Howdy all,

Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't log me in. It just seems to refresh the page.

Works fine with regular user accounts, but I'm a little mystified with this one currently.

---
þ Synchronet þ ... The Basement ... Not really open yet.
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Trikester to All on Mon Jan 03 2022 07:52 pm

Howdy all,

Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't log me in. It just seems to refresh the page.

Works fine with regular user accounts, but I'm a little mystified with this one currently.

Works for me on Vertrauen. What is the name/alias of your sysop account?
--
digital man (rob)

Rush quote #35:
Static on your frequency, electrical storm in your veins
Norco, CA WX: 46.8øF, 70.0% humidity, 0 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.14-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Trikester to All on Mon Jan 03 2022 07:52 pm

Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't log me in. It just seems to refresh the page.

Works fine with regular user accounts, but I'm a little mystified with this one currently.

Are you using the Sysop password, or your regular password? Webv4 uses your regular password until it needs to use fTelnet to do something and then fTelnet prompts for the SYS password...


________________________________________________________________
Sysop of Desert Rats Sanctuary --- https://bbs.kn6q.org

---
þ Synchronet þ KN6Q BBS - https://kn6q.org - Sysop Xerxes
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Digital Man to Trikester on Mon Jan 03 2022 11:21 pm

Is the sysop login in webv4 disabled? If I login with my sysop account, it doesn't say the login is incorrect, but it doesn't
log me in. It just seems to refresh the page.
Works fine with regular user accounts, but I'm a little mystified with this one currently.

Works for me on Vertrauen. What is the name/alias of your sysop account?

This one, Trikester. One thought I had on it was - if the system password is required elsewhere, is it not required in the web login?

I don't have debug on for the logs presently, perhaps I should, as nothing interesting shows up in the logs when I do try and log in, HTTP POST and GETs, but no interesting errors.

---
þ Synchronet þ ... The Basement ... Not really open yet.
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Xerxes to Trikester on Tue Jan 04 2022 09:32 am

Are you using the Sysop password, or your regular password? Webv4 uses your regular password until it needs to use fTelnet to
do something and then fTelnet prompts for the SYS password...

Yup, just the account's regular password - even tried an FTP login userpassword:syspassword style without success.

---
þ Synchronet þ ... The Basement ... Not really open yet.
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Trikester to Digital Man on Tue Jan 04 2022 11:01 am

Re: Webv4 sysop login?
By: Digital Man to Trikester on Mon Jan 03 2022 11:21 pm

Is the sysop login in webv4 disabled? If I login with my sysop account it doesn't say the login is incorrect, but it doesn't log me in. It ju seems to refresh the page.
Works fine with regular user accounts, but I'm a little mystified with this one currently.

Works for me on Vertrauen. What is the name/alias of your sysop account?

This one, Trikester. One thought I had on it was - if the system password is required elsewhere, is it not required in the web login?

The system password is not required for web login.
--
digital man (rob)

Synchronet/BBS Terminology Definition #90:
UTF-8 = 8-bit Unicode Transformation Format
Norco, CA WX: 55.4øF, 56.0% humidity, 2 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.14-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Trikester to Digital Man on Tue Jan 04 2022 11:01:31

This one, Trikester. One thought I had on it was - if the system password is required elsewhere, is it not required in the web login?

Just your sysop alias and password (not the system password) should work.

Are you able to log in using some other account, even a non-sysop one?

The reason why the syspass is not required for web login is ... I just haven't gotten around to making it so. There isn't a lot of privileged stuff that the sysop can do from the web UI, so this hasn't been a priority.
---
echicken
electronic chicken bbs - bbs.electronicchicken.com
---
þ Synchronet þ electronic chicken bbs - bbs.electronicchicken.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: echicken to Trikester on Wed Jan 05 2022 05:34 am

Just your sysop alias and password (not the system password) should work.

Yup, guess that's why I'm scratching my head that it won't login, just using the sysop alias & password (and if I use the wrong password, it does tell me so)

Are you able to log in using some other account, even a non-sysop one?

I'm able to login with a non-sysop account, yes.

---
þ Synchronet þ ... The Basement ... Not really open yet.
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Trikester to echicken on Wed Jan 05 2022 12:15 pm

Are you able to log in using some other account, even a non-sysop one?

I'm able to login with a non-sysop account, yes.

OK, I've just checked again and I can not with a regular user account. Please disregard my previous message.

I'm going to play around with cache flushing, different browsers, etc., as I'm a little more surprised about what's going on now.

---
þ Synchronet þ ... The Basement ... Not really open yet.
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Webv4 sysop login?
By: Trikester to echicken on Wed Jan 05 2022 01:35 pm

All right, it appears it all had to do with the Apache proxying I had going on.

ProxyPreserveHost On

seems to be pretty critical when using webv4. With that in, the cookie issue (invalid domain) went away.

There's still an error in the browser console complaining about the synchronet cookie will soon be rejected because it has the "SameSite" attribute set to "None" or an invalid value, without the "secure" attribute.

So, I've also added in:

Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure;SameSite=Strict

And that seems to resolve that problem, too.

---
þ Synchronet þ ... The Basement ... Not really open yet.
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)