Authentication Problems - Repeated on multiple systems

zherebet · Post by **zherebet** » Thu Oct 06, 2005 6:39 am

Hi Everyone,

I set up three systems running the 1.21.3 version of ZM and one system running 1.21.2. When I attempt to log in with admin/admin for the .2 system, it works. When I attempt to log into 1.21.3 systems - the following happens:
1) I get taken to the page that says "ZoneMinder - Login - Logging In"
2) The system refreshes back to index.php and the log in script appears again.

I checked my logs - nothing in any of the logs except the access log which says:

Code: Select all

<myIP> - [06/Oct/2005:02:36:30 -0400] "POST /index.php HTTP/1.1" 200 743
<myIP> - [06/Oct/2005:02:36:32 -0400] "GET /index.php HTTP/1.1" 200 1068

I have been able to recreate this problem but have not found the solution - can anyone help?

Post by **cordel** » Thu Oct 06, 2005 8:01 am

Are they the same on the one that works?
What distro are you using?
What version of apache and php?
What warning do you get on these machines that you are unable to login in with when you ran configure? (check the logs in the source directory)
That is probably related to openssl or one of the other development files that are missing.
Regards,
Cordel

zherebet · Post by **zherebet** » Wed Oct 19, 2005 7:19 am

What distro are you using?

I'm using base KNOPPIX 3.9 - 4.0 installs

What version of apache and php?

I compile my own version of apache 1.3.34, php-4.4.0, mysql 4.1.14.

What warning do you get on these machines that you are unable to login in with when you ran configure? (check the logs in the source directory)

I recieve the warnings regarding --with-ffmpeg, --with-lame, a warning regarding libavcodec.a, libavformat.a, libmp3lame.a.

No other warnings.

That is probably related to openssl or one of the other development files that are missing.

openssl is installed by default with knoppix, along with all of the development files. Perhaps I'm missing something?

Thanks in advance![/quote]

zherebet · Post by **zherebet** » Wed Oct 19, 2005 7:22 am

Cordel -

Are you sure this has to do with SSL/libcripto? The system itself seems to be authenticating. The problem is that it's not maintaining the authentication and just throws the user back to the login page.

Post by **cordel** » Wed Oct 19, 2005 8:33 am

No if ZM configure found openssl libs then that is not the problem.
More likely that the some thing in the making of MySQL, Apache, and PHP. I did compile my own like that last year as part of my LFS and remember that you had to go into those packages and jump around between them getting everything set up although I don't recall the exact order that it all had to happen to work.
There is no clue in zmdc.log?
What version of PHP?
As I understand that PHP >=4.4 has some issues and there is a thread here covering that.

Regards,
Cordel

lazyleopard · Post by **lazyleopard** » Wed Oct 19, 2005 10:14 am

cordel wrote:As I understand that PHP >=4.4 has some issues and there is a thread here covering that.

Several. The most recent is thread 5026. A forum search on ZM_OPT_USE_AUTH will pick most of them out. My best guess so far is that it's something to do with the way php 4.4.0 handles cookies that has changed, and zoneminder is being tripped up by it. I found I was able to login once provided I ran zm.php with debug enabled and deleted cookies every time, but that gets a little tedious. (See thread 4705 ).

zherebet · Post by **zherebet** » Wed Oct 19, 2005 6:45 pm

lazyleopard wrote:
cordel wrote:I found I was able to login once provided I ran zm.php with debug enabled and deleted cookies every time, but that gets a little tedious. (See thread 4705 ).

I was able to do that succesfully as well - if you log into the page, then right before it refreshes pause, delete cookies, and reload - it will let you in.

Cordel - php version 4.4.0.

Nothing is seen in the logs. This most likely is an issue with the way cookies are handled on the server side after a succesful authentication.

I'm willing to provide a log-in to one of the systems that has this problem. Let me know and I'll PM.

Post by **cordel** » Wed Oct 19, 2005 6:57 pm

You can follow this issue here:
http://www.zoneminder.com/forums/viewto ... 6&start=15

Where there is an attempt to work it out.
All my machines are for the most part RH so I can not personaly duplicate the issue, and I suspect that the web interface will need to be updated with php 5 now making it's way into the Distros so this problem will hopefuly be taken care of before if not by then.
Regards,
Cordel

zherebet · Post by **zherebet** » Wed Oct 19, 2005 7:04 pm

thanks - im moving to that thread.

i'm considering this thread dead.