EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #00433

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

[EP-tech] {Disarmed} Re: Re: Unable to login after upgrading from 3.2.8 to 3.3.8

Perhaps try to find what's dealing with gzip at the Apache level (I've never seen such errors, so it's a wide guess)?

I let you debug on your side, check:

$ curl -X GET -v 10.11.161.159/cgi/local_login -H 'Accept-Encoding: gzip, deflate'

< HTTP/1.1 401 Authorization Required
< Date: Fri, 20 Apr 2012 11:01:58 GMT
< Server: Apache/2.2.20 (Ubuntu)
< Vary: Accept-Encoding
< Content-Encoding: gzip
< Content-Length: 20
< Content-Type: text/html; charset=iso-8859-1
#
# no content
#

VS.

$ curl -X GET -v 10.11.161.159/cgi/local_login

< HTTP/1.1 200 OK                                                                                  
< Date: Fri, 20 Apr 2012 11:02:17 GMT                                                              
< Server: Apache/2.2.20 (Ubuntu)                                                                   
< Cache-Control: no-store, no-cache, must-revalidate                                               
< Vary: Accept-Encoding                                                                            
< Transfer-Encoding: chunked                                                                       
< Content-Type: text/html; charset=utf-8
#
# html content follows (the login form)..
#

Seb

On 20/04/12 11:45, Alex Birchall wrote: 
Hi Seb,

We do not have mod_deflate in our Apache/http conf.

Alex

-----Original Message-----
From: eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk] On Behalf Of Sebastien Francois
Sent: 20 April 2012 10:44
To: eprints-tech@ecs.soton.ac.uk
Subject: [EP-tech] Re: Unable to login after upgrading from 3.2.8 to 3.3.8

Hi Alex,

I'm getting an odd behaviour, perhaps because of a mis-configuration at the Apache level....

I run a few tests with cURL, and I noticed that when using the HTTP header 'Accept-Encoding: gzip, deflate' (note: this is sent by Firefox), your Apache server returns a 401 without content. Without that header, I get the content from EPrints as expected. I think this comes from Apache because the format of the 401 response doesn't look like EPrints'.

Check if you have mod_deflate (responsible for gzip/deflate) in your Apache/httpd conf, if so, disable it & try again.

Seb.



On 19/04/12 19:06, Alex Birchall wrote:

Seb,

Yes, we are using a "special login" which you set up for us some months ago when we found that off-campus users could log into Eprints.

I tried:

firefox MailScanner warning: numerical links are often malicious: http://10.11.161.159/cgi/local_login?
firefox MailScanner warning: numerical links are often malicious: http://10.11.161.159/cgi/users/home?
firefox MailScanner warning: numerical links are often malicious: http://10.11.161.159/cgi/users/login?

All the above fail to return anything.

Also, accessing MailScanner warning: numerical links are often malicious: http://10.11.161.159 with IE8 results in the top half of the home page being blackened out, as you will probably be able verify for yourself.

Regards,

Alex

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/