fresh install: login to weberp-demo database not possible

[opto]

My original message has been refused by the mailing list although I am correctly registered as a user (per sourceforge info page).
Well, I might be a user of weberp if this problem can be sorted out. So sorry for double posting.

problem with login after fresh install
original post:
Hi, for 3.11 (downloaded a few days ago), the demo login (user/passwd data as given in login windows) fails. (wrong user/password combination.
After htree trials, the system locks (ask admin...).

Xampp 1.7.1 with mysql 5.1.33, I think. All on Vista business.

Do you have any ideas what's wrong?

Thanks for the help,

Klaus

[Bogdan Stanciu]

I found a bug in the install file, which prevents the update of the
user, so you should try with user: admin pwd: weberp


hope it helps.

bogdan


opto wrote:

> My original message has been refused by the mailing list although I am
> correctly registered as a user (per sourceforge info page).
> Well, I might be a user of weberp if this problem can be sorted out. So
> sorry for double posting.
>
> problem with login after fresh install
> original post:
> Hi, for 3.11 (downloaded a few days ago), the demo login (user/passwd data
> as given in login windows) fails. (wrong user/password combination.
> After htree trials, the system locks (ask admin...).
>
> Xampp 1.7.1 with mysql 5.1.33, I think. All on Vista business.
>
> Do you have any ideas what's wrong?
>
> Thanks for the help,
>
> Klaus
>  

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Glenn Lyons]

INSTALL

I also had issue with the demo login. I got locked out after too many
retries, so I deleted my cookies and restarted weberp, but it did not
help.  Then found the www_user table with one row per user in it. It has
a field "blocked" and I changed it from 1 back to 0. Still could not log
in, so I dropped the demo database and reloaded it (with manual fix to
factorcompannies) and could login successfully.

What is the effect of removing the cookies between weberp sessions?
How is a blocked user (too many failed login attempts) normally reset?
Is the number of retires set in the database or hard coded?
If data controlled it would be great of the demo was set to a large
number or zero for disabled.

The Install doc says to create the user weberp_db_user.

mysql> GRANT ALL PRIVILEGES ON *.* TO weberp_db_user@localhost
                   IDENTIFIED BY 'some_pass' WITH GRANT OPTION;

Why am I creating a user "weberp_db_user"  (assuming it is not intended
as a parameter or example of some sort)? Does the install script use it
to create user/password "admin/weberp"?
Earlier in the install page the mysql admin user and password is asked
for, so would not this be used to create mysql schema and data including
the demo login.

I just install the latest Joomla. There is an install script to be envied!


Glenn

Bogdan Stanciu wrote:

> I found a bug in the install file, which prevents the update of the
> user, so you should try with user: admin pwd: weberp
>
>
> hope it helps.
>
> bogdan
>
>
> opto wrote:
>
>  
>> My original message has been refused by the mailing list although I am
>> correctly registered as a user (per sourceforge info page).
>> Well, I might be a user of weberp if this problem can be sorted out. So
>> sorry for double posting.
>>
>> problem with login after fresh install
>> original post:
>> Hi, for 3.11 (downloaded a few days ago), the demo login (user/passwd data
>> as given in login windows) fails. (wrong user/password combination.
>> After htree trials, the system locks (ask admin...).
>>
>> Xampp 1.7.1 with mysql 5.1.33, I think. All on Vista business.
>>
>> Do you have any ideas what's wrong?
>>
>> Thanks for the help,
>>
>> Klaus
>>  
>>    
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> Web-erp-developers@...
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>
>
>
>  

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Lindsay Harris]

Glenn,
My recollection about being locked out is that killing the browser off
is also required.  Perhaps it just removes the cookies, so that may
have been a useful step to try.  Frustration (removed the block in
the database and still cannot login) leads to more bold measures to
get around.   One possibility is the involvement of the PHP session
values.   Never bothered to track it down.

As for the MySQL code - that user (weberp_db_user@...) is granting
access for the web server to connect to the database.  The database
machine, MySQL user name and password are set in the config.php file.  
This user is unrelated to the user name for logging in to webERP via
your browser.  Those are in the www_users table.

