I set my COOKIEDOMAIN to the IP address of the machine as I do not have
a DNS entry yet.
After that the login worked, though an empty string may have worked just
as well.

-  
John Jones
East Carolina University
College of Technology and Computer Science
Science and Technology Bldg. Suite 100
Greenville, NC 27858-4353
252-737-1940, Fax 252-328-4250



-----Original Message-----
From: Josh Thompson <josh_thomp...@ncsu.edu>
Reply-To: vcl-dev@incubator.apache.org <vcl-dev@incubator.apache.org>
To: vcl-dev@incubator.apache.org <vcl-dev@incubator.apache.org>
Subject: Re: VCL Web Front-end Troubleshooting
Date: Tue, 17 Mar 2009 11:38:27 -0400


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Brian,

COOKIEDOMAIN should be set to the domain of the webserver hosting the vcl 
code.  For example, for the install at NCSU, the webserver is vcl.ncsu.edu 
and COOKIEDOMAIN is set to ".ncsu.edu".  I think (though untested) that if 
you are accessing your site by IP address instead of a hostname, you can set 
COOKIEDOMAIN to an empty string ("") to get it to work.

The VCLAUTH cookie is an encrypted cookie that gets set when you log in.  VCL 
checks for this cookie at every page load.  If the cookie does not exist, if 
it cannot be decrypted, or if a timestamp contained in it is expired, then 
you are directed to the selectauth page.

