| | | | |
| |
| Hey all parts authors and reviewers (and admins)!
I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
uses the same login/security as the rest of the ldraw.org site. I've got a
simple page up that checks your privileges and tells you:
- If you are an ldraw.org user
- If you have PT privileges
- What PT privileges you have
I would appreciate it if y'all could give this page a hit, and make sure it
gives you the results you expect. There are a couple of caveats:
1. The page is protected by the *current* PT security, so you'll get a
regular login prompt when you hit the page.
2. Only current PT authors/reviewers/admins can do that login, so they're the
only ones who can hit the page.
3. Unless you also login to the regular ldraw.org site, you'll just be told
you're not logged in.
OK, so you've got that? Login both places, and hit this page:
http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi
I'm only going to leave this page up for a couple of days, so give it a go.
In another day or two, I'm going to start switching the PT functions over to use
the ldraw.org membership information.
Steve
| | | | | | | | | | | | | In lugnet.cad.dev, Steve Bliss wrote:
> Hey all parts authors and reviewers (and admins)!
>
> I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
> uses the same login/security as the rest of the ldraw.org site. I've got a
> simple page up that checks your privileges and tells you:
> - If you are an ldraw.org user
> - If you have PT privileges
> - What PT privileges you have
Looks fine to me I have Review and Submit. It also displays something about
POSTNUKESID whatever that is....
> In another day or two, I'm going to start switching the PT functions over to use
> the ldraw.org membership information.
Cool! Thanks for all your hard work!
ROSCO
| | | | | | | | | | | | | | |
| |
| In lugnet.cad.dev, Steve Bliss wrote:
> Hey all parts authors and reviewers (and admins)!
>
> I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
> uses the same login/security as the rest of the ldraw.org site. I've got a
> simple page up that checks your privileges and tells you:
> - If you are an ldraw.org user
> - If you have PT privileges
> - What PT privileges you have
>
> I would appreciate it if y'all could give this page a hit, and make sure it
> gives you the results you expect. There are a couple of caveats:
> 1. The page is protected by the *current* PT security, so you'll get a
> regular login prompt when you hit the page.
> 2. Only current PT authors/reviewers/admins can do that login, so they're the
> only ones who can hit the page.
> 3. Unless you also login to the regular ldraw.org site, you'll just be told
> you're not logged in.
>
> OK, so you've got that? Login both places, and hit this page:
> http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi
>
> I'm only going to leave this page up for a couple of days, so give it a go.
>
> In another day or two, I'm going to start switching the PT functions over to use
> the ldraw.org membership information.
>
> Steve
Steve,
I'm getting an error:
Software error:
Failed to connect to DBI:mysql:database=peeron_ldrawnuke;host=localhost using
at ./PT.pm line 234
For help, please send mail to the webmaster (webmaster@ldraw.org), giving this
error message and the time and date of the error.
-Orion
| | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Orion Pobursky wrote:
> In lugnet.cad.dev, Steve Bliss wrote:
> > http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi
>
> I'm getting an error:
>
> Software error:
> Failed to connect to DBI:mysql:database=peeron_ldrawnuke;host=localhost using
> at ./PT.pm line 234
>
> For help, please send mail to the webmaster (webmaster@ldraw.org), giving this
> error message and the time and date of the error.
I just tried it, and it works for me, logged in and logged out.
It kind of sounds like the user data wasn't available at the time you tried the page.
Could you try it again?
One other thought - do you have session cookies enabled? The script won't work
without those. Then again, I thought postnuke required cookies, too.
Steve
| | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Steve Bliss wrote:
> In lugnet.cad.dev, Orion Pobursky wrote:
> > In lugnet.cad.dev, Steve Bliss wrote:
> > > http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi
> >
> > I'm getting an error:
> >
> > Software error:
> > Failed to connect to DBI:mysql:database=peeron_ldrawnuke;host=localhost using
> > at ./PT.pm line 234
> >
> > For help, please send mail to the webmaster (webmaster@ldraw.org), giving this
> > error message and the time and date of the error.
