I just upgraded to version 2.2-svn core 1.1.23 from version 2.2-svn core 1.1.11 and I'm getting an "Authentication Failure" when trying to log in.
Here is the whole dump:
-----------------------------------------------------------------------------------
Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery
Error Detail -
Error (ERROR_REQUEST_FORGED)
in modules\core\classes\GalleryController.class at line 235 (GalleryCoreApi::error)
in main.php at line 224 (GalleryController::assertIsGenuineRequest)
in main.php at line 94
in main.php at line 83
System Information
Gallery version 2.2-svn
PHP version 5.1.4 cgi-fcgi
Webserver Microsoft-IIS/6.0
Database mysql 5.0.22-community-nt
Toolkits Thumbnail, ImageMagick, Gd, NetPBM
Operating system Windows NT COCOA 5.2 build 3790
Browser Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Tablet PC 1.7; .NET CLR 1.0.3705; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727)
-----------------------------------------------------------------------------------
The interesting thing is that when I click on the "Back to the Gallery" link on the error page, I'm in the Gallery application logged in and everything works. Weird!!
Can anybody help?
Gallery version = 2.2-svn core 1.1.23
PHP version = 5.1.4 cgi-fcgi
Webserver = Microsoft-IIS/6.0
Database = mysql 5.0.22-community-nt, lock.system=database
Toolkits = Exif, Thumbnail, Gd, ImageMagick, Ffmpeg, NetPBM, LinkItemToolkit
Acceleration = none, partial/86400
Operating system = Windows NT COCOA 5.2 build 3790
Default theme = matrix
gettext = enabled
Locale = en_US
Browser = Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8
Rows in GalleryAccessMap table = 169
Rows in GalleryAccessSubscriberMap table = 10343
Rows in GalleryUser table = 10
Rows in GalleryItem table = 10335
Rows in GalleryAlbumItem table = 359
Rows in GalleryCacheMap table = 7
Posted: Wed, 2006-11-29 15:09
Posts: 32509
did you modify your gallery?
is this the normal login form?
Posts: 7
No I did not modify anything on the gallery. The only thing I did was to upgrade the core from 1.1.11 to 1.1.23.
Before the upgrade it was working fine. No errors through the upgrade.
The login form is the default gallery form. If you need, I can send you the site with a temporary login.
Posts: 32509
> The login form is the default gallery form. If you need, I can send you the site with a temporary login.
please do so.
Posts: 32509
- IIS/6.0
- sends a "HTTP/1.x 500" as response to the post request.
a) why code 500?
b) why http "1.x"?
i don't have windows 2003 / vista myself. i've tested it with ms windows xp / iis/5.0 and apache 2.
maybe it's a iis/6.0 issue, no idea.
i'll see if another developer has access to iis/6.0.
Posts: 32509
yes, i can confirm the ERROR_REQUEST_FORGED. the http headers can be viewed with a special firefox extension or with ethereal.
Posts: 7
Valiant,
Did you get the:
-------------------------------------------------------
Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery
-------------------------------------------------
How are you getting the code 500 or http "1.x"?
Yes, I'm running on Windows 2003 server with PHP. Something else that it was changed at the same time with the Gallery upgrade; is the installation of the new Internet Explorer 7.0. I wonder if that had something to do with the authentication. I will uninstall IE 7.0 tonight and see what happens.
Posts: 32509
IE7 is not the issue. it's iis/6.0. i'll need more data points for iis/6.0 since i don't have it myself.
Posts: 7
I will leave the accounts that I created for you open.
Let me know what other data points or configuration items you need me to provide.
Thanks for all your help.
Posts: 7
Does anybody have any sugestions for IIS/6.0 Widows 2003 issue that I'm having?
I'm getting error ERROR_REQUEST_FORGED when trying to login.
Posts: 2
I experienced same error after upgrade to core .23
System Information
Gallery version 2.2-svn
PHP version 5.2.0 cgi-fcgi
Webserver Microsoft-IIS/6.0
Database mysqli 5.1.11-beta
Toolkits SquareThumb, ImageMagick, Thumbnail, Gd
Operating system Windows NT K8NF4G 5.2 build 3790
Browser Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Posts: 32509
Could anyone of your give me access to their IIS/6.0 box?
I'll need access to change the gallery2/ files and to inspect the database (e.g. phpmyadmin).
I've never worked with windows remote access and ssh doesn't seem to be an option for windows servers for this purpose, or is it?
So i guess ftp + phpmyadmin access + url + g2 account should do it.
You can send me the info via PM.
Thanks!
