On Fri, Dec 27, 2002 at 04:25:07PM +0000, David R. Newman wrote: > So I then backed up my databases, and installed a new Midgard > database from midgard-data-1.4.4. I asked it to install Asgard, > but not the example site. I also set the Apache log level to > debug (as one always does with Midgard :-( ).
MMP offers separate logfiles for midgard, and tunability of these logs separate from apache. non-MMP can do that too, but not without a minor mod to the source. > On trying to access http://localhost:8000/asgard/ my browser > poped up an authentication dialog, asking for a username and > password to access SG0. So I typed in the usual admin and > password. The authentication dialog went away. The browser then > returned a 403 forbidden error page. > > Just in case I had mistyped the username and password, I tried > other combinations. Everything except username admin and password > password made the authentication dialog pop up again. Only > the admin/password combination was accepted by the server. I also > checked the person table in the Midgard database, and found an > entry for admin, password **password in it, with sitegroup 0. You did specify the sitegroup name with the non-admin logons? > [Fri Dec 27 09:57:42 2002] [debug] mod_midgard.c(102): [client > 127.0.0.1] Midgard: no basic auth found, trying cookie auth > [Fri Dec 27 09:57:46 2002] [debug] mod_midgard.c(239): Midgard: closing > 1 database connections for the first request (which you, as the user, won't experience as such), this is normal. The flow of things: User Server Request to asgard, no auth I acknowledge that there could be a response here, but I want auth (401). Log file says, no auth found Pop up auth box, send creds I do not accept the creds you sent me (401 again) Whether the login succeeds or not, the logs will *always* first show an 'unsuccessfull attempt'. The four steps as shown above will look like just one request and one response to you, since browsers will automatically do step 3 and 4 if they get a 401. Emile --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
