Unable to login to bugzilla

[james...@gmail.com]

Hi,

I did a fresh install of Bugzilla on a windows 7 machine using MySQL and IIS 7, this worked fine for a few days until both created users were unable to login.

I did a password reset via email and it still wouldn't let them log in, even creating a new user and trying to log in with their credentials fails.

Each time I attempt to log in it just takes me back to the login page with the message "Bugzilla needs a legitimate login and password to continue."

Any ideas?

Thanks in advance

James Cain

[Thorsten Schöning]

Guten Tag james...@gmail.com,
am Freitag, 18. Juli 2014 um 17:43 schrieben Sie:

> I did a password reset via email and it still wouldn't let them log
> in, even creating a new user and trying to log in with their credentials fails.

Does this mean that you are unable to login with each and every user
or does your administrative user works and only some or most of the
others don't? Sounds like you changed some of Bugzilla required
settings like urlbase, sslbase, cookiepath or such. If you are unable
to login to check, just open [...]/bugzilla/data/params with a text
editor of your choice.

Mit freundlichen Grüßen,

Thorsten Schöning

--
Thorsten Schöning E-Mail:Thorsten....@AM-SoFT.de
AM-SoFT IT-Systeme http://www.AM-SoFT.de/

Telefon...........05151- 9468- 55
Fax...............05151- 9468- 88
Mobil..............0178-8 9468- 04

AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow

[james...@gmail.com]

Hi,

I had created an A record to access this and it just needed updating in the params file.

thanks for your help.

James

[james...@gmail.com]

On Friday, 18 July 2014 16:57:30 UTC+1, Thorsten Schöning wrote:

Hi,

Although the issue with the login is resolved, it is now prompting for the user to login again when they click on any of the options on the home screen such as User Preferences, Search, or File a bug.

I believe this is related to cookies however I am unsure as to what to check.

Any help will be greatly appreciated!

Thanks,
James

[Thorsten Schöning]

Guten Tag james...@gmail.com,
am Montag, 21. Juli 2014 um 11:25 schrieben Sie:

> Although the issue with the login is resolved, it is now prompting
> for the user to login again when they click on any of the options on
> the home screen such as User Preferences, Search, or File a bug.

> I believe this is related to cookies however I am unsure as to what to check.

As I said before, check the required settings in the administration
page or params file directly, if you can't login or such.

http://www.bugzilla.org/docs/4.4/en/html/parameters.html#param-requiredsettings

[james...@gmail.com]

Hi Thorsten,

Thanks for your help so far, and sorry to keep bothering you.

I have cdhecked the params file and all looks to be correct, however I keep getting presented with the login page whenever I try and access any of the pages. the URLBase is correct, the cookie path is '/'.

Any ideas?

Thanks,
James

[Thorsten Schöning]

Guten Tag james...@gmail.com,
am Dienstag, 22. Juli 2014 um 18:50 schrieben Sie:

> I have cdhecked the params file and all looks to be correct,
> however I keep getting presented with the login page whenever I try
> and access any of the pages. the URLBase is correct, the cookie path is '/'.

There's a lot more especially on "User Authentication", check all of
those as well and/or post their values, urlbase, ssl settings,
cookiepath etc. here to compare. Have a special look on
user_info_class, rememberlogin and requirelogin.

[james...@gmail.com]

Hi,

Below is what my params file contains.

Sorry if it's somethign stupid, it's the first time I have instaleld Bugzilla.

