Skip to content
This repository has been archived by the owner on Mar 7, 2024. It is now read-only.

needsSigning() #101

Open
GoogleCodeExporter opened this issue Mar 14, 2015 · 62 comments
Open

needsSigning() #101

GoogleCodeExporter opened this issue Mar 14, 2015 · 62 comments

Comments

@GoogleCodeExporter
Copy link

What steps will reproduce the problem?
1. Installed Plugin and other plugin
2. Tried logging in via OpenID and failed


What is the expected output? What do you see instead?

Saw the following error

Fatal error: Call to a member function needsSigning() on a non-object in
/home/admin/domains/matthewellis.co.cc/public_html/w3/wp-content/plugins/openid/
Auth/OpenID/Server.php
on line 1495


What version of the product are you using? On what operating system?

CentOS

PHP Version

PHP 5.2.4 (cli) (built: Feb 20 2008 18:15:46) 
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
    with the ionCube PHP Loader v3.1.32, Copyright (c) 2002-2007, by
ionCube Ltd., and
    with Zend Extension Manager v1.2.0, Copyright (c) 2003-2007, by Zend
Technologies
    with Zend Optimizer v3.2.8, Copyright (c) 1998-2007, by Zend Technologies

Latest version of wp-openid
Please provide any additional information below.

Original issue reported on code.google.com by ultimas...@gmail.com on 23 Nov 2008 at 1:20

@GoogleCodeExporter
Copy link
Author

Same here with WP 2.6.5

Is this an incompatibility with that Wordpress version?

Original comment by tessara...@googlemail.com on 27 Nov 2008 at 10:54

@GoogleCodeExporter
Copy link
Author

I am hoping it is something minor as I really wanna use it rather then MyOpenID.

I have looked over the code and can't see what is wrong. I have installed PEAR
thinking it might be that but sadly, that didn't work either.

Original comment by ultimas...@gmail.com on 3 Dec 2008 at 4:49

@GoogleCodeExporter
Copy link
Author

Also, just to see if anything happened, this is also the same when I tried it on
WordPress 2.7 RC1.

Original comment by ultimas...@gmail.com on 6 Dec 2008 at 6:16

@GoogleCodeExporter
Copy link
Author

I'm experiencing the same issue using Wordpress 2.7 and the OpenID plugin 
version 3.1.4.
Even tried to reinstall the plugin, didn't help though.

Original comment by mrd...@gmail.com on 18 Dec 2008 at 4:01

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

Also getting this with WP 2.7 and OpenID 3.1.4, PHP version 5.2.8

Original comment by alextreppass on 27 Dec 2008 at 1:57

@GoogleCodeExporter
Copy link
Author

Also getting this with WP 2.7, OpenID 3.1.4, PHP 5.2.8.  You can see the error
message at http://www.brentozar.com/?openid_server=1.

Original comment by 2814334...@txt.att.net on 27 Dec 2008 at 2:52

@GoogleCodeExporter
Copy link
Author

@Brentozar.com: You're of course going to see the error message if you just hit 
the OpenID server directly... 
that's expected.  Maybe not the best behavior, but still expected.  

Have you all tried multiple times, and continued to get this message?  have you 
tried logging in to different 
relying parties?  Have you tried resetting the cache from the OpenID options 
page?  I have occasionally gotten 
this error myself from time to time, but trying to login again always fixes it.

Original comment by wnorris on 27 Dec 2008 at 9:00

@GoogleCodeExporter
Copy link
Author

I've tried multiple times.  I've been having the issue even in WP2.6, just 
hoped it'd
go away in 2.7 but no luck.  Tried resetting the cache from the OpenID options 
page,
and tried logging in from different OpenID test sites plus StackOverflow.com.

Original comment by 2814334...@txt.att.net on 27 Dec 2008 at 10:38

@GoogleCodeExporter
Copy link
Author

I have tried logging in many times and still, it did not work. I have deleted 
the
cache and it didn't work either.

I have tried logging into many different sites and still, the same error.

If you need anything tested, do let me know.