Lindsay

On Fri, 6 Nov 2009 15:38:02 Glenn Lyons wrote:

> INSTALL
>
> I also had issue with the demo login. I got locked out after too
> many retries, so I deleted my cookies and restarted weberp, but it
> did not help.  Then found the www_user table with one row per user
> in it. It has a field "blocked" and I changed it from 1 back to 0.
> Still could not log in, so I dropped the demo database and reloaded
> it (with manual fix to factorcompannies) and could login
> successfully.
>
> What is the effect of removing the cookies between weberp sessions?
> How is a blocked user (too many failed login attempts) normally
> reset? Is the number of retires set in the database or hard coded?
> If data controlled it would be great of the demo was set to a large
> number or zero for disabled.
>
> The Install doc says to create the user weberp_db_user.
>
> mysql> GRANT ALL PRIVILEGES ON *.* TO weberp_db_user@localhost
>                    IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
>
> Why am I creating a user "weberp_db_user"  (assuming it is not
> intended as a parameter or example of some sort)? Does the install
> script use it to create user/password "admin/weberp"?
> Earlier in the install page the mysql admin user and password is
> asked for, so would not this be used to create mysql schema and
> data including the demo login.
>
> I just install the latest Joomla. There is an install script to be
> envied!
>
>
> Glenn
>
> Bogdan Stanciu wrote:
> > I found a bug in the install file, which prevents the update of
> > the user, so you should try with user: admin pwd: weberp
> >
> >
> > hope it helps.
> >
> > bogdan
> >
> > opto wrote:
> >> My original message has been refused by the mailing list
> >> although I am correctly registered as a user (per sourceforge
> >> info page). Well, I might be a user of weberp if this problem
> >> can be sorted out. So sorry for double posting.
> >>
> >> problem with login after fresh install
> >> original post:
> >> Hi, for 3.11 (downloaded a few days ago), the demo login
> >> (user/passwd data as given in login windows) fails. (wrong
> >> user/password combination. After htree trials, the system locks
> >> (ask admin...).
> >>
> >> Xampp 1.7.1 with mysql 5.1.33, I think. All on Vista business.
> >>
> >> Do you have any ideas what's wrong?
> >>
> >> Thanks for the help,
> >>
> >> Klaus
> >
> > -----------------------------------------------------------------
> >------------- Let Crystal Reports handle the reporting - Free
> > Crystal Reports 2008 30-Day trial. Simplify your report design,
> > integration and deployment - and focus on what you do best, core
> > application coding. Discover what's new with Crystal Reports now.
> >  http://p.sf.net/sfu/bobj-july
> > _______________________________________________
> > Web-erp-developers mailing list
> > Web-erp-developers@...
> > https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>
> -------------------------------------------------------------------
>----------- Let Crystal Reports handle the reporting - Free Crystal
> Reports 2008 30-Day trial. Simplify your report design, integration
> and deployment - and focus on what you do best, core application
> coding. Discover what's new with Crystal Reports now.
> http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> Web-erp-developers@...
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Phil Daintree-3]

Glenn Lyons wrote:
> INSTALL
>
> I also had issue with the demo login. I got locked out after too many
> retries, so I deleted my cookies and restarted weberp, but it did not
> help.  Then found the www_user table with one row per user in it. It has
> a field "blocked" and I changed it from 1 back to 0. Still could not log
> in, so I dropped the demo database and reloaded it (with manual fix to
> factorcompannies) and could login successfully.
>

You would need to close the browser too to lose the session where the
blocked flag is set... then reopen and attempt to login again.



> What is the effect of removing the cookies between weberp sessions?

PHP sessions are based on cookies. When the session is finished then the
cookie can be deleted with no impact.

> How is a blocked user (too many failed login attempts) normally reset?
> Is the number of retires set in the database or hard coded?

Yes - see includes/session.inc

> If data controlled it would be great of the demo was set to a large
> number or zero for disabled.

The demo normally has the login checks disabled.

>
> The Install doc says to create the user weberp_db_user.
>
> mysql> GRANT ALL PRIVILEGES ON *.* TO weberp_db_user@localhost
>                    IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
>
> Why am I creating a user "weberp_db_user"  (assuming it is not intended
> as a parameter or example of some sort)?



