Thread

Hi

Is there a known problem with login and Safari?
Sometimes, I don’t know what triggers it, I cannot identify a pattern, I cannot log into the Control Panel. I can log through the visitor’s site with an admin account and then visit the CP and I’m logged in and I have access to the CP but login from the CP own login screen fails.
So it’s not catastrophic but it’s annoying.

Some username, same password, they are stored by Safari.

I seldom use other browsers but I have not had the problem with the other guys, it seems to be the combination Safari/EE Control Panel.

I’m running v2.3.1 - Build: date 20111017 but I had the same problem with older builds.

Any idea?

—ben

Hi, Ben.

Windows or Mac version of Safari?

Are you using Cookies and Sessions or Cookies Only for back end logins? Try switching to Cookies Only for both, see if that makes a difference.

Mac, both have been cookies-only for ages.

Hi there Ben,

When you experience this, is it happening on the same machine? Or perhaps sometimes on many machines? I use Safari for Mac to login to ExpressionEngine everyday, on a few different installs on 2 different machines and I haven’t noticed anything like this. I’d love to find out what makes your situation unique and what we can do to help.

When you are unable to login, do you go into a “login loop”, where the Control Panel login window is constantly refreshed, or can you successfully login after a few attempts? Can you tell me what version of Safari for Mac and What version of OS X you see this most often?

Thanks for the additional info!

When you experience this, is it happening on the same machine?

It’s on a machine, running MacOS 10.6.8 but I have seen it with a Mac Lion as well.

When you are unable to login, do you go into a “login loop”, where the Control Panel login window is constantly refreshed, or can you successfully login after a few attempts? Can you tell me what version of Safari for Mac and What version of OS X you see this most often?

Yes it’s a “login loop.”

Actually this has been going since I upgraded to EE 2, just does not happen often enough that I remember to post a support request but currently it’s mostly on MacOS 10.6.8 with Safari 5.0.5.

We have a hook on member_member_login_single but it was written for 1.6.x, has been working flawlessly for more than a year in that setup. We migrated it to 2.x and tested it extensively so I thought it was safe.
Do you know if that hook is called from the CP?

—ben

Hi Ben,

No, that hook is only called when logging in to the front-end of the site. That extension shouldn’t be causing a problem here.

When you experience this problem with Safari, are the problem alleviated by clearing your cookies? I’m not suggesting this is an actual solution, but if it does, that sheds some light onto the problem. When we’ve seen login issues on one browser and not another, many times its related to the cookies that EE is setting and the way the browsers read them.

Is this site on a domain, a subdomain, or perhaps even a second-level subdomain (such as http://lorem.site.example.com)?

Could you try using the following in your config.php file (making sure not to duplicate any of these lines if they already exist)?

$config['cookie_domain'] = "";
$config['cookie_path'] = "";
$config['cookie_prefix'] = "";
$config['admin_session_type'] = "cs";
$config['user_session_type'] = "c";

Let’s see if that clears things up.

Hi Kevin

When you experience this problem with Safari, are the problem alleviated by clearing your cookies?

Very clearly yes.
The domain is http://www.declencheur.com

I have put the code in the config.php, I’ll let you know if it clears the problem up. It would probably take a few days since the problem does not happen all the time.

—ben

Benoit,

Thanks for letting us know and please do keep us posted on how this proceeds.

Sean

Sean

Bad news, I had problems logging today again. I’m on a WiFi Hot Spot (not my regular connexion) and I could not log through the CP. I could log into the site itself but the CP remain blocked (even after logging through the public site).
So I erased all my cookies for declencheur.com and then I successfully logged into the CP.

This is on a site that has Kevin configuration changes (above) in $system/expressionengine/config/config.php

—ben

Hi Ben,

Just to be clear here, once you cleared your cookies, you were able to login on both the front-end and the Control Panel? Since this episode was on a public WiFi network, it may have to do with the router’s external IP changing. In Admin-> Security and Privacy-> Security and Sessions have a look at this setting: Require IP Address and User Agent for Login? If that is set to “Yes”, you can try changing it to “No”

Thanks!

Hi Dan

Thanks for looking into this.

Just to be clear here, once you cleared your cookies, you were able to login on both the front-end and the Control Panel?

Correct but I can always log into the front, it’s only the CP that causes problems. And sometimes I can log into the front and that’s logs me into the CP, sometimes it does not.

Since this episode was on a public WiFi network, it may have to do with the router’s external IP changing.

Since then I’ve had the problem with my own network.

In Admin-> Security and Privacy-> Security and Sessions have a look at this setting: Require IP Address and User Agent for Login? If that is set to “Yes”, you can try changing it to “No”

It has been set to “no” forever. I was having too many login challenges when it was set to yes.

—ben

Hi Ben,

Could you check with your host to make sure the server time is correct? That’s just one more thing I can think of to check.

Also, be on the lookout for an email from me. I want to take a first-hand look at this and see if I can nail it down. Thanks so much for your patience on this so far.

Hi Ben,

aside from the email Kevin is sending can I ask you this.

In the Wifi hotspot the other day when you logged into the front-end.
Did you login via http://www.declencheur.com or just declencheur.com?
Both would be considered different cookies and logins
If you logged in the front-end without the www and your control panel is set-up with www then you will not be logged in there.

Could you check with your host to make sure the server time is correct? That’s just one more thing I can think of to check.

Interesting. The time is correct but the server is not in the same time zone as I.

And EE has a one hour difference from the time it really is.
When I originally installed EE, I went through the CP to see how to manage the difference but I could not really understand what I was supposed to do and the support request was “change until it works” or something similar so I dropped it 😊

Also, be on the lookout for an email from me. I want to take a first-hand look at this and see if I can nail it down. Thanks so much for your patience on this so far.

I’m preparing a response. Thanks

Did you login via http://www.declencheur.com or just declencheur.com?
Both would be considered different cookies and logins

There’s a redirection, it forces you to always use http://www.declencheur.com