Setup wizard stops at Running test 21 of 41.

I am trying to install and configure CKFinder MS ASP version 2.1

When running the wizard, the testing stops at "Running test 21 of 41."

Calling asp.net from the server side has failed:
Error loading "http://www.namechanged.com/ckfinder/wizard/assets/hello.aspx"
The login request was denied

I am able to open the page http://www.namechanged.com/ckfinder/wizard/assets/hello.aspx and see the "hello" text and I don't get any errors.

I have CKFinder working on a development site running on the same server, but I'm unable to get it working on the live site.

After looking through the support forum, I'm unable to find the solution to the problem and I'm hoping someone might be able to help point me in the right direction.

Tue, 11/29/2011 - 13:36

alfonsoml

Joined: 31/12/2006

Posts: 3737

Re: Setup wizard stops at Running test 21 of 41.

It seems that you are using some protection and the wizard and CKFinder code isn't able to keep that login info when the asp.net code is called to handle images.

I know that sometime ago I adjusted the code to handle basic authentication, but in your case you must be using something different. If you can explain what's the setup of the server so I can reproduce it I can try to fix the problem. Or you can send me a Personal Message with the info about the server so I can try to check it there.

Tue, 11/29/2011 - 13:54

pjones

Joined: 29/11/2011

Posts: 2

Re: Setup wizard stops at Running test 21 of 41.

Thanks for the quick reply. Looks like you nailed it.
The site uses Windows Authentication throughout and the ckfinder folder was set the same way. I'm using the user's network account to set the IsAuthorized session variable and I have lazy users who don't want to have to type in their user name and password more than once a day :lol:

I changed the Authentication type on the CKFinder folder to anonymous and the wizard passes all tests.
If i enable Windows Authentication, I get the error again.

I would prefer to use Windows Authentication throughout the site for security and logging purposes. Are there any security implications with setting the Authentication on the ckfinder folder to anonymous?

Many thanks for helping me isolate the issue.

Tue, 11/29/2011 - 16:00

alfonsoml

Joined: 31/12/2006

Posts: 3737

Re: Setup wizard stops at Running test 21 of 41.

If you keep the IsAuthorized session variable updated according to the login then CKFinder should be safe. You can test to modify the CheckAuthentication function and return always true: in that case the wizard should show you a warning that anyone could use CKFinder and that's certainly not safe. If in your current setup you don't see such a warning then CKFinder is protected, but I agree that the more layers of protection the better just in case something fails in unexpected ways.

I'll try to setup the environment to use windows authentication and check what can be done so CKFinder works automatically, but I don't know how long it can take me to make everything work correctly.

Sun, 12/04/2011 - 22:11

alfonsoml

Joined: 31/12/2006

Posts: 3737

Re: Setup wizard stops at Running test 21 of 41.

Ok, I've good news and it seems that I've managed to make it work.
I still want to perform some further tests and show this new info with the wizard, but you can test it right now.

In CKFinder, edit the core\connector\asp\Utils\Image.asp and at line 345 replace

oXmlHttp.Open "GET", sUrlToCall, False, Request.ServerVariables("AUTH_USER") & "", Request.ServerVariables("AUTH_PASSWORD") & ""

Tue, 12/06/2011 - 22:47

alfonsoml

Joined: 31/12/2006

Posts: 3737

Re: Setup wizard stops at Running test 21 of 41.

I have finished the new version of the wizard and applied the change to the asp connector so it's ready for the next release. I've added also this page explaining how to use the proxycfg tool http://docs.cksource.com/CKFinder_2.x/D ... entication
Please, I would like to know if this has been useful to you and if you think that there's something that can be explained in better ways.