page you reference the 403 page? Or do you not see the login block? Check the visibility settings for the user login block at admin/build/block.

apemantus’s picture

apemantus commented

Yes, I see the 403 page.

The anonymous user has the Access Content permission.

The User Login block is set to display for All Languages (multilingual site); on "Show block for specific roles" no roles are ticked; it is set to "Show on every page except the listed pages." (with nothing listed). It appears on /admin in the left hand menu.

I'm using garland for the admin theme and a custom theme elsewhere, with /user obv. being the custom theme. It's not a theme issue - i.e. switching to garland as my default theme still doesn't work.

Is either very random or I'm missing something obvious...

j2parker’s picture

j2parker commented

Does the problem remain if your switch the site to the garland theme?

You didn't mention the user specific settings for the login block.

apemantus’s picture

apemantus commented

Yes, the problem stays the same if I switch to garland.

There are no user specific settings for the login block (i.e. none of the roles are ticked). The login block DOES show up for Anonymous users at /admin, but there's no login form at /user/ or /user/login/ so my assumption is it is to do with the user page/node rather than the block (assuming the login block is what's used at /user).

apemantus’s picture

apemantus commented

Am still baffled if anybody has any help. How are pages like /user called - they don't appear in the nodes table. Is there anything I can stick in my template/custom module to help debug what's causing access problems?

j2parker’s picture

j2parker commented

Suggest you look into Domain Access module. It controls node access rights.

apemantus’s picture

apemantus commented

After ages spent debugging I finally tracked it down to a bug in an unrelated module, IP Authenticator, which I had forgot I had enabled as it's not yet being used. Fixing this module made everything work fine.

Thanks for trying to help!

robinhood1362’s picture

robinhood1362 commented

I see the same 'access denied' page, now I can't even head to login page (/user/login) I get a "access denied". I have the IP Authenticator module on. What did you exactly do with the IP Authenticator to "fix" it?!

vacilando’s picture

vacilando commented

Indeed ipAuthenticator is the culprit... see http://drupal.org/node/555096

—
Vacilando services | blog @vacilandois