Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
Message ID: 69402     Entry time: Thu Oct 21 15:17:52 2021
Icon: Question  Author: Chris Körner  Author Email: chris.koerner@physik.uni-halle.de 
Category: Bug report  OS: Linux  ELOG Version: 3.14 
Subject: wrong server HTTP status code when login failed 

Hi,

I am trying to access elog through a python client (https://github.com/paulscherrerinstitute/py_elog) and found a strage strange behavior which may be related server side problem. The python script generates get/post messages via the python requests library. This works fine so far and I can view and post messages. However, if a wrong user/password is provided, the server still returns HTTP status code "200 OK", although login failed. Instead, it should return something like "401 Unauthorized". This behavior later causes problems since the python client thinks login was successful. After experimenting around I think this could be caused by a server side misconfiguration. Any ideas?

I am not sure if this imformation is important: We use LDAP as user/password provider for elog.

ELOG V3.1.5-3fb85fa6