The cookie_secret is used in the generation of the HMAC in the authentication ticket that gets sent down in the cookie. In other words, simply logging in again should fix it. You shouldn't even have to reset the password, since it doesn't get used anywhere except in that.
Can you see any pattern in the failures? Are there any common characters? I know that, at one point, usernames could not contain spaces. Are there any other special characters you can see? How about in the passwords? My bet is that we have an interaction we don't even know about between the usernames and cookie secret. If you can find a pattern, we can fix it. On Sun, Oct 14, 2012 at 2:32 PM, Kai H. <[email protected]> wrote: > Oh, one thing to be more specific. > > >> The curious thing is, that afterwards i could not login with some of the >> existing users, but could login with some others. > > > That means that it says "Wrong credentials" for some users (for the correct > credentials), but not for all of them. I know that sounds weird, but thats > why i'm asking ;) > > -- > You received this message because you are subscribed to the Google Groups > "TurboGears" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/turbogears/-/bNd3U38xWt8J. > > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/turbogears?hl=en. -- Michael J. Pedersen My Online Resume: http://www.icelus.org/ -- Google+ http://plus.ly/pedersen Google Talk: [email protected] -- Twitter: pedersentg -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/turbogears?hl=en.

