Auto-login

[dan]

Ok, so I have a portal. And I authenticate my customers with DA's API. I had a link on the top of my portal which the customer could click and it would log them straight into DA. They could manage their DA account from within the window, then logout and the window would close. Basically, I did this my mimicking the login form that DA has in the first place, i.e; the same field names posting to the same place (/CMD_LOGIN).

Anyway, this worked fine up until recently. I upgraded to the latest version (there was a big bug I spotted which was fixed in a later version). Ever since, this auto-login feature of my portal stopped working. Any clues as to why that might be? The username and password that it's submitting to DA are valid, and I've double-checked it's POSTing to the same place, so what could it be?

Thanks.

Edit: I also found this in DA's error log:
2010:01:15-16:50:13: Referer host does not match portal2.bluespidernetwork.co.uk != 209.195.4.186
2010:01:15-16:50:13: Referer check failed for 89.241.180.196
Never seen that before?

 

[DirectAdmin Support]

Hello,

If you check the versions system for the latest release:
http://www.directadmin.com/versions.php?version=1.345000

This is a new feature:
http://www.directadmin.com/features.php?id=1050

so you'll need to disable the check if you're doing cross-site access.

John

 

[dan]

Cool. Works. Thanks

 

[floyd]

John I am sure you have seen my previous posts on this issue. I believe it to be a big mistake to tell people in your knowledgebase how to create a login page on their site and then disable it later by default. Now everybody that did this has to go make configuration changes to allow it again.

 

[DirectAdmin Support]

Hello,

It's a bug in the referer check system. It was not anticipated that browsers continue to post the same referer 2 "POST"s later, after DA sends the location redirect. I've added an entry into the versions system to be fixed.

http://www.directadmin.com/features.php?id=1054

John

 

[DirectAdmin Support]

Hello,

FYI, I've completed this fix and have updated the binaries into the pre-release system (accessed from your clients section) if anyone wishes to try it out.

John

 

[B3rt]

Where can I find this "fix"?
When I log into the clients section I only see my licenses, nothing else.

Is there any date when this fix will be released?
We run over 600 DA servers and all with this autologin feature, I have a lot of login errors due to this bug at the moment.

 

[DirectAdmin Support]

Click your license, the link for the pre-release binaries is below the license info (for active licenses, on verified accounts.. eg: those who have paid)

The changes to the backup system need testing, and I'd like to add a few more fixes/features first, but hopefully, about 1 - 2 weeks.

John

 

[B3rt]

Thx,

I tried the beta update and indeed it fixes the autlogin problem, after running the update my remote login worked again.

I hope the fix is released as soon as possible so I can implent this on my servers which have this problem.