[drupal-docs] admin / user help page errors

Anisa mystavash at animecards.org
Mon Mar 21 15:01:57 UTC 2005


This is a little long, my apologies.

 From this page:
admin/help/user

(Drupal 4.6 RC) If you go to administrate >> users > more help, there is 
this paragraph:

=========
Registered users need to authenticate by supplying either a local 
username and password, or a remote username and password such as a 
Jabber ID <http://www.jabber.org/>, DelphiForums ID 
<http://www.delphiforums.com/>, or one from a Drupal powered 
<http://www.drupal.org/> website. See the distributed authentication 
help <http://www.myanimecards.net/?q=admin/help/user#da> for more 
information on this innovative feature. The local username and password, 
hashed with Message Digest 5 (MD5), are stored in your database. When 
you enter a password it is also hashed with MD5 and compared with what 
is in the database. If the hashes match, the username and password are 
correct. Once a user authenticated session is started, and until that 
session is over, the user won't have to re-authenticate. To keep track 
of the individual sessions, Drupal relies on PHP sessions 
<http://www.php.net/manual/en/ref.session.php>. A visitor accessing your 
website is assigned an unique ID, the so-called session ID, which is 
stored in a cookie. For security's sake, the cookie does not contain 
personal information but acts as a key to retrieve the information 
stored on your server. When a visitor accesses your site, Drupal will 
check whether a specific session ID has been sent with the request. If 
this is the case, the prior saved environment is recreated.
=========

Isn't this a little too technical and scary for something so simple?  
Debatable.  Still much more than I wanted to know.  ^.^;  The only 
hashes I know are hashbrowns.  Errors/updates below.

Under 'User preferences and profiles', I think it would be useful to 
point out that they can customize the user profile settings by enabling 
the profile module and going to settings > profiles.

Also, at the end of this page, for me, it says 'You currently have the 
following authentication modules installed ...'  and then ends. 

I dunno precisely about how drupal-language works, but as I understand 
it, I technically have the Drupal module installed, just not enabled.  
Since this seems to be referring to which modules I have enabled, 
perhaps 'installed' should be changed.  Also, it just trails off...  
Perhaps it should say 'you have no authentication modules enabled' in 
the case of enabled authentication modules = 0.

But isn't the user module an authentication module?  So perhaps this 
should be distributed authentication?

One more.  It also says this:
=================
To disable distributed authentication, simply disable 
<http://www.myanimecards.net/?q=admin/modules> or remove all DA modules. 
For a virgin install, that means removing/disabling the jabber module 
and the drupal module.
=================

I don't have the jabber module, so I am guessing it is not included 
anymore.  Text should be modified appropriately.

I have some doubts about the appropriateness of saying a 'virgin' 
install, but I'm American and a girl to boot, so I guess I'm in a 
prudish minority.  ;p  I have seen some places refer to such a thing a 
'vanilla' install, which sounds nicer.  :)  A more userfriendly way 
would be out-of-the-box, perhaps.

Anisa.
Oo...  A little earthquake!
http://earthquake.usgs.gov/recenteqsww/Quakes/usvwac.htm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://drupal3.drupal.org/pipermail/documentation/attachments/20050321/792783e7/attachment.htm


More information about the drupal-docs mailing list