To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.cad.devOpen lugnet.cad.dev in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 CAD / Development / 9300
Subject: 
[Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 01:51:43 GMT
Highlighted: 
(details)
Viewed: 
1525 times
  
Hey all parts authors and reviewers (and admins)!

I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
uses the same login/security as the rest of the ldraw.org site.  I've got a
simple page up that checks your privileges and tells you:
   - If you are an ldraw.org user
   - If you have PT privileges
   - What PT privileges you have

I would appreciate it if y'all could give this page a hit, and make sure it
gives you the results you expect.  There are a couple of caveats:
   1. The page is protected by the *current* PT security, so you'll get a
regular login prompt when you hit the page.
   2. Only current PT authors/reviewers/admins can do that login, so they're the
only ones who can hit the page.
   3. Unless you also login to the regular ldraw.org site, you'll just be told
you're not logged in.

OK, so you've got that?  Login both places, and hit this page:
   http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi

I'm only going to leave this page up for a couple of days, so give it a go.

In another day or two, I'm going to start switching the PT functions over to use
the ldraw.org membership information.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 03:06:40 GMT
Viewed: 
1509 times
  
In lugnet.cad.dev, Steve Bliss wrote:
Hey all parts authors and reviewers (and admins)!

I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
uses the same login/security as the rest of the ldraw.org site.  I've got a
simple page up that checks your privileges and tells you:
   - If you are an ldraw.org user
   - If you have PT privileges
   - What PT privileges you have

Looks fine to me I have Review and Submit. It also displays something about
POSTNUKESID whatever that is....

In another day or two, I'm going to start switching the PT functions over to use
the ldraw.org membership information.

Cool! Thanks for all your hard work!

ROSCO


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 03:08:00 GMT
Viewed: 
1538 times
  
In lugnet.cad.dev, Steve Bliss wrote:
Hey all parts authors and reviewers (and admins)!

I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
uses the same login/security as the rest of the ldraw.org site.  I've got a
simple page up that checks your privileges and tells you:
   - If you are an ldraw.org user
   - If you have PT privileges
   - What PT privileges you have

I would appreciate it if y'all could give this page a hit, and make sure it
gives you the results you expect.  There are a couple of caveats:
   1. The page is protected by the *current* PT security, so you'll get a
regular login prompt when you hit the page.
   2. Only current PT authors/reviewers/admins can do that login, so they're the
only ones who can hit the page.
   3. Unless you also login to the regular ldraw.org site, you'll just be told
you're not logged in.

OK, so you've got that?  Login both places, and hit this page:
   http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi

I'm only going to leave this page up for a couple of days, so give it a go.

In another day or two, I'm going to start switching the PT functions over to use
the ldraw.org membership information.

Steve

Steve,

I'm getting an error:

Software error:
Failed to connect to DBI:mysql:database=peeron_ldrawnuke;host=localhost using
at ./PT.pm line 234

For help, please send mail to the webmaster (webmaster@ldraw.org), giving this
error message and the time and date of the error.

-Orion


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 07:54:24 GMT
Viewed: 
1613 times
  
In lugnet.cad.dev, Steve Bliss wrote:
Hey all parts authors and reviewers (and admins)!

I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
uses the same login/security as the rest of the ldraw.org site.  I've got a
simple page up that checks your privileges and tells you:
   - If you are an ldraw.org user
   - If you have PT privileges
   - What PT privileges you have

I would appreciate it if y'all could give this page a hit, and make sure it
gives you the results you expect.  There are a couple of caveats:
   1. The page is protected by the *current* PT security, so you'll get a
regular login prompt when you hit the page.
   2. Only current PT authors/reviewers/admins can do that login, so they're the
only ones who can hit the page.
   3. Unless you also login to the regular ldraw.org site, you'll just be told
you're not logged in.

OK, so you've got that?  Login both places, and hit this page:
   http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi

I'm only going to leave this page up for a couple of days, so give it a go.

In another day or two, I'm going to start switching the PT functions over to use
the ldraw.org membership information.

Steve

It just shows me as Admin, even though my PT privs are Admin,Submit,Review

Chris


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 12:34:48 GMT
Viewed: 
1617 times
  
In lugnet.cad.dev, Orion Pobursky wrote:
In lugnet.cad.dev, Steve Bliss wrote:
   http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi

I'm getting an error:

Software error:
Failed to connect to DBI:mysql:database=peeron_ldrawnuke;host=localhost using
at ./PT.pm line 234

For help, please send mail to the webmaster (webmaster@ldraw.org), giving this
error message and the time and date of the error.

