CiviCRM Community Forums (archive)

Hi.
I am trying to get the civisync outlook plugin to work, and it always fail at the authentication level.
I have an access denied in the watchdog dblog, and it looks like there's a problem authenticating with the REST api.

I've manually tried various URL formats (see below), and all give me an access denied (user is identified as 'anonymous - not verified').

I've set access ajax api to allowed for anonymous users, no change.
I'm running out of ideas, where should I look to get more info ?

(I tried with and without the api_key in addition to the key parameters.
I use the api key and the user key that have been generated by civisync.

mycrmsite_url.dom/civicrm/sites/all/modules/civicrm/extern/rest.php?q=civicrm/login&name=test@test.org&pass=XXXXXXXX&key=XXXXXXXXXXXX&api_key=XXXXXXXXXX&json=1&version=2

mycrmsite_url.dom/civicrm/sites/all/modules/civicrm/extern/rest.php?civicrm/login&name=test@test.org&pass=XXXXXXXX&key=XXXXXXXXXXXX&api_key=XXXXXXXXXX&json=1&version=2

mycrmsite_url.dom/civicrm/sites/all/modules/civicrm/extern/rest.php?q=civicrm/login&name=test@test.org&pass=XXXXXXXX&key=XXXXXXXXXXXX&api_key=XXXXXXXXXX&json=1&version=3

mycrmsite_url.dom/civicrm/sites/all/modules/civicrm/extern/rest.php?civicrm/login&name=test@test.org&pass=XXXXXXXX&key=XXXXXXXXXXXX&api_key=XXXXXXXXXX&json=1&version=3

mycrmsite_url.dom/civicrm/sites/all/modules/civicrm/extern/rest.php?q=civicrm/login&name=test@test.org&pass=XXXXXXXX

mycrmsite_url.dom/civicrm/sites/all/modules/civicrm/extern/rest.php?q=civicrm/login&name=test@test.org&pass=XXXXXXXX


Thanks.
I tried
http://my_site.url/civicrm/sites/all/modules/civicrm/extern/rest.php?entity=contact&action=get&key=XXXX&api_key=YYY
and still : access denied. (user is 'Anonymous (not verified)' )

(substituted xxx and yyy with the site key and user key, and swapped them to make sure it was the right key at the right place.)

Is there a way to get more log info and to know why the access is denied ?

The contact has access, but in the dblog I see that drupal doesn't recognize the contact and sees it as anoymous.
It makes sense to hide error info from users, but not from the admin of the site, no ?

What do you see on the screen?

I'm not sure I understand your point about admins, if it fails authenticating you, it can't know you are admin.

I'm not sure if/how drupal is involved in the login, you might want to debug (starting from the rest.php and see what is called)

OK I must have madz a bad choice of words, so I'll restate it otherwise for clarity :

- Using the rest.php url call, I cannot login into the system.
- A call to http://my_site.url/civicrm/sites/all/modules/civicrm/extern/rest.php?entity=contact&action=get&key=XXXX&api_key=YYY should log me in Drupal and civicrm and diplay the results of the query, right ?
- All such calls result in 'access denied'
- when I log into Drupal / Civicrm as admin user, and check the dblog to get more info on why the attempt resulted in access denied, all I get is 'anonymous user tried to access this url, access denied'.

So my question is : as admin of the drupal/civicrm, where can I get more info on what happened exactly ? Is there some extended logging feature on calls to the rest.php api that would allow me to trace what data it receives, how it attempts to process it and most importantly why it does fail ?

As stated above, it does make sense to return  miniml error message to an unknown user trying to log in via the rest.php api, but when I log in as admin of the system, I want to get extensive logs about wht has happened.

its this better worded ?

As stated before I'm no programmer. I'm a good sysadmin, but can't help with code 

There's no way I can justify this with my client, especially at a time they're questionning the choice of civicrm in the first place.

You have a pretty old version, can you try to upgrade? and your client might be happier with a more recent civicrm too