Admin rights not bridging phpBB to CPG Admin rights not bridging phpBB to CPG
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Admin rights not bridging phpBB to CPG

Started by jcocking, November 24, 2005, 04:19:40 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

jcocking

Current versions:  Gallery 1.4.2 bridged to phpBB 2.0.018

I log on to the forum with my admin user id.  Link over to the gallery and lose my admin rights.  It appears the bridging is accepting the user id, but not giving any permissions.  It is treating the user id as a guest/anonymous user id. 

For example.

1. I logon to the forums with my admin id.
2. link to galleries and am treated as a guest.
3. turn bridging off and my user id becomes the admin of the galleries.
4. turn bridging on and my user looses all addmin permissions


Coppermine install: http://www.lotuselan.net/gallery/
Forum install: http://www.lotuselan.net/forums/
Coppermine version: cpg1.4.2
Forum version: phpBB 2.0.18
Test user account: test / test

BridgeManager settings:
Forum URL:  http://www.lotuselan.net/forums
Relative path to your BBS's config file:  ../forums/
Use post-based groups?:  0 


What have I missed?

jeff


Joachim Müller

When bridging is enabled, your coppermine admin account will be no longer valid - coppermine then drops it's own user management in favor of the user management of your bbs app. Therefor, you'll have to log in with your admin account from the BBS.

jcocking

I am using the BBS admin.  All users lose thier user rights when moving from phpbb to CPG.

Joachim Müller


jcocking

See original post.  Modifies to have all info in one post.

Joachim Müller

when logging in into your bbs, you get redirected back to coppermine as expected. However, coppermine doesn't recognize you as being logged in (as it still displays the login link). This usually means you have something wrong in your bridge setup, or your bbs cookie is not readable for coppermine. Make sure that your bbs app is using cookie authentification (not only a session-driven authentification scheme).

jcocking

So.......

I turned off the bridge.  I can not log into the standalone version with my CPG admin id.  I was able to logon with the standalone id earlier.

jeff

Nibbler

Looks like your groups are not properly synced. Comment out this line in groupmgr.php and then go to the page directly in your browser

if (!GALLERY_ADMIN_MODE) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);

When you use the bridge manager you must complete the process right to the final step.

jcocking

There is something really screwy going on.

I am in stand alone mode:

All users with a user group of 1 can not login.  They go through the process, but nothing ever happens.
All users with a user group of 2 can login and use all the standard user features.

I commented out the previous field and still get permission denied on running the bridge manager.

Nibbler

To re-sync the groups you need to go to groupmgr.php (the file you just modified) in Coppermine with your browser . You seem to have picked up an extra administrators group somehow. Please re-enable the bridge, experimenting with both 'post based groups' settings.

jcocking

the group manager showed 2 administrator groups.  Deleted one.  Resolved the user group 1 versus 2 problem.  Will work on some on trying different group settings....

jcocking

I have tried every thing and nothing works.  It appears we have a cookie incompatibility between phpbb 2.0.18 and CPG 1.4.2.  Here are my cookie settings for phBB:

Cookie domain:   .lotuselan.net
Cookie name  lotuforu_phpbb
Cookie path  /forums
Cookie secure  Disabled

Can you tell me what I am supposed to set the bridgemgr setting for it to work?

thank you....

Nibbler

The cookie path must be set to '/' for coppermine to be able to read them.

jcocking

We are getting closer. 

Cookies are working and people are authenticated correctly. 

I still have a problem with a couple of key user accounts.  I do not use groups within phpBB.  So phpBB assigns each user a group id that is unique and incremented.  My admin user id is assigned group 1 and only has user rights in the gallery.  The second registered user has a group id of 2, has user rights in the forum, but has admin rights in the gallery. 

I have the bridgemanager set not to use groups, but appears that it is using the lower numbered groups for security settings.

jeff 

Nibbler

That system may not be compatible with the coppermine bridging system then. Anyone in phpbb's group 2 is given admin rights in coppermine.

jcocking

Then why do you have the option to use group settings or not to use group settings within your Bridge Manager?

To sum this support request:

You can only use phpBB 2.0.18 and CPG 1.4.2  together, if you implement groups. 

If you do not implement groups, phpBB assigns a sequential group number to the registered users: 

  • The first registered user within phpBB is assigned a user group of 1.
  • The second registered user within phpBB is assigned a user group of 2.
  • The third registered user within phpBB is assigned a user group of 3.
  • The fourth and so on.......
This is the default setting in phpBB. 

CPG uses the groups number to assign admin rights from phpBB, even if you tell the bridge manager not to use groups.

This means:

  • The first registered user is a user.
  • The second registered user is the admin.
  • The third registered user is a ?
  • The fourth registered user is a ?

Please verify if I am understanding your previous post correctly.  Can you also provide what the higher number groups will be?

jeff

Nibbler

I don't recognise this groups system that you describe. The user with id 2 is in group 2 which is the default admin account you create during installation of phpbb. That user and any other user you add into group 2 is treated as an admin by cpg. If 'post based groups' is disabled then anyone in any other group is treated as a regular user and you just have 4 simple groups in coppermine's groups page. If you enabled 'post based groups' then all groups you have created yourself in phpbb are imported to coppermine and you can setup different permissions for different groups of registered users. The integration works fine both ways.

If you have a user with id 1 or a user with id 2 that is not the default admin account then you have something wrong with your forum.

jcocking

Quote from: Nibbler on November 25, 2005, 12:31:52 AM
The user with id 2 is in group 2 which is the default admin account you create during installation of phpbb. That user and any other user you add into group 2 is treated as an admin by cpg.

The only problem, is the first user id created is the admin of the phpBB boards.  It gets assigned a user group of 1.  The second register is assigned group 2.  This second register becomes the admin of CPG and the forum administrator is only a user.

With phpBB with group settings turned off, you should be keying off of the user_level field found in the phpbb_users table.  In this table, registered users are "0" and administrators are "1".





Nibbler