The INTALL.txt document instructs on how to install manually and relays
the mysql best practise not to run as root... the user name

weberp_db_user

is just text to illustrate a username that is not root - you can create
a username of anything you like. However, weberp_db_user is as good as any!


Does the install script use it
> to create user/password "admin/weberp"?

Don't confuse the webERP login username with the mysql username ... the
user admin is the default webERP username. The install is created with
the username admin and password weberp - this maybe not spelled out
clearly enough.


> Earlier in the install page the mysql admin user and password is asked
> for, so would not this be used to create mysql schema and data including
> the demo login.

Yes it is.


> I just install the latest Joomla. There is an install script to be envied!

Yes it is nice although I often find I run into permissions errors with
these installers. However, we did our best - Nagaraj developed it - it
looked like he copied from somewhere else and commented out a whole lot
of stuff and then I added 20c. Not heard from him for a while - his new
wife must be keeping him from us. ... fair enough:-)

>
>
> Glenn
>
> Bogdan Stanciu wrote:
>> I found a bug in the install file, which prevents the update of the
>> user, so you should try with user: admin pwd: weberp
>>
>>
>> hope it helps.
>>
>> bogdan
>>
>>
>> opto wrote:
>>
>>  
>>> My original message has been refused by the mailing list although I am
>>> correctly registered as a user (per sourceforge info page).
>>> Well, I might be a user of weberp if this problem can be sorted out. So
>>> sorry for double posting.
>>>
>>> problem with login after fresh install
>>> original post:
>>> Hi, for 3.11 (downloaded a few days ago), the demo login (user/passwd data
>>> as given in login windows) fails. (wrong user/password combination.
>>> After htree trials, the system locks (ask admin...).
>>>
>>> Xampp 1.7.1 with mysql 5.1.33, I think. All on Vista business.
>>>
>>> Do you have any ideas what's wrong?
>>>
>>> Thanks for the help,
>>>
>>> Klaus
>>>  
>>>    
>> ------------------------------------------------------------------------------
>> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
>> trial. Simplify your report design, integration and deployment - and focus on
>> what you do best, core application coding. Discover what's new with
>> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
>> _______________________________________________
>> Web-erp-developers mailing list
>> Web-erp-developers@...
>> https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>>
>>
>>
>>  
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> Web-erp-developers@...
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Glenn Lyons]

Lindsay Harris wrote:
> Glenn,
>  

So does this ever auto correct? And there is no admin function to reset
this on the fly!
> My recollection about being locked out is that killing the browser off
> is also required.  Perhaps it just removes the cookies, so that may
> have been a useful step to try.  Frustration (removed the block in
> the database and still cannot login) leads to more bold measures to
> get around.   One possibility is the involvement of the PHP session
> values.   Never bothered to track it down.
>
>  

vvvvvvvv
This should be made clear to the user in the install script in STEP 6.
Maybe it shoud be named "STEP 6 -  Server Authentication ",
then add a "STEP 7 - Default User Login" with the mandatory security
warning the change this if you are security conscious.

It would be even better if the script did a test connect to validate the
user's choice of <user/passwd> in STEP 6,
and advise "green-success" or a "red-failure".

I was mistakenly under the belief that this was a user account for demo.
But, the initial user account "admin/weberp" must get created without a
whisper to the user, either during the install script execution or maybe
at demo data load. That is why I could not login with what I entered in
Step 6. Note to me -  check the demo and new company data files for
www_user.
> As for the MySQL code - that user (weberp_db_user@...) is granting
> access for the web server to connect to the database.  The database
> machine, MySQL user name and password are set in the config.php file.  
> This user is unrelated to the user name for logging in to webERP via
> your browser.  Those are in the www_users table.
>
>  
^^^^^^^
> Lindsay
>
>  
Glenn

PS. I am reading the code in order to answer some of these
questions....it takes a while to come to terms with what it is actually
doing.