Posts: 32509
hk_ben
no, your issue was something different. i fixed your g2.
so your g2 with IIS/6.0 works pretty well, no ERROR_REQUEST_FORGED.
btw: your problem was that for some reason, 'CacheMap' was not in your Schema table, while there actually was such a table.
So it did not upgrade the existing CacheMap table as it should. I did the upgrade of that table for you, manually.
All should be fine now.
@douklias:
seems it is not a IIS related issue since both of your setups are very similar.
Posts: 7
valiant:
What are the steps to fix the CacheMap table? Do you have a script?
Posts: 32509
douklias:
hk_ben's issue was totally unrelated. i didn't even see the ERROR_REQUEST_FORGED error on his site.
it's very unlikely any other user has the same issue as he had.
that having said: you only have the same issue if there's no entry in the schema table for CacheMap
(SELECT * FROM g2_Schema where g_name = 'CacheMap';)
Posts: 19
I have the exact same problem after the upgrade. Not being familiar with MySql, am I to use this command (SELECT * FROM g2_Schema where g_name = 'CacheMap';) to correct the problem?
Posts: 22
Oops my bad,
I went to quick, searched on 2 terms that didn't hit this so I started a post under trouble shooting. Im not sure about IIS 6.0 being the only issue. Im using IIS 5.0 on a older developmnet server.
Here is my info.
Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery <--- Actually takes you to your main page fully logged in.
Error Detail -
Error (ERROR_REQUEST_FORGED)
in modules\core\classes\GalleryController.class at line 235 (gallerycoreapi::error)
in main.php at line 224 (gallerycontroller::assertisgenuinerequest)
in main.php at line 94
in main.php at line 83
System Information
Gallery version = 2.2-svn core 1.1.25
PHP version = 4.4.4 cgi-fcgi
Webserver = Microsoft-IIS/5.0
Database = mysql 5.0.27-community-nt, lock.system=database
Toolkits = Exif, Thumbnail, ImageMagick, SquareThumb, Gd, Ffmpeg, LinkItemToolkit
Acceleration = none, none
Operating system = Windows NT IIS-DEV01 5.0 build 2195
Default theme = PGtheme
gettext = disabled
Locale = en_US
Browser = Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.1; .NET CLR 2.0.50727)
Rows in GalleryAccessMap table = 39
Rows in GalleryAccessSubscriberMap table = 21
Rows in GalleryUser table = 2
Rows in GalleryItem table = 16
Rows in GalleryAlbumItem table = 7
Rows in GalleryCacheMap table = 0
Posts: 32509
jtownsend
please post your system information (as the other users did):
FAQ: What information is required when I ask for help in the forums?
and no, this SQL command won't help.
@robert.wilson
so what you guys have in common is a) IIS b) php-cgi (not mod_php).
in your case i'd have asked you to switch to the matrix theme, that might fix things.
and already tried logging out / logging in again?
Posts: 19
I have a multisite and all sites are affected. The message appears when you submit you username and password to login and then at the error page if you click "Back to gallery" you return to he gallery and are logged in.
Error (ERROR_REQUEST_FORGED)
in modules\core\classes\GalleryController.class at line 235 (GalleryCoreApi::error)
in main.php at line 224 (GalleryController::assertIsGenuineRequest)
in main.php at line 94
in main.php at line 83
in D:\Inetpub\wwwroot\users\spiderlax\public_html\main.php at line 3
System Information
Gallery version 2.2-svn
PHP version 5.2.0 cgi-fcgi
Webserver Microsoft-IIS/5.0
Database mysqlt 5.0.27-community-nt
Toolkits SquareThumb, ImageMagick, Thumbnail
Operating system Windows NT SAMBA 5.0 build 2195
Browser Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Posts: 19
Follow up/Additional information
http://www.spiderlax.com
http://www.spiderlax.com/phpinfo.php
Gallery version = 2.2-svn core 1.1.25
PHP version = 5.2.0 cgi-fcgi
Webserver = Microsoft-IIS/5.0
Database = mysqlt 5.0.27-community-nt, lock.system=database
Toolkits = Exif, LinkItemToolkit, Thumbnail, ImageMagick, SquareThumb
Acceleration = partial/900, partial/900
Operating system = Windows NT SAMBA 5.0 build 2195
Default theme = classic
gettext = enabled
Locale = en_US
Browser = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Rows in GalleryAccessMap table = 10
Rows in GalleryAccessSubscriberMap table = 41
Rows in GalleryUser table = 8
Rows in GalleryItem table = 37
Rows in GalleryAlbumItem table = 3
Rows in GalleryCacheMap table = 200
Posts: 19
I created a new site and database for testing in my multisite installation. Same error/result when attempting to login. Anybody have any idea on this?
