Tech Wiki Login Problem (continued)

[Breakin Away]

Breakin Away, try it now.

I tried again. Same result - it says no user by that name. I still think that someone should try creating a new userID to see if you can replicate the issue.

The website is also still not secure.

I still can't log in, even though I'm following your procedure exactly. No change at all - looks just like the screenshots that I posted before. Any progress on a fix? Has anyone tried to do a first-time login for the wiki, and if so, does anyone have a similar problem to mine?

I still think it would be great if you would let Ken follow up on his offer to create a new (temporary) account to try to replicate my problem. That could really help diagnose this.

[KWKloeber]

Dave

FYI I can still log in using different passwords on the forum and wiki, so Mediawiki still isn't pulling the pw from C34. Ipso, not fixed.

[Breakin Away]

Dave

FYI I can still log in using different passwords on the forum and wiki, so Mediawiki still isn't pulling the pw from C34. Ipso, not fixed.

This comment is helpful, but do note that my error message says that my user name does not exist. So it's not just passwords that are not being pulled over.

[KWKloeber]

Yes I think I had explained before, it was broken when you first tried to log into the wiki and you're not (yet) a user over on the wiki side. You can't retrieve a forgotten PW, because you aren't a "wiki user" yet. I can reset/create different PWs on each side because they're not talking to each other. Those who already have done a sign-in/created a user on the wiki side are ok, but right now the wiki isn't able to check the user/pw for new wiki users against the c34 user/pw.

If the "create user" function was available, you could create a user/PW on the wiki, but that function is turned off.

The account you had created waybback when was on the mediawiki home site, not on the c34 wiki. If you go to mediawiki you should be able to sign in, but that has nothing to do with the c34 wiki.

JMHO but it seems an unnecessary glitch to tie the two sides together. Who would really care if they had to sign in/create a user separately if they wanted to add to the wiki? Most don't anyway.
BA, that's an opinion, not a suggestion— I've already learned bout offering those.

[KWKloeber]

BA

BTW, clear your browser and log onto the website using
https://c34.org
and
https://c34.org/bbs
and
https://c34.org/wikiwp

Then your browser should show it secure. Unfortunately right now if you go to a subpage and hit a link (say back to the forum) it seems that you lose the secure connection (at least I do.)

[Breakin Away]

BA

BTW, clear your browser and log onto the website using
https://c34.org
and
https://c34.org/bbs
and
https://c34.org/wikiwp

Then your browser should show it secure. Unfortunately right now if you go to a subpage and hit a link (say back to the forum) it seems that you lose the secure connection (at least I do.)

Already done all that. You're right, all the website's links point to non-secure protocol, so you've got to manually edit URL for every page you want to do securely.

FWIW, when I go to the secure version of the Wiki, it loses all but the most rudimentary formatting (no CSS?). Logging in on the secure page gives the same error message, although in plain text because of loss of format.

[KWKloeber]

BA. Accurate, but realize that nothing's changed re security on the c34 website — its how it's been used forever. It's simply that some browsers (presume you may be using Chrome as I do?) found it necessary to pull the general alarm handle and start displaying that message to rile up their users into thinking it's located some new threat. I ignore it unless it's a commerce site.
-k

[Stu Jackson]

Perhaps Ken would choose to share the correspondence he had recently with our webmaster, which occurred as soon as I pointed Dave to this issue.  Thanks, BA, for bringing it up.

For issues like this, as C34IA Secretary, I can only be the messenger.

Dave is our webmaster, and contacting him directly is easy, given the sticky on the forum main page:  How to Contact a C34IA Officer.

Dave has been maintaining this site for long time and does a great job.

If you have any issue, I recommend contacting Dave.

[KWKloeber]

Sure.  Copied below

Unsure whether it adds anything more to the conversation that hasn't already been said or duplicates what I posted below, but here's our "chat" re: the wiki sign-in and  "not secure" warning:



KK / Jan 11, 2019:

-DS:
THANKS for the user/password update, we'll keep waiting for further word.
I realize that the wiki is not polling the BBS because I can still set different
credentials (PW only) on either side.

Add'l info: I also get the insecure warning (Chrome v. 71.0.3578.98 ) --  no such message using IE. 
I cleared all C34 cookies/history, restarted chrome, yada yada -- still "insecure".

-k




KK / Jan 24, 2019:

Dave,
JFYI - if there is redirect script - it doesn't seem to be working. (at least not consistently?)
I can log in as both HTTP://c34.org (home page) (insecure warning) and HTTPS://C34.org  (no warning.)
If type in C34.org (what I usually do)  I don't get redirected to HTTPS, but end up at HTTP://c34.org

This is WAY above my pay/skill level, but I wondered if Chrome started reporting warnings, so last week
thinking that might be the reason, I tried the URL HTTPS.  I got redirected to HTTP (got the warning.)

The PW manager you suggested  -- is it low overhead?  I tried one in the past and it seemed to
BOG DOWN the system.  Unsure which it was maybe dashlane.

-k




DS / Jan 24, 2019:

If you type in http://c34.org/ you will go there which is fine, all can read. 
However if you click on the menu for wiki, or bbs - areas where
you might want to login - those links have https in them.

There are ways on the server level configs to redirect all http traffic
(which will break some people) but not only do I not have access to them
I don't think they are needed.

Again... there was never any real security issue here... basically no
one at our level a year ago was encrypting all their connections - but
Google and others got together and decided it was a good thing.

-d

[Breakin Away]

Seven months have passed, and I am still unable to log into the Wiki to make contributions.

I have reached out to Dave Sanner, and hope that he is able to fix the problem.

Was this discussed at the April Officers' meeting? I do not see any direct reference to it in the minutes.