>
> I just tried it, and it works for me, logged in and logged out.
>
> It kind of sounds like the user data wasn't available at the time you tried the page.
> Could you try it again?
>
> One other thought - do you have session cookies enabled? The script won't work
> without those. Then again, I thought postnuke required cookies, too.
>
> Steve
I disabled my Firewall program and it works fine. Must have been something
involving cookies.
-Orion
| | | | | | | | | | | | | | | |
| |
| In lugnet.cad.dev, Steve Bliss wrote:
> Hey all parts authors and reviewers (and admins)!
>
> I'm (slowly) working on modifying the webpages for the Parts Tracker so that it
> uses the same login/security as the rest of the ldraw.org site. I've got a
> simple page up that checks your privileges and tells you:
> - If you are an ldraw.org user
> - If you have PT privileges
> - What PT privileges you have
>
> I would appreciate it if y'all could give this page a hit, and make sure it
> gives you the results you expect. There are a couple of caveats:
> 1. The page is protected by the *current* PT security, so you'll get a
> regular login prompt when you hit the page.
> 2. Only current PT authors/reviewers/admins can do that login, so they're the
> only ones who can hit the page.
> 3. Unless you also login to the regular ldraw.org site, you'll just be told
> you're not logged in.
>
> OK, so you've got that? Login both places, and hit this page:
> http://www.ldraw.org/cgi-bin/tracker/pnauth.cgi
>
> I'm only going to leave this page up for a couple of days, so give it a go.
>
> In another day or two, I'm going to start switching the PT functions over to use
> the ldraw.org membership information.
>
> Steve
It just shows me as Admin, even though my PT privs are Admin,Submit,Review
Chris
| | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Chris Dee wrote:
> It just shows me as Admin, even though my PT privs are Admin,Submit,Review
Ah, but your PN userid was only in the PT-admin group. I've added your user to the
PT-authoring and PT-reviewing groups.
Try it again, make sure it's OK.
Steve
| | | | | | | | | | | | | | | | Steve,
No joy for me.
I logged into the PT OK, as usual:
http://www.brickshelf.com/gallery/fwcain/lcad/security/myfiles.jpg
I (think I) logged into the "main" page for LDraw.ORG OK:
http://www.brickshelf.com/gallery/fwcain/lcad/security/login-files.jpg
But no joy:
http://www.brickshelf.com/gallery/fwcain/lcad/security/denied.jpg
Franklin
| | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Franklin W. Cain wrote:
> Steve,
>
> No joy for me.
:/
> I logged into the PT OK, as usual:
> http://www.brickshelf.com/gallery/fwcain/lcad/security/myfiles.jpg
>
> I (think I) logged into the "main" page for LDraw.ORG OK:
> http://www.brickshelf.com/gallery/fwcain/lcad/security/login-files.jpg
>
> But no joy:
> http://www.brickshelf.com/gallery/fwcain/lcad/security/denied.jpg
That's odd. Do you have cookies enabled? How strong is your firewall?
I've made added a blind dump to pnauth.cgi, so even if it thinks you aren't logged
in, it might tell us some useful information. Please give it another try, and let me
know what it says.
Steve
| | | | | | | | | | | | | | | | | | | | === Raw ===
Name: ''
Userid: ''
Roles: ''
POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
=== End Raw ===
| | | | | | | | | | | | | | | | | | | | On Wed, Nov 12, 2003 at 03:52:46PM +0000, Franklin W. Cain wrote:
> === Raw ===
> Name: ''
> Userid: ''
> Roles: ''
> POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
> === End Raw ===
Odd - I don't see that SID in the database. When did you log in? Did
you log out?
--
Dan Boger
dan@peeron.com
| | | | | | | | | | | | | | | | | | | | Your program hates me, Steve... >:(
Logged out, logged back in, hit the test page,
same [censored] result...
=== Raw ===
Name: ''
Userid: ''
Roles: ''
POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
=== End Raw ===
You are not logged into the PostNuke site.