Posts: 32509
- virshu (another developer) has tested IIS/7.0 + php-fcgi. He was not able to reproduce the problem. he tried the useralbum as well.
- I've tried it with IIS/5.0 mod_php and was not able to reproduce the problem.
- hk_ben has IIS/6.0 php-fcgi and it works fine for him as well.
So we tried to reproduce it and I'd really like to see what causes your problem, but we were unable to reproduce it.
Posts: 32509
jtownsend was so kind and gave me access to his webserver.
i debugged the issue and it looks like a IIS bug in his case.
He's using:
Gallery version 2.2-svn
PHP version 5.2.0 cgi-fcgi (CGI)
Webserver Microsoft-IIS/5.0
Database mysqlt 5.0.27-community-nt
HTTP log of a user login request with that server:
-> POST UserLogin requests
<- HTTP/1.1 100 Continue (First IIS bug)
-> Ack
<- HTTP/1.1 500 OK (Second IIS bug)
It seems this affects some IIS/5, IIS/6 and IIS/7 servers. But not all.
So what happens is this:
1. Client posts a login request with an auth-token from the guest session
2. IIS asks PHP/G2 to handle HTTP POST request
3. G2 ignores the auth-token since it's a guest session
4. G2 asks the UserLogin controller to handle the request
5. G2's UserLogin controller authenticates the user data and the user is logged in
6. G2 prints output / redirect, is done
7. IIS' bug is responsible that G2's reply is not sent to the client.
Instead, IIS sends a HTTP 100 to the client (bug).
8. And some internal IIS reset makes IIS ask PHP/G2 to handle the same initial POST request again.
9. G2 does not ignore the auth-token check anymore since the session is not a guest session anymore.
The auth-token check fails since the auth-token changes on login.
10. G2 stops with the ERROR_REQUEST_FORGED.
11. IIS sends a HTTP 500 and G2's error to the client.
Although this is a IIS bug (probably you could fix yours with some patches provided by Microsoft), we want to try to work around it in G2 such that not more IIS users have to deal with it.
What I tried: Removed the auth-token check from the UserLogin controller. But the situation would get even worse. Now, IIS would loop, ask PHP-cgi to retry to handle the request again and again for about 10 seconds and then the IIS server dies! After another few seconds the IIS server starts again.
I'd like to ger more data points.
Any IIS/6.o or IIS/7.0 user which has this problem, please PM me at least a G2 user account for their G2 + the URL to G2 such that I can diagnose the HTTP traffic.
Posts: 32509
Also, please download and install all IIS patches for your IIS version. Maybe this solves the problem.
e.g. if you're using IIS/5.0, please upgrade at least to the latest IIS/5.x version with all patches.
And please let me know of the outcome.
IIS/6 users might try this patch: http://support.microsoft.com/kb/898708/EN-US/
Note that this is obviously not the problem with the IIS/5.0 box from above. There, I didn't get a HTTP 200. Just a HTTP 100 and then afterwards a HTTP 500. But the actual problem is that some part of IIS/Windows/Proxy/... does a retry / asks PHP to handle the same request again.
Posts: 32509
And a last note for now:
Here's the patch that I wrote to fix the problem. But as explained, this patch made things even worse for the above IIS/5.0 case.
Maybe it solves things for you, let me know.
Patched UserLogin.inc:
http://dev.nei.ch/UserLogin.inc
Posts: 19
I updated my IIS 5.0 server with all current patches. Windows 2000 server cannot be updated beyond IIS 5. I continue to receive the error. The interesting thing to me is that prior to updating G2 to core 1.1.25 I did not have any login errors. I had updated to 1.1.25 to resolve a registration error.
Posts: 32509
G2 core 1.1.25 comes with auth-tokens to protect from a specific kind of attacks. It's necessary.
But that's not the real problem.
I'm waiting for input from IIS/6 users to compare the behavior of problematic IIS/5 and IIS/6 servers.
Posts: 32509
I've now tested isapi_fcgi.dll (the original fastcgi implementation) with Windows XP IIS/5.1 / PHP-5.2.0 on my own computer as well and I was unable to reproduce the problem.
Posts: 22
Some time this week I will be moving this gallery from a Windows 2000 server over 2003, Im gonna try and keep this same build and see if the issue resides over there. If it does then Im not sure where to go from there. I think that the Authentication protocol in IIS 5.0 is the failure point, but Im not an expert.
Thanks for the research
Posts: 32509
We have here reports of this issue with IIS/5.0 fcgi (2 users) and IIS/6.0 fcgi (1 user). We have reports of working IIS/5.1 fcgi/mod_php (1 user) and IIS/7.0 fcgi (2 users).
