OpenIG simple login other system, black box, login form

[Sarankon Hiranphonlakrit]

I try to use openig to login my old system by follow the “12.2 simple login form”
but, I can’t pass login.
what I must to know and what have to do more ?
last one, If who have other tutorial like openig to login wordpress or other system, please tell me.

thank you

[Joachim Andres]

Hi Sarankon,

The filter in the documentation is a sample assuming that you use form-based login and that the form contains the fields “username” and “password” expecting the corresponding values.
You need to reverse engineer the login page to figure the correct names and adjust the filter. You can also post the login page in this forum. Then I’d recommend to use static values for username and password to the test form.

Cheers,
Joachim

[Sarankon Hiranphonlakrit]

I can’t post old system login page, system are in private network.

[violette]

Hi Sarankon,
You will find in your login page, by using developer tools(F-12 on FF or Chrome) or reading the html/css of the login page, the two inputs tags required for login and password.
In old wordpress for example, these fields are named: log and pwd.

In the doc example, you have:

{
	"type": "PasswordReplayFilter",
	"config": {
		"loginPage": "${request.uri.path == '/login'}",
		"request": {
			"method": "POST",
			"uri": "https://www.example.com:8444/login",
			"form": {
				"username": [
					"MY_USERNAME"
				],
				"password": [
					"MY_PASSWORD"
				]
			}
		}
	}
}

For wordpress, it will be something like:

{
	"type": "PasswordReplayFilter",
	"config": {
		"loginPage": "${request.uri.path == '/login'}",
		"request": {
			"method": "POST",
			"uri": "https://mywordpress/wp-login.php",
			"form": {
				"log": [
					"MY_USERNAME"
				],
				"pwd": [
					"MY_PASSWORD"
				]
			}
		}
	}
}

[Sarankon Hiranphonlakrit]

Thank you, violette. I follow you, but I can’t login with my wordpress.

this my config file

{
    "heap": [
        {
            "name": "ClientHandler",
            "type": "ClientHandler",
            "comment": "Testing only: blindly trust the server cert for HTTPS.",
            "config": {
                "trustManager": {
                    "type": "TrustAllManager"
                }
            }
        }
    ],
    "handler": {
        "type": "Chain",
        "config": {
            "filters": [
                {
                    "type": "PasswordReplayFilter",
                    "config": {
                        "loginPage": "${request.uri.path == '/login'}",
                        "request": {
                            "method": "POST",
                            "uri": "http://www.corecode.in.th/wp-login.php",
                            "form": {
                                "log": [
                                    "openig"
                                ],
                                "pwd": [
                                    "openig"
                                ]
                            }
                        }
                    }
                }
            ],
            "handler": "ClientHandler"
        }
    },
    "condition": "${matches(request.uri.query, 'demo=simple')}"
}

I don’t know what I miss ?

• This reply was modified 5 years, 7 months ago by Sarankon Hiranphonlakrit.

[violette]

Hi Sarakon,

I tested your route and it works when I call http://openig.example.com:8082/login?demo=simple.
I get redirected and logged into the protected application.

The URI must contain demo=simple to enter the route and /login to play the PasswordReplayFilter.

[Sarankon Hiranphonlakrit]

Yes, I already run 127.0.0.1:8080/login?demo=simple but, it direct to login page it not pass.

• This reply was modified 5 years, 7 months ago by Sarankon Hiranphonlakrit.

[violette]

Sarankon, you could try to add this to the form:

"form": {
             "log": [ "<username>" ],
             "pwd": [ "<password>" ],
             "rememberme": [ "forever" ],
             "redirect_to": [ "<wordpress>/wp-admin/" ],
             "testcookie": [ "1" ]
         }

Also have a look to your .htaccess file to see if the /wp-login.php is protected against IP / POST methods, etc.

[Sarankon Hiranphonlakrit]

Thank you, violette.
I will try.

[Sarankon Hiranphonlakrit]

violette, I can’t login it error
ERROR: Cookies are blocked or not supported by your browser. You must enable cookies to use WordPress.

[Author]

Posts