[sigh]....
| | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Franklin W. Cain wrote:
> Your program hates me, Steve... >:(
(while I'm not Steve, I'll reply anyway :)
> Logged out, logged back in, hit the test page,
> same [censored] result...
>
> === Raw ===
> Name: ''
> Userid: ''
> Roles: ''
> POSTNUKESID: 31284ced290e6ab2ba4c684e40ce4435
> === End Raw ===
>
> You are not logged into the PostNuke site.
That's even weirder! Since it's the same SID that you had before, and by
logging out/logging in you should have gotten a new SID. Are you sure PN can
set cookies on your machine? What browser are you using? What OS?
Dan
| | | | | | | | | | | | | | | | | | | | Since other web sites can set cookies on this computer,
I presume that LDraw.org's new security stuff can do so as well.
> What browser are you using?
> What OS?
Microsleaze Internet Exploder...
| | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Franklin W. Cain wrote:
> Since other web sites can set cookies on this computer,
> I presume that LDraw.org's new security stuff can do so as well.
>
> > What browser are you using?
> > What OS?
>
> Microsleaze Internet Exploder...
It sounds like you've got cookie trouble. You might try deleting all your cookies,
then try pnauth.cgi again.
Steve
| | | | | | | | | | | | | | | | | | | | | > It sounds like you've got cookie trouble.
How? The Parts Tracker can set cookies just fine
on my PC. So can Yahoo Mail, Live Journal, Steve
Jackson Games (both the Pyramid e-zine and the MIB
"secret resources" page), Nation States...
The *only* site which is having trouble setting
cookies would appear to be the LDraw.ORG *main*
page...
Franklin
| | | | | | | | | | | | | | | | | | | | | | | | On Thu, Nov 13, 2003 at 03:56:42PM +0000, Franklin W. Cain wrote:
> > It sounds like you've got cookie trouble.
>
> How? The Parts Tracker can set cookies just fine on my PC.
Now that's odd! The parts tracker doesn't set any cookies, as far as I
know? Steve?
> So can Yahoo Mail, Live Journal, Steve Jackson Games (both the Pyramid
> e-zine and the MIB "secret resources" page), Nation States...
>
> The *only* site which is having trouble setting cookies would appear
> to be the LDraw.ORG *main* page...
Right - so it seems that you have a problem overwriting your old cookie
from ldraw, for some unknown reason. If you could delete that cookie,
there's a chance that the problem will not exist with a new cookie
assigned, or perhaps we won't be able to even add a new cookie...
Is it possible for you to try that?
--
Dan Boger
dan@peeron.com
| | | | | | | | | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Dan Boger wrote:
> On Thu, Nov 13, 2003 at 03:56:42PM +0000, Franklin W. Cain wrote:
> > > It sounds like you've got cookie trouble.
> >
> > How? The Parts Tracker can set cookies just fine on my PC.
>
> Now that's odd! The parts tracker doesn't set any cookies, as far as I
> know? Steve?
I dont think that's so odd. I had to disable the 3rd party cookie blocking
feature of my firewall in order to get the script to work for me. Obviously,
the Ldraw site sets it's cookie on my computer just fine but the PT Auth script
choaked (sp?) until I turned off 3rd party cookie blocking.
-Orion
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On Thu, Nov 13, 2003 at 09:34:56PM +0000, Orion Pobursky wrote:
> I dont think that's so odd. I had to disable the 3rd party cookie
> blocking feature of my firewall in order to get the script to work for
> me. Obviously, the Ldraw site sets it's cookie on my computer just
> fine but the PT Auth script choaked (sp?) until I turned off 3rd party
> cookie blocking.
What I meant was that the _current_ PT system does not use cookies, only
basic HTTP auth. PostNuke does use cookies, of course.
Dan
--
Dan Boger
dan@peeron.com
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Orion Pobursky wrote:
> I dont think that's so odd. I had to disable the 3rd party cookie blocking
> feature of my firewall in order to get the script to work for me. Obviously,
> the Ldraw site sets it's cookie on my computer just fine but the PT Auth script
> choaked (sp?) until I turned off 3rd party cookie blocking.
