Last modified: 2014-08-19 03:56:11 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T35503, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 33503 - Cannot login using IE6 and/or IE8
Cannot login using IE6 and/or IE8
Status: NEW
Product: MediaWiki
Classification: Unclassified
User login and signup (Other open bugs)
1.18.x
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-01-04 03:58 UTC by morris
Modified: 2014-08-19 03:56 UTC (History)
6 users (show)

See Also:
Web browser: Internet Explorer
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments
No matter what login to use, it still request to enable cookie (99.05 KB, image/jpeg)
2012-01-04 03:58 UTC, morris
Details
Console logging shows no error (162.59 KB, image/jpeg)
2012-01-05 06:30 UTC, morris
Details
LocalSettings (6.54 KB, text/plain)
2012-01-07 10:11 UTC, morris
Details
version and extensions (95.83 KB, image/jpeg)
2012-01-07 10:18 UTC, morris
Details

Description morris 2012-01-04 03:58:54 UTC
Created attachment 9801 [details]
No matter what login to use, it still request to enable cookie

I have hard time to login using IE6 (OS WinXP SP3), login page keep telling me to enable cookie, and I already enable cookie in IE6. I tried the configuration using WAMP.
I knew IE6 is so damn old already, but working under corporate and decentralize users hard to upgrade this old browser, and users also did not have any internet connection.
Is there any workaround or suggestion regarding this issue? I had no problem in using modern browser, ie chrome, firefox and opera.

My IE6 only using Google Chrome Frame installed as addon. Fiddler addon is later installed.
Comment 1 Roan Kattouw 2012-01-04 16:40:00 UTC
Are you sure this is not a problem specific to the wiki you're trying to log in on? Such error message can be the result of a bad setup on the server side (like an unwritable session.save_path).
Comment 2 morris 2012-01-05 00:50:59 UTC
(In reply to comment #1)
> Are you sure this is not a problem specific to the wiki you're trying to log in
> on? Such error message can be the result of a bad setup on the server side
> (like an unwritable session.save_path).

"Is there any workaround or suggestion regarding this issue? I had no problem in
using modern browser, ie chrome, firefox and opera."

But it did not happen when using other than IE browser (even on IE8 too). If let's say it is due to server configuration, how to set it up (any guides or hints)? FYI, I'm using windows environment and WAMP stack.
Comment 3 morris 2012-01-05 00:55:01 UTC
> But it did not happen when using other than IE browser (even on IE8 too)

Sorry, what i meant is even in IE8 also didnt work, same message error with IE6.
Comment 4 Mark A. Hershberger 2012-01-05 04:35:40 UTC
(In reply to comment #3)
> > But it did not happen when using other than IE browser (even on IE8 too)
> 
> Sorry, what i meant is even in IE8 also didnt work, same message error with
> IE6.

IE8 at least has a debugger.  Hit F12 and see if any errors show up on the Script tab (http://stackoverflow.com/questions/1648582/equivalent-of-firefoxs-error-console-in-other-browsers).

I really suspect this is something in your own configuration since we would have heard about this by now if it was more widespread.
Comment 5 morris 2012-01-05 06:30:11 UTC
Created attachment 9809 [details]
Console logging shows no error
Comment 6 morris 2012-01-05 06:36:18 UTC
If let say it is my mediawiki configuration not right, any hint which configuration is not supported by IE?
I already disable HttpOnly as I see from google not quite compatible with IE6-7.

If let say it is my IE configuration not right, I can login into our own private bugtracker system without any problem and it using cookies also to track user login and session. 

BTW, while testing login mediawiki using IE(6&8), I already lower the privacy into lowest level to accept all cookie.
Comment 7 Mark A. Hershberger 2012-01-06 15:58:51 UTC
Could you provide us with a URL to see your wiki?

Otherwise, what extensions are you using?  What does Special:Version say?  What is in your LocalSettings.php?
Comment 8 morris 2012-01-07 10:11:27 UTC
Created attachment 9819 [details]
LocalSettings

LocalSettings file
Comment 9 morris 2012-01-07 10:18:22 UTC
Created attachment 9820 [details]
version and extensions
Comment 10 morris 2012-01-07 10:20:42 UTC
Please see my attachments for localsettings file and version with extension page. I'm really sorry, but you can't access the wiki, as it is local machine and I'm using laptop as my development machine.
Comment 11 Mark A. Hershberger 2012-01-09 18:57:48 UTC
I used your LocalSettings.php file and an instance of IE8 on http://winkyfrown.com/wiki/ and I *think* I saw this bug once or twice, but it seems to be very sporadic.
Comment 12 Simon 2012-01-10 02:30:49 UTC
I think I met the same problem. I have a mediawiki setup, but IE8 login will always fail with the cookie error, while other browsers like firefox, chrome are all ok.

One more strange thing is that st my side when use IP address link to login with IE, it works. But use DNS names it failed. (eg use IE to login http://xx.xx.xx.xx/mediawiki is ok, but login http://abc.def.com/mediawiki will fail)

I'm sorry I can't provide a link either as it's on my company's intranet. But I believe there must be some hidden bug in MediaWiki code that has IE compatibility issue (for me it's 100% reproducible), and probably start happening after 1.16 version with CSRF fixes added.

I did a little debug and looking into code at SpecialUserLogin.php function authenticateUserData:

                // If the user doesn't have a login token yet, set one.
                if ( !self::getLoginToken() ) {
                        self::setLoginToken();
                        return self::NEED_TOKEN;
                }
                // If the user didn't pass a login token, tell them we need one
                if ( !$this->mToken ) {
                        return self::NEED_TOKEN;
                }

                $throttleCount = self::incLoginThrottle( $this->mUsername );
                if ( $throttleCount === true ) {
                        return self::THROTTLED;
                }

                // Validate the login token
                if ( $this->mToken !== self::getLoginToken() ) {
                        return self::WRONG_TOKEN;
                }

When I login with IE, it stops at the first if statement and returned NEED_TOKEN. That's why I saw the "Cookie disabled" message.

I'm not an PHP expert and not quite understand what it's doing here, but I feel if user doesn't have a login token, then set one should work rather than just stop and return an error. So I comment out the return line and try, then it fails at the validate token part and returns WRONG_TOKEN.

If I even comment out the return self::WRONG_TOKEN line, it will go on and finally still fail and prompt me incorrect password (though my password is correct).

Hope somebody and look at this and get it fixed. Thanks.

By the way I'm using LDAP authentication extension, and nothing other special in LocalSettings.php.
Comment 13 Steven Walling 2014-04-09 07:58:25 UTC
Is this still an issue? Also, some comments suggest that it's not specific to IE6, and so the bug title seems misleading.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links