The cookie_secret is used in the generation of the HMAC in the
authentication ticket that gets sent down in the cookie. In other
words, simply logging in again should fix it. You shouldn't even have
to reset the password, since it doesn't get used anywhere except in
that.

Can you see any pattern in the failures? Are there any common
characters? I know that, at one point, usernames could not contain
spaces. Are there any other special characters you can see? How about
in the passwords?

My bet is that we have an interaction we don't even know about between
the usernames and cookie secret. If you can find a pattern, we can fix
it.

On Sun, Oct 14, 2012 at 2:32 PM, Kai H. <[email protected]> wrote:
> Oh, one thing to be more specific.
>
>
>> The curious thing is, that afterwards i could not login with some of the
>> existing users, but could login with some others.
>
>
> That means that it says "Wrong credentials" for some users (for the correct
> credentials), but not for all of them. I know that sounds weird, but thats
> why i'm asking ;)
>
> --
> You received this message because you are subscribed to the Google Groups
> "TurboGears" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/turbogears/-/bNd3U38xWt8J.
>
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/turbogears?hl=en.



-- 
Michael J. Pedersen
My Online Resume: http://www.icelus.org/ -- Google+ http://plus.ly/pedersen
Google Talk: [email protected] -- Twitter: pedersentg

-- 
You received this message because you are subscribed to the Google Groups 
"TurboGears" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/turbogears?hl=en.

Reply via email to