%param = (
'LDAPBaseDN' => '',
'LDAPbinddn' => '',
'LDAPfilter' => '',
'LDAPmailattribute' => 'mail',
'LDAPserver' => '',
'LDAPstarttls' => 0,
'LDAPuidattribute' => 'uid',
'RADIUS_NAS_IP' => '',
'RADIUS_email_suffix' => '',
'RADIUS_secret' => '',
'RADIUS_server' => '',
'ajax_user_autocompletion' => '1',
'allow_attachment_deletion' => 0,
'allow_attachment_display' => 0,
'allowbugdeletion' => 0,
'allowemailchange' => 1,
'allowuserdeletion' => 0,
'announcehtml' => '',
'attachment_base' => '',
'auth_env_email' => '',
'auth_env_id' => '',
'auth_env_realname' => '',
'bonsai_url' => '',
'chartgroup' => 'editbugs',
'commentonchange_resolution' => 0,
'commentonduplicate' => 0,
'confirmuniqueusermatch' => 1,
'cookiedomain' => '',
'cookiepath' => '/',
'createemailregexp' => '.*',
'cvsroot' => '',
'cvsroot_get' => '',
'debug_group' => 'admin',
'default_search_limit' => '500',
'defaultopsys' => '',
'defaultplatform' => '',
'defaultpriority' => '---',
'defaultquery' => 'resolution=---&emailassigned_to1=1&emailassigned_to2=1&emailreporter2=1&emailcc2=1&emailqa_contact2=1&emaillongdesc3=1&order=Importance&long_desc_type=substring',
'defaultseverity' => 'enhancement',
'docs_urlbase' => 'docs/en/html/',
'duplicate_or_move_bug_status' => 'RESOLVED',
'emailregexp' => '^[\\w\\.\\+\\-=]+@[\\w\\.\\-]+\\.[\\w\\-]+$',
'emailregexpdesc' => 'A legal address must contain exactly one \'@\', and at least one \'.\' after the @.',
'emailsuffix' => '',
'globalwatchers' => '',
'inbound_proxies' => '',
'insidergroup' => '',
'letsubmitterchoosemilestone' => 1,
'letsubmitterchoosepriority' => 1,
'lxr_root' => '',
'lxr_url' => '',
'mail_delivery_method' => 'SMTP',
'mailfrom' => '',
'maintainer' => '',
'makeproductgroups' => 0,
'max_search_results' => '10000',
'maxattachmentsize' => '1000',
'maxlocalattachment' => '0',
'maxusermatches' => '1000',
'mostfreqthreshold' => '2',
'musthavemilestoneonaccept' => 0,
'mybugstemplate' => 'buglist.cgi?resolution=---&emailassigned_to1=1&emailreporter1=1&emailtype1=exact&email1=%userid%',
'noresolveonopenblockers' => 0,
'password_complexity' => 'no_constraints',
'proxy_url' => '',
'querysharegroup' => 'editbugs',
'quip_list_entry_control' => 'open',
'rememberlogin' => 'on',
'requirelogin' => '1',
'search_allow_no_criteria' => 1,
'shadowdb' => '',
'shadowdbhost' => '',
'shadowdbport' => '3306',
'shadowdbsock' => '',
'shutdownhtml' => '',
'smtp_debug' => 0,
'smtp_password' => '',
'smtp_ssl' => 0,
'smtp_username' => '',
'smtpserver' => '',
'ssl_redirect' => '1',
'sslbase' => '',
'strict_isolation' => 0,
'strict_transport_security' => 'off',
'timetrackinggroup' => 'editbugs',
'upgrade_notification' => 'latest_stable_release',
'urlbase' => 'http://bugzilla.sequre.co.uk/bugzilla/',
'use_mailer_queue' => 0,
'use_see_also' => 1,
'useclassification' => 0,
'usemenuforusers' => '0',
'useqacontact' => 0,
'user_info_class' => 'CGI',
'user_verify_class' => 'DB',
'usestatuswhiteboard' => 0,
'usetargetmilestone' => 0,
'usevisibilitygroups' => 0,
'utf8' => 1,
'webdotbase' => 'http://www.research.att.com/~north/cgi-bin/webdot.cgi/%urlbase%',
'whinedays' => 7
);

Thanks,
James

[Thorsten Schöning]

Guten Tag james...@gmail.com,
am Mittwoch, 23. Juli 2014 um 10:57 schrieben Sie:

> 'cookiepath' => '/',
[...]

> 'urlbase' => 'http://bugzilla.sequre.co.uk/bugzilla/',

cookiepath should be "/bugzilla/" in your case, if that doesn't help
check the http requests and responses using your browser tools and
have a look at if and which cookie is send to your server and if your
browser properly saves it after a login etc.

[james...@gmail.com]

Hi,

Sorry about the format but I tested with firefox and these are the cookies that are presented when logging into Bugzilla.

Name Bugzilla_login
Value 1
Host bugzilla.sequre.co.uk
Path /bugzilla/
Expires Thu, 31 Dec 2037 23:59:28 GMT
Secure Yes
HttpOnly Yes

Name Bugzilla_login_request_cookie
Value IsvrdIcS7X
Host bugzilla.sequre.co.uk
Path /bugzilla/
Expires At end of session
Secure Yes
HttpOnly Yes

Name Bugzilla_logincookie
Value eF5C5ibraF
Host bugzilla.sequre.co.uk
Path /bugzilla/
Expires Thu, 31 Dec 2037 23:59:28 GMT
Secure Yes
HttpOnly Yes

Doers that look correct?

[Thorsten Schöning]

Guten Tag james...@gmail.com,
am Mittwoch, 23. Juli 2014 um 15:58 schrieben Sie:

> Secure Yes
> HttpOnly Yes

Your problem are the ssl settings:

> 'ssl_redirect' => '1',
> 'sslbase' => '',

You can't have ssl_redirect enabled without a sslbase. Because of
"Secure Yes", because of ssl_redirect I guess,, your cookie only gets
send to https urls, which you should have configured using sslbase.
You either need to remove ssl_redirect or configure sslbase.

[james...@gmail.com]

Hi,

Perfect!!! That's sorted it.

Thanks for all your help!

Regards,
James