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Tim Schofield]

You can take the block off through the ui but obviously that requires
the ability to login. The thinking is that the admin user can solve
this problem for other users. The installer is a new feature and it
needs some of the rough edges smoothing over.

Thanks
Tim


2009/11/6 Glenn Lyons <glenn@...>:

> Lindsay Harris wrote:
>> Glenn,
>>
>
> So does this ever auto correct? And there is no admin function to reset
> this on the fly!
>> My recollection about being locked out is that killing the browser off
>> is also required.  Perhaps it just removes the cookies, so that may
>> have been a useful step to try.  Frustration (removed the block in
>> the database and still cannot login) leads to more bold measures to
>> get around.   One possibility is the involvement of the PHP session
>> values.   Never bothered to track it down.
>>
>>
>
> vvvvvvvv
> This should be made clear to the user in the install script in STEP 6.
> Maybe it shoud be named "STEP 6 -  Server Authentication ",
> then add a "STEP 7 - Default User Login" with the mandatory security
> warning the change this if you are security conscious.
>
> It would be even better if the script did a test connect to validate the
> user's choice of <user/passwd> in STEP 6,
> and advise "green-success" or a "red-failure".
>
> I was mistakenly under the belief that this was a user account for demo.
> But, the initial user account "admin/weberp" must get created without a
> whisper to the user, either during the install script execution or maybe
> at demo data load. That is why I could not login with what I entered in
> Step 6. Note to me -  check the demo and new company data files for
> www_user.
>> As for the MySQL code - that user (weberp_db_user@...) is granting
>> access for the web server to connect to the database.  The database
>> machine, MySQL user name and password are set in the config.php file.
>> This user is unrelated to the user name for logging in to webERP via
>> your browser.  Those are in the www_users table.
>>
>>
> ^^^^^^^
>> Lindsay
>>
>>
> Glenn
>
> PS. I am reading the code in order to answer some of these
> questions....it takes a while to come to terms with what it is actually
> doing.
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> Web-erp-developers@...
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Glenn Lyons]

Phil Daintree wrote:

> Glenn Lyons wrote:
>  
>> INSTALL
>>
>> I also had issue with the demo login. I got locked out after too many
>> retries, so I deleted my cookies and restarted weberp, but it did not
>> help.  Then found the www_user table with one row per user in it. It has
>> a field "blocked" and I changed it from 1 back to 0. Still could not log
>> in, so I dropped the demo database and reloaded it (with manual fix to
>> factorcompannies) and could login successfully.
>>
>>    
>
> You would need to close the browser too to lose the session where the
> blocked flag is set... then reopen and attempt to login again.
>  

Doesn't reloading index.php clear the old session if it cannot find the
weberp.org cookie?
Otherwise how does it know my current state or, for that matter,  who i am.
Is there something about this php resource I am failing to understand?

>
>  
>> What is the effect of removing the cookies between weberp sessions?
>>    
>
> PHP sessions are based on cookies. When the session is finished then the
> cookie can be deleted with no impact.
>
>  
>> How is a blocked user (too many failed login attempts) normally reset?
>> Is the number of retires set in the database or hard coded?
>>    
>
> Yes - see includes/session.inc

                         elseif ($_SESSION['AttemptsCounter'] >= 5 AND isset($_POST['UserNameEntryField'])) {
                                /*User blocked from future accesses until sysadmin releases */
                                $sql = "UPDATE www_users
                                                SET blocked=1
                                        WHERE www_users.userid='" . $_POST['UserNameEntryField'] . "'";
                                $Auth_Result = DB_query($sql, $db);
                                die(include($PathPrefix . 'includes/FailedLogin.php'));
                        } /*User blocked from future accesses until sysadmin releases */

Okay we are hard coded to 5 attemps...

BTW this page <http://www.weberp.org/WeberpFeatures> states....

"Incorrect entry of password (more than 3 times) blocks the account
until reset by the System Administrator. This prevents password
crackers from breaking the security."

I do concede that 5 is more than 3.

Please tell me where to find this System Administrator release procedure????
(I have googled weberp.org and done the RTFM and checked the menus and some of the code. I wife tell me I can see what is in front of me, I hope she is wrong.)
 