Original comment by ultimas...@gmail.com on 28 Dec 2008 at 7:28

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

I am also having the same issue as Brent. I'd love to get this fixed. 
Ironically, I'm 
also trying to use stackoverflow.com. It was working fine when I was using 
blogger 
to host my blog. hopefully I can get a WordPress solution working soon.

Original comment by rob.b...@gmail.com on 29 Dec 2008 at 8:50

@GoogleCodeExporter
Copy link
Author

Original comment by wnorris on 4 Jan 2009 at 6:47

  • Added labels: Project-WpOpenID

@GoogleCodeExporter
Copy link
Author

I think I'm beginning to narrow down where the problem is.  Could one of you 
that are having this issue add the 
following just after line 280 (as the first line of the function 
openid_server_process_response():

error_log('processing response - ' . var_export($response, true));

Then let me know what gets logged for that.  If you've got a few minutes today 
to try and fix this, email or IM me 
directly (http://willnorris.com/).

Original comment by wnorris on 4 Jan 2009 at 7:49

@GoogleCodeExporter
Copy link
Author

What file are you talking about?  I've searched through about a dozen files and 
I
can't find the string openid_server_process_response in any of them, but I'm 
waving
the white flag here.  (I already stopped using the plugin, was just going to do 
you a
favor.)

Original comment by 2814334...@txt.att.net on 5 Jan 2009 at 12:28

@GoogleCodeExporter
Copy link
Author

oops, forgot to mention... that's in server.php

Original comment by wnorris on 5 Jan 2009 at 6:51

@GoogleCodeExporter
Copy link
Author

Added the new code, but where is this log file?

Original comment by cont...@steamreview.org on 17 Jan 2009 at 5:48

@GoogleCodeExporter
Copy link
Author

would someone who has been having this problem please try the latest code out 
of trunk and see if that fixes it?  
It may not work on Windows servers using IIS.  I haven't been able to test it 
there, and I have a feeling it may 
have problems.

http://diso.googlecode.com/svn/wordpress/openid/trunk/

Original comment by wnorris on 18 Jan 2009 at 6:50

@GoogleCodeExporter
Copy link
Author

I've tried to manage this error myself, but this ended, when more of them 
appeared 
because of my changes. But still i think i was close. First of all the request 
looks 
like

?openid_server=1?openid.return_to=http%3A%2F
%2Fwww.kinopoisk.ru&openid.mode=checkid_setup&openid.identity=http%3A%2F
%2Fwww.charnad.com%2F&openid.trust_root=http%3A%2F
%2Fwww.kinopoisk.ru&openid.sreg.required=email,fullname,dob,gender,country&openi
d.sreg.optional=email,fullname,dob,gender,country

There's the second '?' after openid_server=1. 

When i change it to '&' - nothing happens. I just got my blog on the screen. No 
redirects or smth. 

Original comment by charnad on 21 Jan 2009 at 8:26

@GoogleCodeExporter
Copy link
Author

have you tried this with the latest release (v3.2)?  If not, try that... as 
long as you're using some kind of permalink 
structure other than "default", you shouldn't see that any more.  Instead, the 
URL should be 
    /openid/server?openid.return_to... (etc)

Original comment by wnorris on 21 Jan 2009 at 8:39

@GoogleCodeExporter
Copy link
Author

Oh, i forgot to reactivate xrds plugin. Ok, now i got 'This is an OpenID 
Server.' 
message at http://my/blog/openid/server

i still don't get how do i make permalink for this, but i manually added
  <link rel="openid.server" href="http://www.charnad.com/blog/openid/server" />
  <link rel="openid.delegate" href="http://www.charnad.com/" />
to my wp theme. 

No i can comment using openid again. Thank you!

Original comment by charnad on 21 Jan 2009 at 9:01

@GoogleCodeExporter
Copy link
Author

hmm... you shouldn't actually need to add those to your front page manually... 
it should do it automatically.  
someone else seems to be having the same problem 
(http://code.google.com/p/diso/issues/detail?id=111) ... 
I'd love to figure out what is causing this if possible.

Original comment by wnorris on 21 Jan 2009 at 9:13

@GoogleCodeExporter
Copy link
Author

Hi Will!

