'403 Error' logging in with Launchpad account

[Anthony Scarth]

Attempting to log in to Spreadubuntu with a Launchpad account automatically gives a 403 "access denied" error. I do not have previous log-in details with the site so cannot access the site via http://spreadubuntu.neomenlo.org/user as suggested. Attempting to 'register' also gives the same error.

Thanks in advance for your help.

This is the URL that displays the error:
http://spreadubuntu.neomenlo.org/openid/authenticate?openid.assoc_handle={HMAC-SHA1}{4c286ade}{HYn8OQ%3D%3D}&openid.claimed_id=https%3A%2F%2Flogin.launchpad.net%2F%2Bid%2FBMJpYMc&openid.identity=https%3A%2F%2Flogin.launchpad.net%2F%2Bid%2FBMJpYMc&openid.lp.is_member=&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.lp=http%3A%2F%2Fns.launchpad.net%2F2007%2Fopenid-teams&openid.ns.sreg=http%3A%2F%2Fopenid.net%2Fextensions%2Fsreg%2F1.1&openid.op_endpoint=https%3A%2F%2Flogin.launchpad.net%2F%2Bopenid&openid.response_nonce=2010-07-07T19%3A07%3A46ZOvqrHV&openid.return_to=http%3A%2F%2Fspreadubuntu.neomenlo.org%2Fopenid%2Fauthenticate&openid.sig=NwL1T%2B2s0qwR%2F3IAH7uL7i5oFiA%3D&openid.signed=assoc_handle%2Cclaimed_id%2Cidentity%2Clp.is_member%2Cmode%2Cns%2Cns.lp%2Cns.sreg%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned%2Csreg.email%2Csreg.nickname&openid.sreg.email=maroubal2%40gmail.com&openid.sreg.nickname=maroubal2

[Evan Boldt (echowarp)]

I have the same problem, but I'm not sure I'll be able to fix it. Its probably a recurrence of this problem:
https://bugs.launchpad.net/drupal-launchpad/+bug/353459

[Anthony Scarth (maroubal2)]

I am now able to log in as normal to the site without the error occurring.

Thank you

[Matteo Lazzari (mlazzari2)]

This is my error:

403 - Access Denied

You do not have permission to access this page.

Try to log in or to register.

This is the URL that displays the error:

 http://spreadubuntu.neomenlo.org/openid/authenticate?openid.assoc_handle={HMAC-SHA1}{4c9e4d27}{m72Sdg%3D%3D}&openid.claimed_id=https%3A%2F%2Flogin.launchpad.net%2F%2Bid%2FtsGFYRe&openid.identity=https%3A%2F%2Flogin.launchpad.net%2F%2Bid%2FtsGFYRe&openid.lp.is_member=&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.lp=http%3A%2F%2Fns.launchpad.net%2F2007%2Fopenid-teams&openid.ns.sreg=http%3A%2F%2Fopenid.net%2Fextensions%2Fsreg%2F1.1&openid.op_endpoint=https%3A%2F%2Flogin.launchpad.net%2F%2Bopenid&openid.response_nonce=2010-09-29T20%3A02%3A33ZRDhraG&openid.return_to=http%3A%2F%2Fspreadubuntu.neomenlo.org%2Fopenid%2Fauthenticate&openid.sig=Urx%2FL83TAa1z4B6RN%2FRoVOXlTQM%3D&openid.signed=assoc_handle%2Cclaimed_id%2Cidentity%2Clp.is_member%2Cmode%2Cns%2Cns.lp%2Cns.sreg%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned%2Csreg.email%2Csreg.nickname&openid.sreg.email=mlazzari2%40alice.it&openid.sreg.nickname=mlazzari2

[Evan Boldt (echowarp)]

This problem is usually caused by an overlapping username or email address, often from the user already having an account before we switched to launchpad login, or maybe it could be caused by a change in your account.

I assume that removing either you're email address, or changing your username temporarily could fix the problem.
The easiest way would be to delete your old account. I checked and you do already have one, but it does say that it is connected to a launchpad account.

[C. F. Howlett (cfhowlett)]

Evan:

Maybe I missed something. The spreadubuntu page won't let me log in NOR
register. As soon as I click either option, I get the 403 access denied
error. No sign in options work.