I just tried it, and it works for me, logged in and logged out.

It kind of sounds like the user data wasn't available at the time you tried the page.
Could you try it again?

One other thought - do you have session cookies enabled?  The script won't work
without those.  Then again, I thought postnuke required cookies, too.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 14:19:05 GMT
Viewed: 
1627 times
  
In lugnet.cad.dev, Steve Bliss wrote:
In lugnet.cad.dev, Orion Pobursky wrote:
In lugnet.cad.dev, Steve Bliss wrote:
http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi

I'm getting an error:

Software error:
Failed to connect to DBI:mysql:database=peeron_ldrawnuke;host=localhost using
at ./PT.pm line 234

For help, please send mail to the webmaster (webmaster@ldraw.org), giving this
error message and the time and date of the error.

I just tried it, and it works for me, logged in and logged out.

It kind of sounds like the user data wasn't available at the time you tried the page.
Could you try it again?

One other thought - do you have session cookies enabled?  The script won't work
without those.  Then again, I thought postnuke required cookies, too.

Steve

I disabled my Firewall program and it works fine.  Must have been something
involving cookies.

-Orion


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 11 Nov 2003 23:49:40 GMT
Viewed: 
1704 times
  
Steve,

No joy for me.

I logged into the PT OK, as usual:
http://www.brickshelf.com/gallery/fwcain/lcad/security/myfiles.jpg

I (think I) logged into the "main" page for LDraw.ORG OK:
http://www.brickshelf.com/gallery/fwcain/lcad/security/login-files.jpg

But no joy:
http://www.brickshelf.com/gallery/fwcain/lcad/security/denied.jpg

Franklin


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 01:34:57 GMT
Viewed: 
1662 times
  
In lugnet.cad.dev, Chris Dee wrote:

It just shows me as Admin, even though my PT privs are Admin,Submit,Review

Ah, but your PN userid was only in the PT-admin group.  I've added your user to the
PT-authoring and PT-reviewing groups.

Try it again, make sure it's OK.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 01:45:06 GMT
Viewed: 
1774 times
  
In lugnet.cad.dev, Franklin W. Cain wrote:

Steve,

No joy for me.

:/

I logged into the PT OK, as usual:
http://www.brickshelf.com/gallery/fwcain/lcad/security/myfiles.jpg

I (think I) logged into the "main" page for LDraw.ORG OK:
http://www.brickshelf.com/gallery/fwcain/lcad/security/login-files.jpg

But no joy:
http://www.brickshelf.com/gallery/fwcain/lcad/security/denied.jpg

That's odd.  Do you have cookies enabled?  How strong is your firewall?

I've made added a blind dump to pnauth.cgi, so even if it thinks you aren't logged
in, it might tell us some useful information.  Please give it another try, and let me
know what it says.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 15:52:46 GMT
Viewed: 
1745 times
  
=== Raw ===
Name: ''
Userid: ''
Roles: ''
POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
=== End Raw ===


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 17:08:11 GMT
Viewed: 
1783 times
  
On Wed, Nov 12, 2003 at 03:52:46PM +0000, Franklin W. Cain wrote:
=== Raw ===
Name: ''
Userid: ''
Roles: ''
POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
=== End Raw ===

Odd - I don't see that SID in the database.  When did you log in?  Did
you log out?

--
Dan Boger
dan@peeron.com


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 21:17:56 GMT
Viewed: 
1875 times
  
Your program hates me, Steve...  >:(

Logged out, logged back in, hit the test page,
same [censored] result...

=== Raw ===
Name: ''
Userid: ''
Roles: ''
POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
=== End Raw ===

You are not logged into the PostNuke site.

[sigh]....


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 21:39:23 GMT
Viewed: 
1924 times
  
In lugnet.cad.dev, Franklin W. Cain wrote:
Your program hates me, Steve...  >:(

(while I'm not Steve, I'll reply anyway :)

Logged out, logged back in, hit the test page,
same [censored] result...

=== Raw ===
Name: ''
Userid: ''
Roles: ''
POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
=== End Raw ===

You are not logged into the PostNuke site.

