Re: [mv] remoteuser password

[David Babler <dbabler@rigel.orionsys.com>]

******    message to minivend-users from David Babler <dbabler@Rigel.orionsys.com>     ******



On Wed, 17 May 2000, David Babler wrote:

> But something is still odd here. After creating a new catalog based on
> 'simple' and directly entering a password string generated by htpasswd for
> the superuser, I could finally get superuser access while the UserDB
> parameter specified using encryption. After that I logged off the
> superuser, I logged back in and created a normal user account and placed a
> test order. That too worked okay, but now it is refusing to accept the
> original password for the superuser...

Following up on my own post. I discovered how the superuser's password got
clobbered, but I don't know whether to chalk it up to pilot error, a bug
or something more serious.

The scenerio is this:

   1. logged on to the minimate page as the superuser.
   2. logged off, using the link in the main minimate menu.
   3. pointed the browser to the root catalog page.
   4. selected the link to create an account. Entered new username
      and password.

I was apparently still being tracked because the new password was written
to BOTH the new user AND the superuser records in userdb. I know close the
browser each time I transition to a different user to keep that from
happening, but I can't imagine that writing two passwords from one account
can be right... can it? Shouldn't the context be killed when you log out?

-Dave

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list