[Setup] completely locked out

Gary Koskenmaki garyk at skilltran.net
Wed Mar 26 07:47:05 UTC 2008


Hi all,

I am in the process of learning how to use some new security tools and
was running the burp proxy spider against my Plone2.5 site just to see
what turned up.  Turns out that the spider seems to have damaged/changed
something as the front page of the site no longer has a login portal. I
guess I should have read the documentation on the burp proxy spider
before even starting to play with it as it does warn about possible
damage. Now I get a message that cookies are disabled and as long as
they are the login portal will not work.

What's even worse is that in trying to get into the ZMI I get an error
saying that the resource
http://localhost:8081/acl_users/credentials_cookie_auth/login_form  does
not exist.  

Am I just completely screwed, or is there some way around this?  I've
tried disabling all forms of authentication in zope.conf but that hasn't
worked, well, at least not fully.  I now have a working theme again and
access to all data that can be accessed anonymously.

Now that you've all spit your drinks out all over your keyboards
laughing at the noob, can you help?  




More information about the Setup mailing list