Last modified: 2010-05-15 15:37:19 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T5913, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 3913 - "Not logged in" appears when not expected
"Not logged in" appears when not expected
Product: MediaWiki
Classification: Unclassified
Special pages (Other open bugs)
PC Windows XP
: Normal critical with 2 votes (vote)
: ---
Assigned To: Nobody - You can work on this!
Depends on:
  Show dependency treegraph
Reported: 2005-11-09 16:42 UTC by Norm Katz
Modified: 2010-05-15 15:37 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description Norm Katz 2005-11-09 16:42:04 UTC
I did this twice in the same sequence so it is reproduceable.  I have installed
mediawiki on Windows XP Pro with php5isapi.dll on IIS5.  I installed and ran the
setup and everything came up fine.  As you know, by default, the site is
completely open for creating accounts.  I found your docs at on tightening
security and added the following 3 lines to my LocalSettings.php:
  $wgGroupPermissions['*'    ]['createaccount']   = false;
  $wgGroupPermissions['*'    ]['read']            = true;
  $wgGroupPermissions['*'    ]['edit']            = false;
This prevented account creation as expected.  But when I log in as any user, I
can no longer navigate to most pages.  Just logging in and going to my
preferences link, it immediately says: 

Not logged in
From KatzWiki
You must be logged in to set user preferences.
Return to Main Page.

fyi, The URL of the preferences link is:
which does not have my login id embedded.

Interestingly, when I removed these three lines from LocalSettings, the wiki DID
NOT revert back to normal.  I assumed this was a browser caching or a cookie
problem so I deleted cookies and browser caches on both Firefox and IE6 but it
had NO EFFECT.  I also tried iisreset before and after editing.  Obviously
something is getting modified "permanently" in the database, OS, or registry to
force this behavior.  I reinstalled and went through the same steps and got the
exact same results.  I'm posting here because this seems like a bug or a use
case that was not tested.

My goal is to prevent user creation except by sysop or beaurocrat and prevent
editing until users are logged in.  I'd also like to prevent anonymous users
from reading most pages so I assume I can use the 
$wgGroupPermissions['*'    ]['read']            = false;
and set a whitelist using:
$wgWhitelistRead = array ("Main Page", "Special:Userlogin", "Wikipedia:Help");

I searched the FAQ and newsgroups for some time before posting.
Comment 1 ajo 2006-03-09 22:21:03 UTC
When I log in as "Poondu" Wikipedia returns a page:
Login successful
From Wikipedia, the free encyclopedia
Jump to: navigation, search

You have successfully signed in to Wikipedia as "Poondu". 

However as soon as I try to change user preferences or go to any page I am
logged out and invited to log in again. ...You must be logged in to do...

Comment 2 Brion Vibber 2006-03-09 23:46:01 UTC
Original comment sounds like caching. Second comment is completely unrelated.

Note You need to log in before you can comment on or make changes to this bug.