>  
>> If data controlled it would be great of the demo was set to a large
>> number or zero for disabled.
>>    
>
> The demo normally has the login checks disabled.
>  
This was not disabled  when I load the demo.
from session.inc ...


// Un comment to turn off attempts counter
//$_SESSION['AttemptsCounter'] = 0;

if (!isset($_SESSION['AttemptsCounter'])){
    $_SESSION['AttemptsCounter'] = 0;
}

I am not sure where "AttemptsCounter" is initialised (I will trace it
further) but, at this stage, it does not look like it can be disabled by
database; only by uncommenting the code lines in session.inc.

>  
>> The Install doc says to create the user weberp_db_user.
>>
>> mysql> GRANT ALL PRIVILEGES ON *.* TO weberp_db_user@localhost
>>                    IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
>>
>> Why am I creating a user "weberp_db_user"  (assuming it is not intended
>> as a parameter or example of some sort)?
>>    
>
>
>
> The INTALL.txt document instructs on how to install manually and relays
> the mysql best practise not to run as root... the user name
>
> weberp_db_user
>
> is just text to illustrate a username that is not root - you can create
> a username of anything you like. However, weberp_db_user is as good as any!
>
>  

So this is the server login.

> Does the install script use it
>  
>> to create user/password "admin/weberp"?
>>    
>
> Don't confuse the webERP login username with the mysql username ... the
> user admin is the default webERP username. The install is created with
> the username admin and password weberp - this maybe not spelled out
> clearly enough.
>
>
>  
>> Earlier in the install page the mysql admin user and password is asked
>> for, so would not this be used to create mysql schema and data including
>> the demo login.
>>    
>
> Yes it is.
>
>
>  
>> I just install the latest Joomla. There is an install script to be envied!
>>    
>
> Yes it is nice although I often find I run into permissions errors with
> these installers. However, we did our best - Nagaraj developed it - it
> looked like he copied from somewhere else and commented out a whole lot
> of stuff and then I added 20c. Not heard from him for a while - his new
> wife must be keeping him from us. ... fair enough:-)
>
>  

I think it is very function install.
I went wrong because I did not understand what it was doing and had a
few errors along the way.
A little more description in the screen text would make it a lot more
user friendly.
I also had to recover from a demo load that left half a database
(factorcompanies) and then this login lockout.
>> Glenn
>>    


I appreciate your assistance.

Glenn

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Tim Schofield]

2009/11/6 Glenn Lyons <glenn@...>:

> Please tell me where to find this System Administrator release procedure????

Choose `User Maintenance` from the General section of the Setup menu.
Edit the user who is blocked, and change `Account Status` to Open.

Tim

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Glenn Lyons]

Tim Schofield wrote:

> 2009/11/6 Glenn Lyons <glenn@...>:
>
>  
>> Please tell me where to find this System Administrator release procedure????
>>    
>
> Choose `User Maintenance` from the General section of the Setup menu.
> Edit the user who is blocked, and change `Account Status` to Open.
>
> Tim
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> Web-erp-developers@...
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>
>
>
>  

Thankyou.

Glenn

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Phil Daintree-3]

To unblock you just go into

Setup->User Accounts and change the account status from blocked to open

Phil

Glenn Lyons wrote:

> Phil Daintree wrote:
>> Glenn Lyons wrote:
>>  
>>> INSTALL
>>>
>>> I also had issue with the demo login. I got locked out after too many
>>> retries, so I deleted my cookies and restarted weberp, but it did not
>>> help.  Then found the www_user table with one row per user in it. It has
>>> a field "blocked" and I changed it from 1 back to 0. Still could not log
>>> in, so I dropped the demo database and reloaded it (with manual fix to
>>> factorcompannies) and could login successfully.
>>>
>>>    
>> You would need to close the browser too to lose the session where the
>> blocked flag is set... then reopen and attempt to login again.
>>  
> Doesn't reloading index.php clear the old session if it cannot find the
> weberp.org cookie?
> Otherwise how does it know my current state or, for that matter,  who i am.
> Is there something about this php resource I am failing to understand?
>>  
>>> What is the effect of removing the cookies between weberp sessions?
>>>    
>> PHP sessions are based on cookies. When the session is finished then the
>> cookie can be deleted with no impact.
>>
>>  
>>> How is a blocked user (too many failed login attempts) normally reset?
>>> Is the number of retires set in the database or hard coded?
>>>    
>> Yes - see includes/session.inc
> elseif ($_SESSION['AttemptsCounter'] >= 5 AND isset($_POST['UserNameEntryField'])) {
> /*User blocked from future accesses until sysadmin releases */
> $sql = "UPDATE www_users
> SET blocked=1
> WHERE www_users.userid='" . $_POST['UserNameEntryField'] . "'";
> $Auth_Result = DB_query($sql, $db);
> die(include($PathPrefix . 'includes/FailedLogin.php'));
> } /*User blocked from future accesses until sysadmin releases */
>
> Okay we are hard coded to 5 attemps...
>
> BTW this page <http://www.weberp.org/WeberpFeatures> states....
>
> "Incorrect entry of password (more than 3 times) blocks the account
> until reset by the System Administrator. This prevents password
> crackers from breaking the security."
>
> I do concede that 5 is more than 3.
>
> Please tell me where to find this System Administrator release procedure????
> (I have googled weberp.org and done the RTFM and checked the menus and some of the code. I wife tell me I can see what is in front of me, I hope she is wrong.)
>  
>
>>  
>>> If data controlled it would be great of the demo was set to a large
>>> number or zero for disabled.
>>>    
>> The demo normally has the login checks disabled.
>>  
> This was not disabled  when I load the demo.
> from session.inc ...
>
>
> // Un comment to turn off attempts counter
> //$_SESSION['AttemptsCounter'] = 0;
>
> if (!isset($_SESSION['AttemptsCounter'])){
>     $_SESSION['AttemptsCounter'] = 0;
> }
>
> I am not sure where "AttemptsCounter" is initialised (I will trace it
> further) but, at this stage, it does not look like it can be disabled by
> database; only by uncommenting the code lines in session.inc.
>
>>  
>>> The Install doc says to create the user weberp_db_user.
>>>
>>> mysql> GRANT ALL PRIVILEGES ON *.* TO weberp_db_user@localhost
>>>                    IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
>>>
>>> Why am I creating a user "weberp_db_user"  (assuming it is not intended
>>> as a parameter or example of some sort)?
>>>    
>>
>>
>> The INTALL.txt document instructs on how to install manually and relays
>> the mysql best practise not to run as root... the user name
>>
>> weberp_db_user
>>
>> is just text to illustrate a username that is not root - you can create
>> a username of anything you like. However, weberp_db_user is as good as any!
>>
>>  
> So this is the server login.
>> Does the install script use it
>>  
>>> to create user/password "admin/weberp"?
>>>    
>> Don't confuse the webERP login username with the mysql username ... the
>> user admin is the default webERP username. The install is created with
>> the username admin and password weberp - this maybe not spelled out
>> clearly enough.
>>
>>
>>  
>>> Earlier in the install page the mysql admin user and password is asked
>>> for, so would not this be used to create mysql schema and data including
>>> the demo login.
>>>    
>> Yes it is.
>>
>>
>>  
>>> I just install the latest Joomla. There is an install script to be envied!
>>>    
>> Yes it is nice although I often find I run into permissions errors with
>> these installers. However, we did our best - Nagaraj developed it - it
>> looked like he copied from somewhere else and commented out a whole lot
>> of stuff and then I added 20c. Not heard from him for a while - his new
>> wife must be keeping him from us. ... fair enough:-)
>>
>>  
> I think it is very function install.
> I went wrong because I did not understand what it was doing and had a
> few errors along the way.
> A little more description in the screen text would make it a lot more
> user friendly.
> I also had to recover from a demo load that left half a database
> (factorcompanies) and then this login lockout.
>>> Glenn
>>>    
>
>
> I appreciate your assistance.
>
> Glenn
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> Web-erp-developers@...
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
Web-erp-developers@...
https://lists.sourceforge.net/lists/listinfo/web-erp-developers

[Sudhakar Manoharan]

u have said about manual fix of factorcomapnies. tables what did u do for the factorcompanies

Please reply ASAP.

thanks

Sudhakar Manoharan

Lindsay Harris wrote:

Glenn,
My recollection about being locked out is that killing the browser off
is also required.  Perhaps it just removes the cookies, so that may
have been a useful step to try.  Frustration (removed the block in
the database and still cannot login) leads to more bold measures to
get around.   One possibility is the involvement of the PHP session
values.   Never bothered to track it down.