That's even weirder!  Since it's the same SID that you had before, and by
logging out/logging in you should have gotten a new SID.  Are you sure PN can
set cookies on your machine?  What browser are you using?  What OS?

Dan


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Wed, 12 Nov 2003 22:41:56 GMT
Viewed: 
1962 times
  
Since other web sites can set cookies on this computer,
I presume that LDraw.org's new security stuff can do so as well.

What browser are you using?
What OS?

Microsleaze Internet Exploder...


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Thu, 13 Nov 2003 01:26:49 GMT
Viewed: 
2003 times
  
In lugnet.cad.dev, Franklin W. Cain wrote:

Since other web sites can set cookies on this computer,
I presume that LDraw.org's new security stuff can do so as well.

What browser are you using?
What OS?

Microsleaze Internet Exploder...

It sounds like you've got cookie trouble.  You might try deleting all your cookies,
then try pnauth.cgi again.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Thu, 13 Nov 2003 15:56:42 GMT
Viewed: 
1997 times
  
It sounds like you've got cookie trouble.

How?  The Parts Tracker can set cookies just fine
on my PC.  So can Yahoo Mail, Live Journal, Steve
Jackson Games (both the Pyramid e-zine and the MIB
"secret resources" page), Nation States...

The *only* site which is having trouble setting
cookies would appear to be the LDraw.ORG *main*
page...

Franklin


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Thu, 13 Nov 2003 16:00:31 GMT
Viewed: 
2066 times
  
On Thu, Nov 13, 2003 at 03:56:42PM +0000, Franklin W. Cain wrote:
It sounds like you've got cookie trouble.

How? The Parts Tracker can set cookies just fine on my PC.

Now that's odd!  The parts tracker doesn't set any cookies, as far as I
know?  Steve?

So can Yahoo Mail, Live Journal, Steve Jackson Games (both the Pyramid
e-zine and the MIB "secret resources" page), Nation States...

The *only* site which is having trouble setting cookies would appear
to be the LDraw.ORG *main* page...

Right - so it seems that you have a problem overwriting your old cookie
from ldraw, for some unknown reason.  If you could delete that cookie,
there's a chance that the problem will not exist with a new cookie
assigned, or perhaps we won't be able to even add a new cookie...

Is it possible for you to try that?

--
Dan Boger
dan@peeron.com


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Thu, 13 Nov 2003 21:34:56 GMT
Viewed: 
2043 times
  
In lugnet.cad.dev, Dan Boger wrote:
On Thu, Nov 13, 2003 at 03:56:42PM +0000, Franklin W. Cain wrote:
It sounds like you've got cookie trouble.

How? The Parts Tracker can set cookies just fine on my PC.

Now that's odd!  The parts tracker doesn't set any cookies, as far as I
know?  Steve?


I dont think that's so odd. I had to disable the 3rd party cookie blocking
feature of my firewall in order to get the script to work for me.  Obviously,
the Ldraw site sets it's cookie on my computer just fine but the PT Auth script
choaked (sp?) until I turned off 3rd party cookie blocking.

-Orion


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Thu, 13 Nov 2003 21:55:59 GMT
Viewed: 
2063 times
  
On Thu, Nov 13, 2003 at 09:34:56PM +0000, Orion Pobursky wrote:
I dont think that's so odd. I had to disable the 3rd party cookie
blocking feature of my firewall in order to get the script to work for
me. Obviously, the Ldraw site sets it's cookie on my computer just
fine but the PT Auth script choaked (sp?) until I turned off 3rd party
cookie blocking.

What I meant was that the _current_ PT system does not use cookies, only
basic HTTP auth.  PostNuke does use cookies, of course.

Dan

--
Dan Boger
dan@peeron.com


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Fri, 14 Nov 2003 03:25:21 GMT
Viewed: 
2133 times
  
In lugnet.cad.dev, Orion Pobursky wrote:

I dont think that's so odd. I had to disable the 3rd party cookie blocking
feature of my firewall in order to get the script to work for me.  Obviously,
the Ldraw site sets it's cookie on my computer just fine but the PT Auth script
choaked (sp?) until I turned off 3rd party cookie blocking.

I'm not sure I'm understanding what you wrote, let me double-check.