IOW, it's not even SEEING my username or email address. I don't see
where changing them is going to help.

On Wed, 2010-09-29 at 21:13 +0000, Evan Boldt wrote:
> This problem is usually caused by an overlapping username or email
> address, often from the user already having an account before we
> switched to launchpad login, or maybe it could be caused by a change in
> your account.
>
> I assume that removing either you're email address, or changing your username temporarily could fix the problem.
> The easiest way would be to delete your old account. I checked and you do already have one, but it does say that it is connected to a launchpad account.
>

[Evan Boldt (echowarp)]

I'll delete your account for you, if that's ok with you. That should
fix the problem. I wanted to check first.

On Wed, Sep 29, 2010 at 6:49 PM, C. F. Howlett
<email address hidden> wrote:
> Evan:
>
> Maybe I missed something.  The spreadubuntu page won't let me log in NOR
> register.  As soon as I click either option, I get the 403 access denied
> error.  No sign in options work.
>
> IOW, it's not even SEEING my username or email address.  I don't see
> where changing them is going to help.
>
> On Wed, 2010-09-29 at 21:13 +0000, Evan Boldt wrote:
>> This problem is usually caused by an overlapping username or email
>> address, often from the user already having an account before we
>> switched to launchpad login, or maybe it could be caused by a change in
>> your account.
>>
>> I assume that removing either you're email address, or changing your username temporarily could fix the problem.
>> The easiest way would be to delete your old account. I checked and you do already have one, but it does say that it is connected to a launchpad account.
>>
>
> --
> '403 Error' logging in with Launchpad account
> https://bugs.launchpad.net/bugs/602857
> You received this bug notification because you are a member of
> SpreadUbuntu Admins, which is subscribed to SpreadUbuntu.
>

[C. F. Howlett (cfhowlett)]

Please do. Thanks for all the help.

On Thu, 2010-09-30 at 00:15 +0000, Evan Boldt wrote:
> I'll delete your account for you, if that's ok with you. That should
> fix the problem. I wanted to check first.
>
> On Wed, Sep 29, 2010 at 6:49 PM, C. F. Howlett
> <email address hidden> wrote:
> > Evan:
> >
> > Maybe I missed something. The spreadubuntu page won't let me log in NOR
> > register. As soon as I click either option, I get the 403 access denied
> > error. No sign in options work.
> >
> > IOW, it's not even SEEING my username or email address. I don't see
> > where changing them is going to help.
> >
> > On Wed, 2010-09-29 at 21:13 +0000, Evan Boldt wrote:
> >> This problem is usually caused by an overlapping username or email
> >> address, often from the user already having an account before we
> >> switched to launchpad login, or maybe it could be caused by a change in
> >> your account.
> >>
> >> I assume that removing either you're email address, or changing your username temporarily could fix the problem.
> >> The easiest way would be to delete your old account. I checked and you do already have one, but it does say that it is connected to a launchpad account.
> >>
> >
> > --
> > '403 Error' logging in with Launchpad account
> > https://bugs.launchpad.net/bugs/602857
> > You received this bug notification because you are a member of
> > SpreadUbuntu Admins, which is subscribed to SpreadUbuntu.
> >
>

[Evan Boldt (echowarp)]

Ok. It has been deleted.

Try to log in again and let me know if that fixes the problem.

I don't know if you realize this, but the site has pretty relaxed rules about allowing anonymous users to do a lot. You can submit materials without logging in. I know that I'm so used to being forced to log in that I don't know if I would even try to submit something without logging in first.

Is there some reason why you are wanting to log in?

Thank you for your help in figuring out what is causing this bug.

[Matteo Lazzari (mlazzari2)]

Evan:

I would not delete my old account since that is what I use to launchpad, I tried to sign up with another name, but when I select "register" I get always error 403 - Access Denied

Thanks for your help

Matteo

[Matteo Lazzari (mlazzari2)]

Il giorno gio, 30/09/2010 alle 01.02 +0000, Evan Boldt ha scritto:
> Ok. It has been deleted.
>
> Try to log in again and let me know if that fixes the problem.
>
> I don't know if you realize this, but the site has pretty relaxed rules
> about allowing anonymous users to do a lot. You can submit materials
> without logging in. I know that I'm so used to being forced to log in
> that I don't know if I would even try to submit something without
> logging in first.
>
> Is there some reason why you are wanting to log in?

