Posted on: 07/20/10 11:45pm
By: Anonymous (Authentication Required)
I finally installed 1.7.0 today. Went very well with one little hiccup... Re-authorization for expired tokens. It wants me to re-authorize for any save, delete, edit changes and then never makes the change.
I found the following
[http://wiki.geeklog.net/index.php/Re-Authentication_for_expired_Tokens
http://wiki.geeklog.net/index.php/CSRF_Protection
http://www.geeklog.net/forum/viewtopic.php?showtopic=90373
But they kinda lead me the right way but I'm not sure. Any help will be appreciated.
Zed
Re: Authentication Required
Posted on: 07/21/10 01:53am
By: Dirk
So does the re-authentication work? Also, which Geeklog version were you on before the upgrade?
bye, Dirk
Re: Authentication Required
Posted on: 07/21/10 02:43am
By: 1000ideen
I had similar problems with current Firefox but not with IE6.
Can you try for troubleshooting to switch to the unaltered theme 'professional'? In my case it had been faulty html in my theme changes.
Re: Authentication Required
Posted on: 07/21/10 09:06am
By: zedpinkerton
It does not work. I was running 1.6.1sr1 but this is a fresh install due to server upgrades.
1000ideen - Thanks for the tip. I will look into this as well. This problem does occur in Firefox and IE6 and up.
Zed
Re: Authentication Required
Posted on: 07/21/10 09:14am
By: zedpinkerton
Quote by: 1000ideenI had similar problems with current Firefox but not with IE6.
Can you try for troubleshooting to switch to the unaltered theme 'professional'? In my case it had been faulty html in my theme changes.
It just occurred to me that I had not changed my theme yet. Everything is still default.
Re: Authentication Required
Posted on: 07/22/10 02:43pm
By: Dirk
My guess would be that the referrer is not sent. Can you try the little PHP script that I posted
in this discussion? Also, if you have any control over the server, see my very last post in that thread for another setting to look out for.
bye, Dirk
Re: Authentication Required
Posted on: 07/22/10 09:14pm
By: zedpinkerton
Thanks Dirk.
After running the script, it went directly back to "click me". No other message.
Just for reference, this is not my server and I only have access to Apache handlers. The only settings it displays are as follows:
Handler Extension
cgi-script .cgi .pl .plx .ppl .perl
server-parsed .shtml
type-map var
Re: Authentication Required
Posted on: 07/23/10 04:24pm
By: Dirk
Quote by: zedpinkertonAfter running the script, it went directly back to "click me". No other message.
Okay, so no referrers are sent - that's the problem.
This could be a browser setting. If it happens with other browsers, too, it could be your router or proxy. Are you using one of those and could you check there?
bye, Dirk
Re: Authentication Required
Posted on: 07/24/10 11:34pm
By: zedpinkerton
After checking my router and modem, I realized that it was a configuration in my firewall preventing referrers. After changing a few settings, I am back in control.
I feel like an idiot as I probably should have looked there first.
Thank you so much for your help.
Zed