in the logs you see first a registration request that seems to succeed.
Later, you have the regular login procedure that fails probably
because the server can not find the data on the DB and it is returning
fake data in order to avoid an early failure that could speed up a
dictionary attack.
Have you tried to run the POG setup/test procedure? As it looks like
the PHP script has some issues writing or reading from the DB.
Hope this helps.
Best regards,
Giulio Cesare
It is very nice from my point of view to see other people providing
some relevant feedback on this forum.
It really helps improving the "community" feeling that we are trying
to fuel. :-)
Ciao,
Giulio Cesare
I am not a POG nor a PHP expert and can not answer your question.
I feel like many different shortcomings in the current code base (for
example the requirement for a given quote settings on php.ini) could
be easily solvable in the code itself, but I wouldn't know how to do
it.
So if some PHP developer with some experience on POG could provide
some improvements, we will be very happy to include them.
To be totally true, one of our users actually submitted some code on
the previous Google Code project related to the installation
procedure, but I have never managed to inspect the changes he
submitted. :-(
If someone is willing to take care of our Source Forge Community
Edition project, I would be very interested in starting tutoring some
members hoping to be able to have a few more commiters onboard.
The PHP part would be definitely the simplest to delegate to someone,
but I am also willing to help people getting up to speed on the
Javascript side.
Giulio Cesare
it should be one of the option of the POG engine. During the POG setup
there should be a check to specify wether or not to install the base64
plugin.
Giulio Cesare
if the data can be written, but the login can not be performed, it may
be an issue with the BCMath library.
During the registration the server side code does not perform any
computation, while during the login phase, SRP requires that also the
server perform some computation using BigInt arithmetics (and this is
what the BCMath library is there for).
Could you double check you phpinfo() output (just load the
php/test.php page on your clipperz installation folder) to see if the
BCMath module is correctly loaded?
Best regards,
Giulio Cesare