I'm having this trouble with WP2.7 and OpenID 3.2

Here's the output from my log when using
http://www.openidenabled.com/resources/openid-test/checkup/start?openid_url=http
%3A%2F%2Fdocwhat.gerf.org%2F

[Thu Jan 22 13:14:00 2009] [error] [client 67.137.230.70] File does not exist:
/home/docwhat/wordpress/openid
[Thu Jan 22 13:14:01 2009] [error] [client 67.137.230.70] processing response - 
NULL

Feel free to IM me and I'll do whatever you need.

Ciao!

Original comment by docw...@gmail.com on 22 Jan 2009 at 6:16

@GoogleCodeExporter
Copy link
Author

This may also help:

checkup said:
kvToSeq warning: Line 1 does not contain a colon: '<br />\nFatal error: Call
to a member function needsSigning() on a non-object in
/home/docwhat/wordpress/wp-content/plugins/openid/Auth/OpenID/Server.php on
line 1495<br />\n'
kvToSeq warning: In line 2, ignoring leading or trailing whitespace in value ' 
Call
to a member function needsSigning() on a non-object in
/home/docwhat/wordpress/wp-content/plugins/openid/Auth/OpenID/Server.php on
line 1495<br />': '<br />\nFatal error: Call to a member function
needsSigning() on a non-object in
/home/docwhat/wordpress/wp-content/plugins/openid/Auth/OpenID/Server.php on
line 1495<br />\n'
openid.mode=associate: bad status code from server
http://docwhat.gerf.org/openid/server: 404

My Logs:
==> error.log <==
[Thu Jan 22 13:18:08 2009] [error] [client 67.137.230.70] File does not exist:
/home/docwhat/wordpress/openid
[Thu Jan 22 13:18:08 2009] [error] [client 67.137.230.70] processing response - 
NULL

==> access.log <==
67.137.230.70 - - [22/Jan/2009:13:18:07 -0500] "POST /openid/server HTTP/1.1" 
404 194
"-" "Python-urllib/2.5"


Will: I'd be happy to create an author account for you on my blog if you want.  
My IM
info is located as Alter Egos here: http://docwhat.gerf.org/about/

Ciao!

Original comment by docw...@gmail.com on 22 Jan 2009 at 6:22

@GoogleCodeExporter
Copy link
Author

Tried again with version 3.2 and also with latest trunk form SVN - but still 
the same error.
Let me know if I can supply you with debugging logs.

- David.

Original comment by mrd...@gmail.com on 23 Jan 2009 at 1:47

@GoogleCodeExporter
Copy link
Author

Can be a reason of this error an installed K2 theme? Befor installation i 
havent this
error, but after - hrrr....

Original comment by ras...@gmail.com on 11 Feb 2009 at 11:12

@GoogleCodeExporter
Copy link
Author

I have v2.7 wordpress +K2 theme + v3.2 OpenId

Original comment by ras...@gmail.com on 11 Feb 2009 at 11:13

@GoogleCodeExporter
Copy link
Author

I'm not using k2...but I am using sandbox.  I've temporarily gone back to an 
earlier
version of OpenID: 3.1.4

Original comment by docw...@gmail.com on 11 Feb 2009 at 3:41

@GoogleCodeExporter
Copy link
Author

Hello and thanks for the awesome plugin.

I had the above mentioned problems as well, but after a little investigation I 
found 
out that one of my plugins called "mobilepress" was the one responsible for 
this 
behaviour.

After disabling it, OpenID works like a charm.

I hope it helps
Cheers

Original comment by takis.pournaras on 12 Mar 2009 at 12:47

@GoogleCodeExporter
Copy link
Author

@takis.pournaras 
how did you find out that? i dont use mobilepress, but maybe other of my 
plugins has
something related to it...