I'm not sure I'm understanding what you wrote, let me double-check.
"3rd party cookie blocking" is like preventing google.com from retrieving a cookie
set by amazon.com? If that's so, it's very odd -- the code in pnauth.cgi is not
doing anything to try to hit a 'non-native' cookie.
Steve
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| |
| In lugnet.cad.dev, Steve Bliss wrote:
> In lugnet.cad.dev, Orion Pobursky wrote:
>
> > I dont think that's so odd. I had to disable the 3rd party cookie blocking
> > feature of my firewall in order to get the script to work for me. Obviously,
> > the Ldraw site sets it's cookie on my computer just fine but the PT Auth script
> > choaked (sp?) until I turned off 3rd party cookie blocking.
>
> I'm not sure I'm understanding what you wrote, let me double-check.
>
> "3rd party cookie blocking" is like preventing google.com from retrieving a cookie
> set by amazon.com? If that's so, it's very odd -- the code in pnauth.cgi is not
> doing anything to try to hit a 'non-native' cookie.
"3rd party cookie blocking" is my firewall programs's term not mine. I looked
up what exactly this is in the help file of the program and here what I got:
A third-party cookie is a type of persistent cookie that is placed on your
computer, not by the Web site you are visiting, but by an advertiser or other
third party. "Block 3rd party cookies" blocks cookies from third-party Web
sites.
Honestly, I have very little knowledge about cookies so I can't elaborate more
than this.
-Orion
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On Fri, Nov 14, 2003 at 02:50:46PM +0000, Orion Pobursky wrote:
> A third-party cookie is a type of persistent cookie that is placed on
> your computer, not by the Web site you are visiting, but by an
> advertiser or other third party. "Block 3rd party cookies" blocks
> cookies from third-party Web sites.
What it means is say I include an image from peeron.com in my post on
lugnet, using the FTX image tag. Now, when you view my post via the web
interface, your browser will go to peeron.com to get the image and
display it to you. When your browser retreives my image, I can have
peeron set a cookie on your computer. That's called a 3rd party cookie
- basically, a cookie is set by a server different than the one you're
visiting.
Does that make sense?
FUT o-t.geek
--
Dan Boger
dan@peeron.com
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Dan Boger wrote:
> On Thu, Nov 13, 2003 at 03:56:42PM +0000, Franklin W. Cain wrote:
> > > It sounds like you've got cookie trouble.
> >
> > How? The Parts Tracker can set cookies just fine on my PC.
>
> Now that's odd! The parts tracker doesn't set any cookies, as far as I
> know? Steve?
Yeah, no cookies. The only time I've touched any cookie code is in pnauth.cgi, and
that's only retrieving a cookie already set.
Steve
| | | | | | | | | | | | | | | | | | | | | | In lugnet.cad.dev, Steve Bliss wrote:
> In lugnet.cad.dev, Franklin W. Cain wrote:
>
> > Since other web sites can set cookies on this computer,
> > I presume that LDraw.org's new security stuff can do so as well.
> >
> > > What browser are you using?
> > > What OS?
> >
> > Microsleaze Internet Exploder...
>
> It sounds like you've got cookie trouble. You might try deleting all your cookies,
> then try pnauth.cgi again.
Franklin,
Did you ever try deleting your ldraw.org cookie? I'd really like to get this worked
out, but I shouldn't switch over the security if you won't be able to use the PT.
Steve
| | | | | | | | | | | | | | | | Steve,
Finally got this to work... on my Mom and Dad's PC...
(It still doesn't work on my PC at the office, FWIW.) :P
Just thought you'd want to know...
Franklin
=== Raw ===
Name: 'Franklin Cain'
Userid: 'fwcain'
Roles: 'RS'
POSTNUKESID: 10473467fb7ba0d34533d9ac84590c26
=== End Raw ===
You are Franklin Cain (username fwcain)
You have been assigned PT roles:
* Review
* Submit
| | | | | | |