Yes I am working on a project related to the Italian site spreadubuntu
and for me it is important to know who has done any work or changed

Thanks.

--

Matteo Lazzari
EMail: mlazzari2(at)ubuntu-it.org
https://launchpad.net/~mlazzari2
http://wiki.ubuntu-it.org/MatteoLazzari

[Evan Boldt (echowarp)]

You already had an account on spreadubuntu, so that is what I deleted,
and that should be the reason that you couldn't register with
launchpad.

On Thu, Sep 30, 2010 at 2:47 AM, Matteo Lazzari <email address hidden> wrote:
> Evan:
>
> I would not delete my old account since that is what I use to launchpad,
> I tried to sign up with another name, but when I select "register" I get
> always error 403 - Access Denied
>
> Thanks for your help
>
> Matteo
>
> --
> '403 Error' logging in with Launchpad account
> https://bugs.launchpad.net/bugs/602857
> You received this bug notification because you are a member of
> SpreadUbuntu Admins, which is subscribed to SpreadUbuntu.
>

[Matteo Lazzari (mlazzari2)]

Il giorno gio, 30/09/2010 alle 15.41 +0000, Evan Boldt ha scritto:
> You already had an account on spreadubuntu, so that is what I deleted,
> and that should be the reason that you couldn't register with
> launchpad.

No, I tried but not working. Same error.

[C. F. Howlett (cfhowlett)]

Same results; no access. FWIW: I wanted the login ability to document
my Ubuntu contributions.

On Thu, 2010-09-30 at 16:19 +0000, Matteo Lazzari wrote:
> Il giorno gio, 30/09/2010 alle 15.41 +0000, Evan Boldt ha scritto:
> > You already had an account on spreadubuntu, so that is what I deleted,
> > and that should be the reason that you couldn't register with
> > launchpad.
>
> No, I tried but not working. Same error.
>

[Evan Boldt (echowarp)]

I have given you a temporary password and sent it to the email address you used when you first signed up.

You can sign in the old way at: http://spreadubuntu.neomenlo.org/en/user/
Please change your password when you log in.

[Matteo Lazzari (mlazzari2)]

Thanks for your help Evan, but i don't have received the password to my email address.

[Evan Boldt (echowarp)]

Sorry for all of the confusion. It looks like this was not merely a recurrence of another problem. The host changed some security settings. The rule causing the problem has been disabled.

Please try logging in by OpenID again.

For future reference, in case this problem springs back up:
http://drupal.org/node/444050
http://www.gerixsoft.com/blog/drupal/openid-page-not-found

[Matteo Lazzari (mlazzari2)]

Thank you very much Evan, now works

Ciao

[C. F. Howlett (cfhowlett)]

Fixed. Thank you, Evan.

[Ruben Romero (huayra)]

Great work Evan!

R.

On 2 Oct 2010 02:41, "Evan Boldt" <email address hidden> wrote:

Sorry for all of the confusion. It looks like this was not merely a
recurrence of another problem. The host changed some security settings.
The rule causing the problem has been disabled.

Please try logging in by OpenID again.

For future reference, in case this problem springs back up:
http://drupal.org/node/444050
http://www.gerixsoft.com/blog/drupal/openid-page-not-found

--
'403 Error' logging in with Launchpad account
https://bugs.launchpad.net/bugs/602857
You receiv...

[Alan Pope 🍺🐧🐱 🦄 (popey)]

I'm also getting the 403 error when I login to the site.

I probably had an account previously. Feel free to delete my old account.

[Evan Boldt (echowarp)]

I've deleted it.

It could be a regression due to the hostgator firewall and the new domain

It could be a new problem due to simply the new domain.

Which domain were you using to sign in?

[André Soares Nascimento (andresoaresnascimento)]

I have the 403 error in both domains. I can't register or login with ubuntu sso in spreadubuntu

thanks

[Evan Boldt (echowarp)]

It turns out that the "both domains" thing was caused by the block being cached for the spreadubuntu.org domain, and the spreadubuntu.org domain having the same hostgator mod_sec problem as before.