Page MenuHomePhabricator

"Not logged in" appears when not expected
Closed, DeclinedPublic


Author: normkatz

I did this twice in the same sequence so it is reproduceable. I have installed
mediawiki on Windows XP Pro with php5isapi.dll on IIS5. I installed and ran the
setup and everything came up fine. As you know, by default, the site is
completely open for creating accounts. I found your docs at on tightening
security and added the following 3 lines to my LocalSettings.php:

$wgGroupPermissions['*'    ]['createaccount']   = false;
$wgGroupPermissions['*'    ]['read']            = true;
$wgGroupPermissions['*'    ]['edit']            = false;

This prevented account creation as expected. But when I log in as any user, I
can no longer navigate to most pages. Just logging in and going to my
preferences link, it immediately says:

Not logged in
From KatzWiki
You must be logged in to set user preferences.
Return to Main Page.

fyi, The URL of the preferences link is:
which does not have my login id embedded.

Interestingly, when I removed these three lines from LocalSettings, the wiki DID
NOT revert back to normal. I assumed this was a browser caching or a cookie
problem so I deleted cookies and browser caches on both Firefox and IE6 but it
had NO EFFECT. I also tried iisreset before and after editing. Obviously
something is getting modified "permanently" in the database, OS, or registry to
force this behavior. I reinstalled and went through the same steps and got the
exact same results. I'm posting here because this seems like a bug or a use
case that was not tested.

My goal is to prevent user creation except by sysop or beaurocrat and prevent
editing until users are logged in. I'd also like to prevent anonymous users
from reading most pages so I assume I can use the
$wgGroupPermissions['*' ]['read'] = false;
and set a whitelist using:
$wgWhitelistRead = array ("Main Page", "Special:Userlogin", "Wikipedia:Help");

I searched the FAQ and newsgroups for some time before posting.

Version: 1.5.x
Severity: critical
OS: Windows XP
Platform: PC



Revisions and Commits

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 8:55 PM
bzimport set Reference to bz3913.
bzimport added a subscriber: Unknown Object (MLST).

oxtonaj wrote:

When I log in as "Poondu" Wikipedia returns a page:
Login successful
From Wikipedia, the free encyclopedia
Jump to: navigation, search

You have successfully signed in to Wikipedia as "Poondu".

However as soon as I try to change user preferences or go to any page I am
logged out and invited to log in again. ...You must be logged in to do...


Original comment sounds like caching. Second comment is completely unrelated.

epriestley changed the task status from Declined to Resolved by committing Unknown Object (Diffusion Commit).Mar 4 2015, 8:15 AM
epriestley added a commit: Unknown Object (Diffusion Commit).
Aklapper changed the task status from Resolved to Declined.Mar 4 2015, 11:25 AM
Aklapper claimed this task.