Original comment by diazl...@gmail.com on 12 Mar 2009 at 1:23

@GoogleCodeExporter
Copy link
Author

I think the plugin is a red-herring:

I turned off all plugins (except XRDS and OpenId, of course) and changed my 
theme to
the default and I still get this from
http://www.openidenabled.com/resources/openid-test/checkup/start?openid_url=http
%3A%2F%2Fdocwhat.gerf.org%2F



Fetching http://docwhat.gerf.org/
Yadis links found at http://docwhat.gerf.org/. Your server is at
http://docwhat.gerf.org/openid/server and it knows you as
"http://docwhat.gerf.org/author/docwhat/".
Attempting to associate with the server.
kvToSeq warning: Line 1 does not contain a colon: '<br />\nFatal error: Call
to a member function needsSigning() on a non-object in
/home/docwhat/wordpress/wp-content/plugins/openid/Auth/OpenID/Server.php on
line 1495<br />\n'
kvToSeq warning: In line 2, ignoring leading or trailing whitespace in value ' 
Call
to a member function needsSigning() on a non-object in
/home/docwhat/wordpress/wp-content/plugins/openid/Auth/OpenID/Server.php on
line 1495<br />': '<br />\nFatal error: Call to a member function
needsSigning() on a non-object in
/home/docwhat/wordpress/wp-content/plugins/openid/Auth/OpenID/Server.php on
line 1495<br />\n'
openid.mode=associate: bad status code from server
http://docwhat.gerf.org/openid/server: 404
Server contact failed.

Original comment by docw...@gmail.com on 13 Mar 2009 at 6:46

@GoogleCodeExporter
Copy link
Author

Trying with the trunk I get this:
Checking http://docwhat.gerf.org/...
Fetching http://docwhat.gerf.org/
Yadis links found at http://docwhat.gerf.org/. Your server is at
http://docwhat.gerf.org/openid/server and it knows you as
"http://docwhat.gerf.org/author/docwhat/".
Attempting to associate with the server.
kvToSeq warning: Line 3 does not contain a colon: '<!DOCTYPE html PUBLIC 
"-//W3C//DTD
XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: Line 4 does not contain a colon: '<!DOCTYPE html PUBLIC 
"-//W3C//DTD
XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: Line 5 does not contain a colon: '<!DOCTYPE html PUBLIC 
"-//W3C//DTD
XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: In line 6, ignoring leading or trailing whitespace in key 
'\t<link
rel="stylesheet" href="http': '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0
Transitional//EN" 
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: Line 7 does not contain a colon: '<!DOCTYPE html PUBLIC 
"-//W3C//DTD
XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: Line 8 does not contain a colon: '<!DOCTYPE html PUBLIC 
"-//W3C//DTD
XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: In line 9, ignoring leading or trailing whitespace in key
'\t<p><h1>This is an OpenID Server.</h1><p><strong>Request Error': '<!DOCTYPE 
html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
kvToSeq warning: Line 10 does not contain a colon: '<!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\n<html
xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">\n<head>\n\t<meta
http-equiv="Content-Type" content="text/html; charset=utf-8" 
/>\n\t<title>WordPress
› Error</title>\n\t<link rel="stylesheet"
href="http://docwhat.gerf.org/wp-admin/css/install.css" type="text/css"
/>\n</head>\n<body id="error-page">\n\t<p><h1>This is an OpenID
Server.</h1><p><strong>Request Error:</strong> No mode value in 
message</p></p>\t
</body>\n</html>\n'
openid.mode=associate: bad status code from server
http://docwhat.gerf.org/openid/server: 500
Server contact failed.

There is nothing interesting in the apache log:
67.137.230.70 - - [13/Mar/2009:14:22:51 -0400] "GET / HTTP/1.1" 200 33949 "-"
"Python-urllib/2.5"
67.137.230.70 - - [13/Mar/2009:14:22:52 -0400] "GET /?xrds HTTP/1.1" 200 2008 
"-"
"Python-urllib/2.5"

==> /var/log/apache2/docwhat/error.log <==
[Fri Mar 13 14:22:53 2009] [error] [client 67.137.230.70] File does not exist:
/home/docwhat/wordpress/openid

==> /var/log/apache2/docwhat/access.log <==
67.137.230.70 - - [13/Mar/2009:14:22:53 -0400] "POST /openid/server HTTP/1.1" 
500 968
"-" "Python-urllib/2.5"

Original comment by docw...@gmail.com on 13 Mar 2009 at 7:11

@GoogleCodeExporter
Copy link
Author

Will Norris et al:

I figured out what's going on.  It only took a many hours. ^_^  BTW: Will, I
recommend using wireshark to get the HTTP request to replay the RP request over 
and
over to debug this stuff.

