Login errors

[cmcneave]

Has anyone ever had trouble logging into Nunaliit from a PC? Peter and I have been working with someone running Windows 7 Professional and who has reported receiving the error "invalid e-mail and/or password" whether using the latest version of Firefox or Chrome. I have no trouble logging in on any machine or browser using her account. By chance Peter will be visiting the user soon and will perhaps find something unique in her network, system, or browser configuration that may explain this. However, we wanted to post this as an issue in case you all have seen something like it already and would have some information on what to look for.

This error has been reported by the same user for Atlases running both Nunaliit 2.0.3 and 2.1.4.

Thanks.

[pulsifer]

I have met with the partner. The log in failed for a number of users. Inspecting the error console, it appears that they are working through some sort of proxy server. Errors are below.

This is clearly something that their sysadmins will need to deal with, however if there is any information that we can provide that outlines how Nunaliit client side communicates with the server, it would be very helpful. For example, is Nunaliit using more than port 80?

Request URL: http://staging.eloka-arctic.org/communities/yupik/atlas/db/_changes?feed=normal&style=all_docs&since=3173

Request Method:
GET

Status Code:
HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.  )

Request Headers
11:22:26.962

Accept:application/json, text/javascript, /; q=0.01Accept-Encoding:gzip, deflateAccept-Language:en-us,en;q=0.5Host:staging.eloka-arctic.orgProxy-Connection:keep-aliveReferer:http://staging.eloka-arctic.org/communities/yupik/atlas/index.htmlUser-Agent:Mozilla/5.0 (Windows NT 5.1; rv:10.0.2) Gecko/20100101 Firefox/10.0.2X-Requested-With:XMLHttpRequest

Sent Cookie

AuthSession:YWRtaW46NTJGMjlDQjM6cs6oR2ZHbaDqDwZyPOsU09GX_NENunaliitAuth:nullutma:27544040.350746014.1387231025.1387231025.1391631463.2utmb:27544040.2.10.1391631463utmc:27544040utmz:27544040.1387231025.1.1.utmcsr

Response Headers Δ0ms

Cache-Control:no-cacheConnection:Keep-AliveContent-Length:4113Content-Type:text/htmlPragma:no-cacheProxy-Authenticate:Negotiate Kerberos NTLM Basic realm="avcp-proxy1.avcp.org"Proxy-Connection:Keep-AliveVia:1.1 AVCP-PROXY1

[ahayes]

Interesting. According to the logs, that proxy is run by http://avcp.org/

That error suggests that the proxy is denying requests to your domain unless you are authenticated to the proxy. My guess is that the proxy is either configured to restrict internet access, or the clients are misconfigured. You could also try some other obscure URLs and see if you get similar errors. Popular URLs may work because they have been explicitly allowed.

See the following troubleshooting document.

http://www.isaserver.org/articles-tutorials/general/Troubleshooting_ISA_authentication_issues.html

I'd suggest your users contact their upstream internet provider or AVCP directly.

[jpfiset]

I think Amos is correct. Here is another link:

http://www.checkupdown.com/status/E407.html

[pulsifer]

Great. This is very helpful. The host organization is AVCP and they do appear to have a very restricted environment. e.g. many popular Web 2.0 services are blocked. As you suggest, other popular, approved URLs do work as they have explicit exceptions.

Based on your response, there appears to be no Nunaliit-specific knowledge required (e.g. port number etc.) for their IT folks to resolve the issue. Many thanks. I will ask Chris to close this issue.