Hi Oliver,

if you refused credentials was hit, it means that for some reason they were not accepted. Stepping through the Authenticed element should give you an indication why the startNewSession either returned 'false' or why it didn't trigger the childtrigger value. Are you sure you're entering the correct login/password. I see that you use SHA encryption, did you encrypt the password in the database correctly?

Best regards,

Geert

On 17 May 2006, at 01:32, Oliver Dohmen wrote:

Hi all,

i got a little Problem with RIFE Authentication and a Form Submission.

Scenario is that i want to Submit a Form to authenticate the user.

The Site has the following element :

<element id="authentication" file="rife/authenticated/database.xml" contenttype="text/xml" url="/login"> <property name="datasource"><datasource><config param="DATASOURCE"/></datasource></property>
        <property name="password_encryption">SHA</property>
        <property name="template_name">authentication</property>
        <property name="template_type">enginexml</property>
        <property name="role">admin</property>
        <property name="authvar_type">cookie</property>
        <submission name="credentials">
            <param name="login"/>
            <param name="password"/>
            <param name="remember"/>
        </submission>
        <incookie name="rememberid"/>
        <outcookie name="rememberid"/>
        <childtrigger name="authid"/>
</element>

I tested it with an request in Firefox to get no side effects from other things:

http://localhost:8080/login? submission=credentials&login=admin&password=xxx&remeber=true

I debuged the com.uwyn.rife.authentication.elements.Authenticated class and everything looks fine. The Credentials are validated correctly but i end in the refusedCredentials Method that sends me

<authenticate>
<url href="/login? submission=credentials&submissioncontext=LmF1dGhlbnRpY2F0aW9u"/>
<errors>
  <error>INVALID:credentials</error>
</errors>
</authenticate>

The User is in the database and i get an SessionId.

I hope that are enough infos ?!

Best Regards, odo



_______________________________________________
Rife-users mailing list
[email protected]
http://lists.uwyn.com/mailman/listinfo/rife-users

--
Geert Bevin             Uwyn bvba               GTalk: [EMAIL PROTECTED]
"Use what you need"     Avenue de Scailmont 34  Skype: gbevin
http://www.uwyn.com     7170 Manage, Belgium      AIM: geertbevin
gbevin at uwyn dot com  Tel: +32 64 84 80 03   Mobile: +32 477 302 599

PGP Fingerprint : 4E21 6399 CD9E A384 6619  719A C8F4 D40D 309F D6A9
Public PGP key  : available at servers pgp.mit.edu, wwwkeys.pgp.net


_______________________________________________
Rife-users mailing list
[email protected]
http://lists.uwyn.com/mailman/listinfo/rife-users

Reply via email to