The RP (Relaying Party) is making a request of the OP (OpenID
Provider) to the URL http://example.com/openid/server and is sending
some POST data.

However, apache sees that there is no /path/to/wordpress/openid/server
and triggers the rewrite rule for Wordpress' index.php.

Wordpress then looks up the URL and says, "Hey, I don't have it." and
sets the page up to be a 404.

I don't understand what Wordpress is doing, but it makes $_SERVER look
*wrong* for Auth/OpenID.php's getQuery (the HACK FIXME part).

getQuery() returns: Array
(
    [error] => 404
)


Example $_SERVER:
SERVER: Array
(
    [REDIRECT_SCRIPT_URL] => /openid/server
    [REDIRECT_SCRIPT_URI] => http://docwhat.gerf.org/openid/server
    [REDIRECT_REQUEST_METHOD] => POST
    [REDIRECT_STATUS] => 404
    [SCRIPT_URL] => /openid/server
    [SCRIPT_URI] => http://docwhat.gerf.org/openid/server
....


I think the problem is that the plugin is hooking into the "determine
where the page is" stack at the wrong place.  The newer wordpresses
have been making this worse as they improve the redirection stack.


THE WORKAROUND:
  cd to the top of your wordpress installation and do this:
  mkdir -p openid/server

That works because the 404 handler isn't invoked by wordpress and
therefore the POST data isn't lost.

Ciao!

Original comment by docw...@gmail.com on 14 Mar 2009 at 4:06

@GoogleCodeExporter
Copy link
Author

And hey! this fixes SourceForge's openid for me, too!

Original comment by docw...@gmail.com on 14 Mar 2009 at 4:07

@GoogleCodeExporter
Copy link
Author

the solution on post #37 by docwhat does not work for me, i get a forbidden
error...may be related to WP taking care of something... :@ (permissions are 
right)

i will keep trying

Original comment by diazl...@gmail.com on 14 Mar 2009 at 4:58

@GoogleCodeExporter
Copy link
Author

diazluis: What http code is "forbidden"?  Is it being handled by apache or by 
wordpress.

I think one of the real problems is that something can go wrong deep in this
transaction and it's very hard to troubleshoot.  Maybe if it logged these to the
database, storing only the last 50 or so?

Ciao!

Original comment by docw...@gmail.com on 15 Mar 2009 at 3:14

@GoogleCodeExporter
Copy link
Author

sorry, i did not understand that, log what?

forbidden its an http 403 error, but forget it, i had -indexes ensabled on my 
hosting..
however now i still have a problem, according to
http://openidenabled.com/resources/openid-test/checkup :
>
> Attempting to associate with the server.
> kvToSeq warning: Line 1 does not contain a colon: 

and then the sources of the apache index of my site.... :S

what if we go back to an older version of the plugin?

Original comment by diazl...@gmail.com on 15 Mar 2009 at 3:25

@GoogleCodeExporter
Copy link
Author

diazluis:  Sorry. I was talking in general at the end, for Will's benefit, not 
to
you.  I didn't make that clear and I should have.

That sounds like a different configuration problem, not the problem mentioned 
in this
bug.  This problem is pretty specific; openid is trying to respond, but it 
looses
some info and can't.  The symptoms are the "needsSigning()" message or (for 
trunk)
the message about "invalid mode".

I'd try the general support or open a new bug.

Ciao!

Original comment by docw...@gmail.com on 15 Mar 2009 at 6:41

@GoogleCodeExporter
Copy link
Author

actually what diazluis is reporting is exactly what I would expect to happen if 
you were to create an "openid/server" directory.  Your 
webserver would see that first, serve it up, and the request would never make 
it to WordPress.  docwhat: I have no idea how this is actually 
working on your machine.