"3rd party cookie blocking" is like preventing google.com from retrieving a cookie
set by amazon.com?  If that's so, it's very odd -- the code in pnauth.cgi is not
doing anything to try to hit a 'non-native' cookie.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Fri, 14 Nov 2003 03:26:06 GMT
Viewed: 
2049 times
  
In lugnet.cad.dev, Dan Boger wrote:

On Thu, Nov 13, 2003 at 03:56:42PM +0000, Franklin W. Cain wrote:
It sounds like you've got cookie trouble.

How? The Parts Tracker can set cookies just fine on my PC.

Now that's odd!  The parts tracker doesn't set any cookies, as far as I
know?  Steve?

Yeah, no cookies.  The only time I've touched any cookie code is in pnauth.cgi, and
that's only retrieving a cookie already set.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Fri, 14 Nov 2003 14:50:46 GMT
Viewed: 
2215 times
  
In lugnet.cad.dev, Steve Bliss wrote:
In lugnet.cad.dev, Orion Pobursky wrote:

I dont think that's so odd. I had to disable the 3rd party cookie blocking
feature of my firewall in order to get the script to work for me.  Obviously,
the Ldraw site sets it's cookie on my computer just fine but the PT Auth script
choaked (sp?) until I turned off 3rd party cookie blocking.

I'm not sure I'm understanding what you wrote, let me double-check.

"3rd party cookie blocking" is like preventing google.com from retrieving a cookie
set by amazon.com?  If that's so, it's very odd -- the code in pnauth.cgi is not
doing anything to try to hit a 'non-native' cookie.


"3rd party cookie blocking" is my firewall programs's term not mine.  I looked
up what exactly this is in the help file of the program and here what I got:

A third-party cookie is a type of persistent cookie that is placed on your
computer, not by the Web site you are visiting, but by an advertiser or other
third party. "Block 3rd party cookies" blocks cookies from third-party Web
sites.

Honestly, I have very little knowledge about cookies so I can't elaborate more
than this.

-Orion


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev, lugnet.off-topic.geek
Followup-To: 
lugnet.off-topic.geek
Date: 
Fri, 14 Nov 2003 15:07:44 GMT
Viewed: 
2651 times
  
On Fri, Nov 14, 2003 at 02:50:46PM +0000, Orion Pobursky wrote:
A third-party cookie is a type of persistent cookie that is placed on
your computer, not by the Web site you are visiting, but by an
advertiser or other third party. "Block 3rd party cookies" blocks
cookies from third-party Web sites.

What it means is say I include an image from peeron.com in my post on
lugnet, using the FTX image tag. Now, when you view my post via the web
interface, your browser will go to peeron.com to get the image and
display it to you.  When your browser retreives my image, I can have
peeron set a cookie on your computer.  That's called a 3rd party cookie
- basically, a cookie is set by a server different than the one you're
visiting.

Does that make sense?

FUT o-t.geek

--
Dan Boger
dan@peeron.com


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Tue, 18 Nov 2003 03:00:56 GMT
Viewed: 
1920 times
  
In lugnet.cad.dev, Steve Bliss wrote:

In lugnet.cad.dev, Franklin W. Cain wrote:

Since other web sites can set cookies on this computer,
I presume that LDraw.org's new security stuff can do so as well.

What browser are you using?
What OS?

Microsleaze Internet Exploder...

It sounds like you've got cookie trouble.  You might try deleting all your cookies,
then try pnauth.cgi again.

Franklin,

Did you ever try deleting your ldraw.org cookie?  I'd really like to get this worked
out, but I shouldn't switch over the security if you won't be able to use the PT.

Steve


Subject: 
Re: [Parts Tracker] PT-to-PN Authentication
Newsgroups: 
lugnet.cad.dev
Date: 
Sat, 29 Nov 2003 16:24:20 GMT
Viewed: 
1969 times
  
Steve,

Finally got this to work... on my Mom and Dad's PC...
(It still doesn't work on my PC at the office, FWIW.)  :P
Just thought you'd want to know...

Franklin


=== Raw ===
Name: 'Franklin Cain'
Userid: 'fwcain'
Roles: 'RS'
POSTNUKESID: 10473467fb7ba0d34533d9ac84590c26
=== End Raw ===

You are Franklin Cain (username fwcain)
You have been assigned PT roles:
* Review
* Submit


©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR