wiki authentification "failure": wrong encoding character in page name

[Kévin Raymond]

Hi there,

Since few weeks (month?) there is some pages where it is hard to log
in. It is the one with accent in the page name.
Try to log in[1], [2] or [3].
 * If you're already logged in the wiki, you'll appear to be not logged in.
 * When providing your credentials to be logged in, the redirection won't work.

It should be because of the character encoding. Any idea?

[1] http://fedoraproject.org/wiki/R%C3%A9unions_hebdomadaires_de_la_French_team
[2] https://fedoraproject.org/wiki/Rencontres_Fedora_14_%C3%A0_Universciences
[3]
http://fedoraproject.org/wiki/Liste_du_mat%C3%A9riel_%C3%A0_pr%C3%A9voir_...

-- 
Kévin Raymond (shaiton)
GPG-Key: A5BCB3A2

[Kévin Raymond]

Oops, sorry for double posting,
It appears to work for some other people.

But I have seen this issue with many other comuters (other OS, other network).

-- 
Kévin Raymond (shaiton)
GPG-Key: A5BCB3A2

[Karsten Wade]

On Sat, Nov 06, 2010 at 10:32:52AM +0100, Kévin Raymond wrote:
>  Hi there,
>  
>  Since few weeks (month?) there is some pages where it is hard to log
>  in. It is the one with accent in the page name.
>  Try to log in[1], [2] or [3].
>   * If you're already logged in the wiki, you'll appear to be not logged in.
>   * When providing your credentials to be logged in, the redirection won't work.
>  
>  It should be because of the character encoding. Any idea?
>  
>  [1] http://fedoraproject.org/wiki/R%C3%A9unions_hebdomadaires_de_la_French_team
>  [2] https://fedoraproject.org/wiki/Rencontres_Fedora_14_%C3%A0_Universciences
>  [3]
> http://fedoraproject.org/wiki/Liste_du_mat%C3%A9riel_%C3%A0_pr%C3%A9voir_...
I see that you have HTTP for [1] and [2] but HTTPS for [3].

For our wiki, when you have HTTP, you are not logged in; you can only
be logged in over an HTTPS connection.  (HTTP is aggressively cached,
HTTPS is never cached; session cookies are only over SSL so the
session can't be hijacked; some other reasons I forget. :) )

So, I clicked on [2] and am able to retrieve the page and be logged
in.

With [1] and [3] I am able to change the 'http' to 'https' and
retrieve the page and be logged in.

I also tried logging out of [3], then logging back in, and that
worked.

So, it's still possible that you are having a character encoding
issue, perhaps specific to a browser and a page.  But first I
recommend you rule out the HTTP/HTTPS confusion.

- Karsten
-- 
name:  Karsten 'quaid' Wade, Sr. Community Gardener
team:                Red Hat Community Architecture 
uri:               http://TheOpenSourceWay.org/wiki
gpg:                                       AD0E0C41

[Kévin Raymond]

On Sun, Nov 7, 2010 at 4:13 AM, Karsten Wade <kwade(a)redhat.com&gt; wrote:
>  On Sat, Nov 06, 2010 at 10:32:52AM +0100, Kévin Raymond wrote:
> > Hi there,
> >
> > Since few weeks (month?) there is some pages where it is hard to log
> > in. It is the one with accent in the page name.
> > Try to log in[1], [2] or [3].
> >  * If you're already logged in the wiki, you'll appear to be not logged in.
> >  * When providing your credentials to be logged in, the redirection won't work.
> >
> > It should be because of the character encoding. Any idea?
> >
> > [1] http://fedoraproject.org/wiki/R%C3%A9unions_hebdomadaires_de_la_French_team
> > [2] https://fedoraproject.org/wiki/Rencontres_Fedora_14_%C3%A0_Universciences
> > [3]
> http://fedoraproject.org/wiki/Liste_du_mat%C3%A9riel_%C3%A0_pr%C3%A9voir_...
>
>  I see that you have HTTP for [1] and [2] but HTTPS for [3].
>
>  For our wiki, when you have HTTP, you are not logged in; you can only
>  be logged in over an HTTPS connection.  (HTTP is aggressively cached,
>  HTTPS is never cached; session cookies are only over SSL so the
>  session can't be hijacked; some other reasons I forget. :) )
>
>  So, I clicked on [2] and am able to retrieve the page and be logged
>  in.
>
>  With [1] and [3] I am able to change the 'http' to 'https' and
>  retrieve the page and be logged in.
>
>  I also tried logging out of [3], then logging back in, and that
>  worked.
>
>  So, it's still possible that you are having a character encoding
>  issue, perhaps specific to a browser and a page.  But first I
>  recommend you rule out the HTTP/HTTPS confusion.
>
>  - Karsten
>  --
>  name:  Karsten 'quaid' Wade, Sr. Community Gardener
>  team:                Red Hat Community Architecture
>  uri:               http://TheOpenSourceWay.org/wiki
>  gpg:                                       AD0E0C41
>  
Thank you Karsten,
you were right!

Couldn't we redirect automatically to the https connection while login in?

-- 
Kévin Raymond (shaiton)
GPG-Key: A5BCB3A2

[Karsten Wade]

On Sun, Nov 07, 2010 at 09:39:39AM +0100, Kévin Raymond wrote:

>  Couldn't we redirect automatically to the https connection while
> login in? 
When you actually click on the login link, it _should_ redirect you to
https.  Since it's a login page, it will let you log in again, even if
you are already logged in.

I suppose we could ask Apache to redirect if a logged in session auth
cookie is still active, but that makes it more difficult to test http
connections for website developers.  It's good to be able to view the
website as the way most people are seeing it (the cached content.)

- Karsten
-- 
name:  Karsten 'quaid' Wade, Sr. Community Gardener
team:                Red Hat Community Architecture 
uri:               http://TheOpenSourceWay.org/wiki
gpg:                                       AD0E0C41

[Kévin Raymond]

On Mon, Nov 8, 2010 at 9:34 PM, Karsten Wade <kwade(a)redhat.com&gt; wrote:
>  On Sun, Nov 07, 2010 at 09:39:39AM +0100, Kévin Raymond wrote:
>
> > Couldn't we redirect automatically to the https connection while login in?
>
>  When you actually click on the login link, it _should_ redirect you to
>  https.  Since it's a login page, it will let you log in again, even if
>  you are already logged in. 
That's the point.
While not logged in (cookies cleared), trying to log from a http page
redirect me to... the home (https). You told me that it should
redirect me to the secured page that I have asked for, therefor, here
is the problem, isn't it ?

>  I suppose we could ask Apache to redirect if a logged in session auth
>  cookie is still active, but that makes it more difficult to test http
>  connections for website developers.  It's good to be able to view the
>  website as the way most people are seeing it (the cached content.)
>
>  - Karsten
>  --
>  name:  Karsten 'quaid' Wade, Sr. Community Gardener
>  team:                Red Hat Community Architecture
>  uri:               http://TheOpenSourceWay.org/wiki
>  gpg:                                       AD0E0C41
>
>  --
>  websites mailing list
>  websites(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/websites
>  


-- 
Kévin Raymond (shaiton)
GPG-Key: A5BCB3A2