Last modified: 2013-09-04 13:04:52 UTC
I have an install of media wiki 1.9.3 which I upgraded to 1.10.1 (then tried the alpha version) on upgrading when I login it says Im logged in, but when I click the main page. The main page says I am not logged in and I need to login. When I click the login link it takes me to the login which shows that I am logged in. I don't actually get logged in everywhere unless I click on the preferences option in the upper right, then login using the link it gives me. Once I login in that method everything works fine. This starts happening once i upgraded from 1.9.3 to 1.10.1. If I downgrade to 1.9.3 it goes away. I tried various browsers, happens in all of them. Once you login though successfully you stop encountering the problem, unless you clear your cache and restart.
Ryan and I are on the same team. He didn't mention that the problem manifests itself only with the LDAP plugin: http://www.mediawiki.org/wiki/Extension:LDAP_Authentication Another symptom: it seems to be related to the _session cookie. We noticed that the session cookie value is changed when we log in through the preferences page, and that's what cleans up the problem. Once successfully logged in, users don't seem to have the problem again. I turned on debugging and looked at the logs, but I couldn't find a clue.
Are you using the LDAP plugin for auto-authentication (like $wgLDAPUseSSLAuth), or just for normal password authentication? Newer versions of MediaWiki aren't working with the auto-authentication part of the plugin. Let me know if this is the case, and I'll try to check out the issue for you. Btw, if you are having issues with the LDAP plugin, you should post your issues on the talk page of the plugin on mediawiki.org. I don't check bugzilla for issues very often.
After digging further I actually managed to fix this by changing the below value from it's default to $wgCookieSecure = false; with ldap you log in over a secure session, which creates a secure cookie, which for some reason can only be read by about half the pages. So on any page that can't read that cookie your not logged in. No clue if this is the correct behavior or not, but if it is, you can probable close this.
No comments for just under 4 years - has this been fixed now?
Ryan Fuerst / Tim Chambers: Is this still a problem in a recent version of MediaWiki (1.19 or later)?
