Last modified: 2010-05-15 15:37:19 UTC
I did this twice in the same sequence so it is reproduceable. I have installed mediawiki on Windows XP Pro with php5isapi.dll on IIS5. I installed and ran the setup and everything came up fine. As you know, by default, the site is completely open for creating accounts. I found your docs at http://meta.wikimedia.org/wiki/Require_users_log_in_to_edit on tightening security and added the following 3 lines to my LocalSettings.php: $wgGroupPermissions['*' ]['createaccount'] = false; $wgGroupPermissions['*' ]['read'] = true; $wgGroupPermissions['*' ]['edit'] = false; This prevented account creation as expected. But when I log in as any user, I can no longer navigate to most pages. Just logging in and going to my preferences link, it immediately says: Not logged in From KatzWiki You must be logged in to set user preferences. Return to Main Page. fyi, The URL of the preferences link is: http://localhost/mediawiki/index.php?title=Special:Preferences which does not have my login id embedded. Interestingly, when I removed these three lines from LocalSettings, the wiki DID NOT revert back to normal. I assumed this was a browser caching or a cookie problem so I deleted cookies and browser caches on both Firefox and IE6 but it had NO EFFECT. I also tried iisreset before and after editing. Obviously something is getting modified "permanently" in the database, OS, or registry to force this behavior. I reinstalled and went through the same steps and got the exact same results. I'm posting here because this seems like a bug or a use case that was not tested. My goal is to prevent user creation except by sysop or beaurocrat and prevent editing until users are logged in. I'd also like to prevent anonymous users from reading most pages so I assume I can use the $wgGroupPermissions['*' ]['read'] = false; and set a whitelist using: $wgWhitelistRead = array ("Main Page", "Special:Userlogin", "Wikipedia:Help"); I searched the FAQ and newsgroups for some time before posting.
When I log in as "Poondu" Wikipedia returns a page: Login successful From Wikipedia, the free encyclopedia Jump to: navigation, search You have successfully signed in to Wikipedia as "Poondu". However as soon as I try to change user preferences or go to any page I am logged out and invited to log in again. ...You must be logged in to do... --ajo
Original comment sounds like caching. Second comment is completely unrelated.