As for the MySQL code - that user (weberp_db_user@...) is granting
access for the web server to connect to the database.  The database
machine, MySQL user name and password are set in the config.php file.  
This user is unrelated to the user name for logging in to webERP via
your browser.  Those are in the www_users table.

Lindsay

On Fri, 6 Nov 2009 15:38:02 Glenn Lyons wrote:
> INSTALL
>
> I also had issue with the demo login. I got locked out after too
> many retries, so I deleted my cookies and restarted weberp, but it
> did not help.  Then found the www_user table with one row per user
> in it. It has a field "blocked" and I changed it from 1 back to 0.
> Still could not log in, so I dropped the demo database and reloaded
> it (with manual fix to factorcompannies) and could login
> successfully.
>
> What is the effect of removing the cookies between weberp sessions?
> How is a blocked user (too many failed login attempts) normally
> reset? Is the number of retires set in the database or hard coded?
> If data controlled it would be great of the demo was set to a large
> number or zero for disabled.
>
> The Install doc says to create the user weberp_db_user.
>
> mysql> GRANT ALL PRIVILEGES ON *.* TO weberp_db_user@localhost
>                    IDENTIFIED BY 'some_pass' WITH GRANT OPTION;
>
> Why am I creating a user "weberp_db_user"  (assuming it is not
> intended as a parameter or example of some sort)? Does the install
> script use it to create user/password "admin/weberp"?
> Earlier in the install page the mysql admin user and password is
> asked for, so would not this be used to create mysql schema and
> data including the demo login.
>
> I just install the latest Joomla. There is an install script to be
> envied!
>
>
> Glenn
>
> Bogdan Stanciu wrote:
> > I found a bug in the install file, which prevents the update of
> > the user, so you should try with user: admin pwd: weberp
> >
> >
> > hope it helps.
> >
> > bogdan
> >
> > opto wrote:
> >> My original message has been refused by the mailing list
> >> although I am correctly registered as a user (per sourceforge
> >> info page). Well, I might be a user of weberp if this problem
> >> can be sorted out. So sorry for double posting.
> >>
> >> problem with login after fresh install
> >> original post:
> >> Hi, for 3.11 (downloaded a few days ago), the demo login
> >> (user/passwd data as given in login windows) fails. (wrong
> >> user/password combination. After htree trials, the system locks
> >> (ask admin...).
> >>
> >> Xampp 1.7.1 with mysql 5.1.33, I think. All on Vista business.
> >>
> >> Do you have any ideas what's wrong?
> >>
> >> Thanks for the help,
> >>
> >> Klaus
> >
> > -----------------------------------------------------------------
> >------------- Let Crystal Reports handle the reporting - Free
> > Crystal Reports 2008 30-Day trial. Simplify your report design,
> > integration and deployment - and focus on what you do best, core
> > application coding. Discover what's new with Crystal Reports now.
> >  http://p.sf.net/sfu/bobj-july
> > _______________________________________________
> > Web-erp-developers mailing list
> > [e-mail]
> > https://lists.sourceforge.net/lists/listinfo/web-erp-developers
>
> -------------------------------------------------------------------
>----------- Let Crystal Reports handle the reporting - Free Crystal
> Reports 2008 30-Day trial. Simplify your report design, integration
> and deployment - and focus on what you do best, core application
> coding. Discover what's new with Crystal Reports now.
> http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Web-erp-developers mailing list
> [e-mail]
> https://lists.sourceforge.net/lists/listinfo/web-erp-developers



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Web-erp-developers mailing list
[e-mail]
https://lists.sourceforge.net/lists/listinfo/web-erp-developers