So it's probably not a general IIS/5.0 issue.
I still don't know the details about the issue on IIS/6.0 or on other IIS/5.0 server.
Posts: 32509
@douklias:
thanks for the account.
The issue with IIS/6.0 is just slightly different. There's no intermediary reply from the server, but I guess the server still does the request handling twice as with buggy IIS/5.0.
I would expect that you'd get a server restart with this patch:
http://gallery.menalto.com/node/57642#comment-213333
Or does it work with it?
Waiting for your feedback. Thanks!
Posts: 7
Valiant,
Added the Patched UserLogin.inc under the module/core directory. I copied the original one if we need it later.
And now I'm getting:
CGI Error
The specified CGI application misbehaved by not returning a complete set of HTTP headers.
I have not restarted the server yet due to the luck or reach (I'm out of town). I will be restarting it tonight.
The http://pictures4ot.webhop.net works now, but, you getting the CGI Error.
Posts: 19
What if I change from fcgi to isapi? Would that pose any problems in converting?
** Went ahead and changed to isapi and no longer have the error. I did update PHP to 5.2.1. Now I will need to retest everything else to see if isapi causes any other problems. It is my understanding that it is not as stable as cgi.
Posts: 32509
Update:
I was able to reproduce the problem with my own IIS 5.1 server.
I thought you were all using php-fastcgi, but in fact it seems the setup which causes this issue is:
- Any IIS version (verified with 5.0, 5.1, 6.0)
- php-cgi (not mod_php, not fastcgi)
- Gallery 2.2 (all versions since core module 1.1.25)
I created some IIS dumps with diagnosing tools, but honestly, I have no expertise in IIS diagnosing / debugging and it all looks like a PHP-cgi / IIS bug.
I have also verified that Apache+Windows+php-cgi works fine. Thus it's not a general php-cgi problem. It's about IIS + php-cgi.
And I checked G2 request logs and IIS+php-cgi indeed run the same request over and over again.
That's about all I know and I can't spend much more time on this issue.
The problem case to reproduce the problem is too large (I don't have a small reproduce script). Thus, I can't file it as a php bug.
Solution:
I can only offer a workaround: Don't use php-cgi. I suggest you switch to mod_php or isapi-fastcgi.
And it's not a bad change in general: Using php-cgi is the slowest alternative of running PHP on a webserver anyway.
Posts: 22
Valiant thanks for the update.
I was running fastcgi. I would like to ask for your advice on how to switch from php-fastcgi to mod_php or isapi-fastcgi
Thanks
Posts: 32509
Are you sure you ran fastcgi? "5.2.0 cgi-fcgi" just means that the PHP binary used implements the cgi and fastcgi interface.
Only if you configure IIS to use a fastcgi.dll which is then configured to delegate php requests to php-cgi.exe it's fastcgi.
If you're using php-cgi.exe directly in your iis setup, it's just php-cgi.
I was not able to reproduce the problem with fastcgi or mod_php on my own machine. I've only seen it for php-cgi.
Posts: 22
im running
System Windows NT IIS-DEV01 5.0 build 2195
Build Date Aug 25 2006 14:26:29
Server API CGI/FastCGI
Virtual Directory Support enabled
Configuration File (php.ini) Path D:\PHP\php.ini
PHP API 20020918
PHP Extension 20020429
Zend Extension 20050606
Debug Build no
Zend Memory Manager enabled
Thread Safety enabled
Registered PHP Streams php, http, ftp, compress.zlib, compress.bzip2
according to my phpinfo files. It says server API is CGI/FastCGI.. when i look into IIS5.0 extension is pointed to just php.exe file
Posts: 32509
Looks like you're using php-cgi.
Posts: 2
Hi,
I installed 2.1 RC-1 and when I login using admin account, I get this page......
-----------------------------------------------------
Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery
Error Detail -
Error (ERROR_REQUEST_FORGED)
in modules\core\classes\GalleryController.class at line 235 (GalleryCoreApi::error)
in main.php at line 224 (GalleryController::assertIsGenuineRequest)
in main.php at line 94
in main.php at line 83
System Information
Gallery version 2.2-rc-1
PHP version 5.1.2 cgi-fcgi
Webserver Microsoft-IIS/5.1
Database mysqlt 5.0.18-nt
Toolkits Thumbnail
Operating system Windows NT SIVALAPTOP 5.1 build 2600
Browser Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0(Compatible Mozilla/4.0(Compatible-EmbeddedWB 14.59 http://bsalsa.com/ EmbeddedWB- 14.59 from: http://bsalsa.com/ ; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)
Posts: 32509
Please migrate from IIS+php-cgi to IIS+mod_php or IIS+FastCGI.