Josh

On Tuesday March 17, 2009, Brian Bouterse wrote:
> Thanks John,
>
> I've set the COOKIEDOMAIN variable, to what I think it should be.
> What should this be set to?  Could someone give an example?
>
> Also, what is the VCLAUTH cookie?
>
> Thanks!
> Brian
>
>
> Brian Bouterse
> Secure Open Systems Initiative
> 919.698.8796
>
> On Mar 17, 2009, at 9:39 AM, John Jones wrote:
> > Brian,
> >
> > I recently had the same issue and received an answer back quickly from
> > the list that, when implemented, fixed the login issue.
> > Look for the ideas posted by Josh Thompson.
> >
> > I will copy/paste below:
> >
> > From: John Jones
> > Reply-To: vcl-u...@incubator.apache.org <vcl-
> > u...@incubator.apache.org>
> > To: vcl-u...@incubator.apache.org <vcl-u...@incubator.apache.org>
> > Subject: Re: Installation issue, need help
> >
> > COOKIEDOMAIN indeed!
> > Thanks for the tip.
> >
> > Now on the the next steps...
> >
> > -
> > John Jones
> > East Carolina University
> > College of Technology and Computer Science
> > Science and Technology Bldg. Suite 100
> > Greenville, NC 27858-4353
> > 252-737-1940, Fax 252-328-4250
> >
> >
> >
> > -----Original Message-----
> > From: Josh Thompson <josh_thomp...@ncsu.edu>
> > Reply-To: vcl-u...@incubator.apache.org <vcl-
> > u...@incubator.apache.org>
> > To: vcl-u...@incubator.apache.org <vcl-u...@incubator.apache.org>
> > Subject: Re: Installation issue, need help
> > Date: Fri, 13 Feb 2009 14:14:25 -0500
> >
> >
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > John,
> >
> > Here are the things I'd suggest to look at:
> >
> > - -make sure you have ssl set up for the site
> > - -make sure COOKIEDOMAIN in conf.php is set correctly
> > - -make sure the VCLAUTH cookie is actually getting set
> > - -use the network tab of the firebug add-on for firefox to see what
> > redirects
> > you are getting
> >
> > Let us know what you find.  If the VCLAUTH cookie is getting set, the
> > redirects firebug shows would be particularly helpful to know.
> >
> > Josh
> >
> > On Friday February 13, 2009, John Jones wrote:
> >> All,
> >>
> >> I have been recently tasked with installing the VCL for testing in
> >> our
> >> department.  So far I have tested it on RHEL 4 and RHEL 5.  I also
> >> had
> >> another admin go through the same install steps without any input
> >> from
> >> me (beyond the initial request), both had the same end result.
> >>
> >> I downloaded the latest VCL code from the incubator site earlier in
> >> the
> >> week (Monday, I think), so it is very recent code.
> >> I was wondering if any of you would be able to help me debug a
> >> specific
> >> issue.  The issue is that after a login with "admin" and the correct
> >> password (listed in step 12), I get returned right back to the login
> >> screen.  If I purposely type in the wrong password, it shows "login
> >> failed" in red.
> >>
> >> Here is what I believe is working:
> >>
> >> php-info shows that php is working fine and that mcrypt is loaded.
> >> Apache is working because the vcl main page shows up and php-info
> >> works...
> >> Mysql is receiving the login query.  When I take the vcl-login
> >> query(s)
> >> from the mysql logs and run it, I am getting a row returned to me for
> >> the user.
> >> If I comment this section of code from authentication.php:
> >>
> >>    //    if (validateLocalAccount($userid, $passwd)) {
> >>
> >> And replace with:
> >>
> >>               if (1) {
> >>                //set cookie
> >>                $cookie = getAuthCookieData("$use...@local");
> >>                if(version_compare(PHP_VERSION, "5.2", ">=") == true)
> >>                        setcookie("VCLAUTH", "{$cookie['data']}", 0,
> >> "/", COOKIEDOMAIN, 0, 1);
> >>                else
> >>                        setcookie("VCLAUTH", "{$cookie['data']}", 0,
> >> "/", COOKIEDOMAIN);
> >>                //load main page
> >>                setcookie("VCLSKIN", "NCSU", (time() + (SECINDAY *
> >> 31)),
> >> "/", COOKIEDOMAIN);
> >>                header("Location: " . BASEURL . SCRIPT);
> >>                dbDisconnect();
> >>                exit;
> >>        }
> >>
> >> I still get put back to the login screen.  I am using the "local
> >> account" type of login as that is my only option at this point.
> >>
> >> Is there a log file I can check to see what is going on after I click
> >> "login"?  Or some other means to gather more information?
> >>
> >> Thanks for any help you can provide.
> >>
> >> -
> >> John Jones
> >> East Carolina University
> >> College of Technology and Computer Science
> >> Science and Technology Bldg. Suite 100
> >> Greenville, NC 27858-4353
> >> 252-737-1940, Fax 252-328-4250
> >
> > - --
> > - -------------------------------
> > Josh Thompson
> > Systems Programmer
> > Virtual Computing Lab (VCL)
> > North Carolina State University
> >
> > josh_thomp...@ncsu.edu
> > 919-515-5323
> >
> > my GPG/PGP key can be found at pgp.mit.edu
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.6 (GNU/Linux)
> >
> > iD8DBQFJlcaTV/LQcNdtPQMRAtkyAJ9tXVp8RKbGiXtJqy3N59pH13ALnACeMu0+
> > 4H4vYNrztV501oLvf4xFB/E=
> > =m2pP
> > -----END PGP SIGNATURE-----
> >
> >
> > -
> > John Jones
> > East Carolina University
> > College of Technology and Computer Science
> > Science and Technology Bldg. Suite 100
> > Greenville, NC 27858-4353
> > 252-737-1940, Fax 252-328-4250
> >
> >
> >
> > -----Original Message-----
> > From: Brian Bouterse <bmbou...@ncsu.edu>
> > Reply-To: vcl-dev@incubator.apache.org <vcl-dev@incubator.apache.org>
> > To: vcl-dev@incubator.apache.org <vcl-dev@incubator.apache.org>
> > Subject: VCL Web Front-end Troubleshooting
> > Date: Mon, 16 Mar 2009 18:33:42 -0400
> >
> >
> > I installed and configured the VCL web front-end component with the
> > VCL database component inside a VM, but I'm having trouble getting
> > past the login screen.  The general description is that I am presented
> > with the standard VCL login screen, I enter the default user/pass, but
> > it sends me right back to the login screen.  There are no errors
> > reported, but I can't get past the login screen.
> >
> > Any ideas of what is causing this, and how I can dig more into this
> > problem to troubleshoot it?
> >
> > Thanks,
> > Brian
> >
> >
> > Brian Bouterse
> > Secure Open Systems Initiative
> > 919.698.8796



- -- 
- -------------------------------
Josh Thompson
Systems Programmer
Virtual Computing Lab (VCL)
North Carolina State University

josh_thomp...@ncsu.edu
919-515-5323

my GPG/PGP key can be found at pgp.mit.edu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFJv8P0V/LQcNdtPQMRAqoCAJ9oTJH59iPKnuANOUxbLirESgraDgCcDdko
2nmtexIU5molwFgnbchwiJ8=
=OPwd
-----END PGP SIGNATURE-----

Reply via email to