Two requests from anybody/everybody:
1) I made some changes for a 3.2.2 release some time ago relating specifically 
to request parameters getting screwed up.  I've yet to 
release it, so I'd like to have people try the latest code in subversion to see 
if these changes make a difference: 
http://diso.googlecode.com/svn/wordpress/openid/trunk/

2) because I can't reproduce the problem, and it's proving to be a 
not-so-isolated problem, I'd like to see if anyone having this problem 
would be willing to let me poke around on your server (via SSH, not just a WP 
account).  Of course you have to understand the implications 
of giving me this kind of access -- you'll have to trust me when I say I will 
only poke at OpenID stuff.  But if someone has a test 
environment or something I could look at, I think that may be the only way to 
definitively figure out what is going on here.  If you've got 
something like this, please contact me directly (willnorris.com)

Original comment by wnorris on 18 Mar 2009 at 7:14

@GoogleCodeExporter
Copy link
Author

It makes it to wordpress because I have directory indexes turned off.  If I 
didn't,
then it wouldn't make it to wordpress.

Either way, this isn't the correct fix.  :-(

Ciao!

Original comment by docw...@gmail.com on 19 Mar 2009 at 12:39

@GoogleCodeExporter
Copy link
Author

@docwhat:
(from my previus post...)
forbidden its an http 403 error, but forget it, i had -indexes ensabled on my 
hosting..

so, i still cannot reproduce your workaround...
i'll try with the svn version

Original comment by diazl...@gmail.com on 19 Mar 2009 at 12:54

@GoogleCodeExporter
Copy link
Author

Will is hacking at the problem right now on one of my boxen...

Original comment by docw...@gmail.com on 19 Mar 2009 at 1:05

@GoogleCodeExporter
Copy link
Author

k, thanks for telling, i will wait a test version/fix ;)

Original comment by diazl...@gmail.com on 19 Mar 2009 at 1:10

@GoogleCodeExporter
Copy link
Author

So it looks like my problem was due to my apache configuration.

When I commented out my ErrorDocument handlers, I got 404 errors; my rewrite 
rules
were messed up somehow.

I'm still not entirely sure how they got messed up, but once I fixed them then
everything started working correctly, which was very nice.

If you have ErrorDocument handlers, try commenting them out and seeing what 
happens
with your pretty permalinks.

Ciao!

Original comment by docw...@gmail.com on 19 Mar 2009 at 2:40

@GoogleCodeExporter
Copy link
Author

si, there is no solution yet? 
we cant have the same bug related to apache settings... still had not changed 
any on
my hosting related to error handling...

Original comment by diazl...@gmail.com on 20 Mar 2009 at 2:02

@GoogleCodeExporter
Copy link
Author

Disable Mobilepress or any other redirecting plugin and that should resolve the 
issue. 

The Mobilepress plugin was the conflict in my situation and by disabling it and 
then
refreshing the cache on the Open ID plug in, it fixed the issue. 

Good Day!

Original comment by bluesch...@gmail.com on 8 Apr 2009 at 2:24

@GoogleCodeExporter
Copy link
Author

I had the same issue.  I can verify what blueschica said.  After disabling
MobilePress, this error went away.

Original comment by kevinlda...@gmail.com on 16 Apr 2009 at 12:37

@GoogleCodeExporter
Copy link
Author

Just to add my two-pence worth...

I has the error described, and it turned out to be because I already had a 
directory
called "openid" on my site, containing some files from phpMyID. I removed that
directory and everything sprung into life.

Woo hoo!

Original comment by masterof...@gmail.com on 13 May 2009 at 9:06

@GoogleCodeExporter
Copy link
Author

Odd, I just tracked this problem down to my own hand-crafted plugin for a quick 
& dirty gallery-from-Flickr 
page I'd hacked together. Removed my plugin (which I wasn't using any more) and 
the problem went away. No 
idea what the heck in my plugin was causing the problem, though.

My plugin included phpFlickr stuff and used a PEAR database connection (rather 
than using WordPress's 
existing DB connection; like I said, quick & dirty) but I can't see why it 
would've interfered with OpenID...

