[pmwiki-users] more on action=login not grok admin

[Russ Fink]

I'm writing some conditional markup, and realized that authid is true for 
any legitimate user authenticated /except/ admin.  To that end, I find I 
need to put "[ auth admin || authid ]" in all (:if:) clauses where I think I 
should just be able to get away with "(:if authid:)".

I still have the following problem.  Per some suggestions, I moved the 
authuser.php after I set all my passwords, and that didn't change anything.  
I tried using "Admin" instead of "admin," no change.  Finally, one user 
suggested that this problem was asked in July, and the asker received some 
code for it.  Can someone e-mail me that fix, and better, can that just get 
committed into the main distro?

Here is my message again.

User "admin" not accepted by ?action=login for any page, under Pmwiki 
version 2.1.26, using AuthUser.

Steps:

   1. Configure system for AuthUser. Create a couple of users, and a group 
"@admins" that includes the users. For instance, create "russ" and put him 
in the @admins group.
   2. Set up site-wide default passwords to "@admins" group in the 
config.php script for edit and attr, leave "read" blank.
   3. Preliminary - Go to Main.HomePage?action=logout to start.
         1. I visit Site.AuthUser?action=attr - I am asked for a password, 
good. Do not do anything, just verify not already admin, witnessed by the 
fact that it wants a password. I have this page locked to all but admin.
         2. I try Main.HomePage?action=edit and am asked for a password. 
Again, I didn't log in, just verified I need a password to continue.
   4. Problem Steps - Go to Main.HomePage?action=logout, then 
Main.HomePage?action=login.
         1. Log in as "admin" - What I get back is "Name/password not 
recognized"
         2. Without logging out, I try Site.AuthUser?action=attr again - 
this time, I am not asked for a password. This tells me that the previous 
"name/pass not recognized" is in error, and that I am actually logged in as 
admin.
         3. I go to Main.HomePage?action=logout, then 
Main.HomePage?action=login. I log in as "russ" then try to edit main: 
Main.HomePage?action=edit and this works.
   5. It works correctly when the action target is not "login." For 
instance, I go to Main.HomePage?action=logout, then 
Main.HomePage?action=edit, it asks for a password, I log in as "admin" and 
it works.

PS: This is a personal communication from an account that has keyword-based 
spam filtering enabled.  Please preserve the original subject line when 
replying.  (Adding "Re:" is okay.)

_________________________________________________________________
All-in-one security and maintenance for your PC.  Get a free 90-day trial! 
http://clk.atdmt.com/MSN/go/msnnkwlo0050000002msn/direct/01/?href=http://clk.atdmt.com/MSN/go/msnnkwlo0050000001msn/direct/01/?href=http://www.windowsonecare.com/?sc_cid=msn_hotmail