The other alternative is switching to Apache.
Microsoft doesn't support php-cgi and since G2.2, Gallery doesn't work with IIS+php-cgi anymore.
--------------
Enter the Gallery 2 Theme Contest today!
Posts: 3
Excuse me, I am a little bit confused. I read FastCGI, ISAPI-FastCGI, and PHP-FastCGI, are they the same thing or not? Which one should we use? Is there away to find out if any of these are running on a shared Windows account?
Thanks!
Posts: 32509
- If you see something like "PHP version 5.1.4 cgi-fcgi" in your phpinfo, it means you're running PHP-CGI.
- Please check your IIS configuration. Unless the .php extension is associated with the a fastcgi executable (e.g. fastcgi.exe), it's probably using "PHP-CGI/fastcgi"
- The fastcgi in "PHP-CGI/fastcgi" or "PHP-CGI-fcgi" just means that this PHP-CGI also implements the fastcgi interface, some technical reason). It's not the same as running PHP through a FastCGI wrapper.
--------------
Enter the Gallery 2 Theme Contest today!
Posts: 3
valiant,
Thank you for your reply! And I am sorry for having filed a duplicate bug report and started a new thread on the same old question. I am completely new here, and haven't quite found my way around.
Here is another question: if it's a problem of not having FastCGI, why the Matrix theme works fine? (as you suggested, I switched to Matrix, although the login auth error is still there, but at least I can add albums, add items and upload pictures. With Carbon theme, I can't do any of these.)
Posts: 32509
No idea. We don't know the exact reason for the error in the first place. It's a bug in PHP-CGI/IIS. Maybe the bug is triggered by other code paths that are excited by the carbon theme as well.
--------------
Enter the Gallery 2 Theme Contest today!
Posts: 1023
Sorry to bother - I get the same issue now on Firefox 2.0 - not able to access the login page
"login" ->
"Security Violation
The action you attempted is not permitted.
Back to the Gallery"
trying the Login from the sidebar ->
"Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery"
Sigh ---
Gallery version = 2.2-rc1 core 1.1.29
PHP version = 5.1.6 apache2handler
Webserver = Apache/2.2.3 (Win32) DAV/2 PHP/5.1.6 mod_ssl/2.2.3 OpenSSL/0.9.8d
Database = mysql 5.1.11 beta-log,
Theme=PGlightbox,
Gallery-URL=http://lf-photodesign.de
Posts: 32509
LFrank
please create a new forum topic. you're not running IIS and this thread's topic shifted mainly to IIS.
thanks.
--------------
Enter the Gallery 2 Theme Contest today!
Posts: 59
Hi Valiant,
was this issue resolved? is there a fix I need to download?
my galery was working fine and then a few days ago, it just stopped and I now I am getting this error
Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery
Error Detail -
Error (ERROR_REQUEST_FORGED)
* in modules/core/classes/GalleryController.class at line 235 (gallerycoreapi::error)
* in main.php at line 224 (gallerycontroller::assertisgenuinerequest)
* in main.php at line 94
* in main.php at line 83
System Information
Gallery version 2.2-rc-1
PHP version 4.4.3 apache
Webserver Apache
Database mysqlt 4.1.21-standard
Toolkits SquareThumb, ImageMagick, Thumbnail, Gd
Operating system Linux gravity.dnsprotect.com 2.6.17.7-grsec #1 SMP Sat Jul 29 05:44:05 EDT 2006 i686
Browser Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20060111
Posts: 32509
soreel
you're using apache, not IIS.
please create a new forum topic for your issue since this topic centers on the IIS issue.
thanks.
--------------
Enter the Gallery 2 Theme Contest today!
Posts: 42
Did Anyone resolve this issue? I am also getting the same error.
Authentication Failure
Your change cannot be completed due to a loss of session data. Please try again. If it still doesn't work, try logging out and logging back in.
Back to the Gallery
Error Detail -
Error (ERROR_REQUEST_FORGED)
* in modules/core/classes/GalleryController.class at line 239 (GalleryCoreApi::error)
* in main.php at line 224 (GalleryController::assertIsGenuineRequest)
* in main.php at line 94
* in main.php at line 83
System Information
Gallery version 2.2.6
PHP version 5.2.0 apache2filter
Webserver Apache/2.0.46 (Red Hat)
Database mysql 5.1.12-beta-log
Toolkits SquareThumb, Gd
Operating system Linux www.test.com 2.4.21-50.ELsmp #1 SMP Tue May 8 17:10:20 EDT 2007 x86_64
Browser Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4