I've attached the plugin, with my Flickr API redacted, so it won't actually 
work unless you provide your own. 
Maybe it'll give you a clue as to what's going on, and what plugin behaviours 
are causing problems.

Original comment by gothick....@gmail.com on 3 Jun 2009 at 8:40

Attachments:

@GoogleCodeExporter
Copy link
Author

I can reliably reproduce and correct this issue.  In my case, it the conflicting
plugin was <a
href="http://blog.fili.nl/articles/wordpress-plugin-anti-captcha/">Anti-Captcha<
/a>.
 At the very top of the plugin not contained in any function was the following:

if(!isset($_SESSION)) {
    session_start();
}

I solved the problem by commenting out the lines above and adding 
"@session_start()"
to the anti_captcha_verify_token() function that that actually reads from the
session.  I'm not sure why this fixes the issue.  Perhaps something unusual with
sessions is happening.  Would we get this error message if the openid plugin 
couldn't
find what should have been previously stored in the session?  Hopefully this is
another clue as to what's going on.

- Wordpress 2.8.4
- OpenID 3.3.1
- Anti-Captcha 20090821

Original comment by Midweste...@gmail.com on 1 Oct 2009 at 2:36

@GoogleCodeExporter
Copy link
Author

Also getting this issue (WP 2.8.4/OpenID 3.3.1), which for me seems to also be 
related to MobilePress (which has a similar "loose" session_start() call as 
described for Anti-Captcha).

I'm not sure about the root cause, however a realiable workaround has been 
adding 
sites into the "Your Trusted Sites" page (wp-admin/users.php?
page=openid_trusted_sites) manually BEFORE attempting to login.

Might help someone until a fix can be worked out.

Original comment by infinite.alis on 20 Oct 2009 at 5:09

@GoogleCodeExporter
Copy link
Author

I started having this same issue after installing a WP plugin called "FAQ 
builder". I
searched through the FAQ builder plugin's files and found the config file also 
began
with a session_start() call (as in comments 54 and 55 above).  After commenting 
out
that line, the problem went away.

Original comment by khen...@gmail.com on 24 Mar 2010 at 6:37

@GoogleCodeExporter
Copy link
Author

I've been having this issue ever since installing the plugin, as it wasn't the 
first
one I installed. However, I now have far too many other complex plugins that 
rely on
session_start(); and cannot comment the function out of all of them. Is there a 
way
that OpenID can be rewritten to not have this conflict?

Also, external sites now claim there is no OpenID server detected at my address.
(It's not just adding new sites any more; now I can't log in to previously
authenticated sites.) Is that related to this problem or should I try to find 
the
cause and open a new ticket?

Original comment by voyagerfan5761 on 24 Mar 2010 at 8:06

@GoogleCodeExporter
Copy link
Author

Further info on my issue: I'm getting a "No Endpoint" error from sites like
StackOverflow.com. I have just tested using OpenID 3.4-trunk with no 
improvement.

Original comment by voyagerfan5761 on 24 Mar 2010 at 8:40

@GoogleCodeExporter
Copy link
Author

I have the same issue. This is a huge bug

Original comment by desmond...@gmail.com on 23 Sep 2010 at 10:20

@GoogleCodeExporter
Copy link
Author

A huge bug that's been around for nearly two years. Too bad any plugin using 
session_start() triggers it.

Original comment by voyagerfan5761 on 23 Sep 2010 at 10:26

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

The problem is NOT with the OpenID plug-in, it's with other plug-ins which 
start a session in irregular places.  It's a bad programming practice to start 
the session outside of a function where it will be invoked on every page load 
irrespective of whether or not the actual plug-in code is triggered.  Plus, as 
we have seen, plug-ins which behave like that don't play well with other 
plug-ins that are also dependent upon the session.  From a programming 
standpoint, the "bug" is in the ill-behaved plug-in and not in the OpenID 
plug-in.  There isn't any way to code around it; the issue must be fixed at the 
source.

Original comment by Midweste...@gmail.com on 4 Dec 2010 at 11:55

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant