Topic on Extension talk:ConfirmAccount

Unkown password after account creation

3
Andreas Plank (talkcontribs)

Hi,

I'm running a 1.27.0-wmf.9 and Extension:ConfirmAccount origin/master from 2915-12-14 – I know it is a development wiki state that I try to run – but after creating an account I could not log in, it issued the message: «Das Passwort ist falsch. Bitte versuche es erneut.» (Password incorrect. Please try again). The password I used was that from e-mail. I only could log in after proceeding to Special:ResetPassword. Have I missed some LocalSettings to take care of? Note that on this Wiki setup I had to reset the new password saving method pbkdf2 because there are older Wikis that share the user table:

$wgPasswordDefault ='B'; /* old MD5 hashing on shared Wikifamily with pre MW1.24 and post MW 1.24+ Wikis */

But normally this changed setting should not disrupt the request account process, right?

Any hint or solution to get it working properly at the very first log in? Regards Andreas

Andreas Plank (talkcontribs)

After

  1. confirming the new user
  2. confirming e-Mail address
  3. checking the database table user where the new user name will be inserted by the confirm process of new users
SELECT `user_id` , `user_name` , UNHEX( HEX( `user_password` ) ) AS 'user_password' FROM `user` ORDER BY `user_id` DESC

… I see that there is no password set whatsoever when the new user is created.

A bug?

Andreas Plank (talkcontribs)

The cause is in the MW 1.27 core, extension:ConfirmAccount calls User::createNew …

foreach ( array( 'password', 'newpassword', 'newpass_time', 'password_expires' ) as $field ) {
  if ( isset( $params[$field] ) ) {
    wfDeprecated( __METHOD__ . " with param '$field'", '1.27' );
    unset( $params[$field] );
  }
}

… but all of those data values (password, newpassword etc.) are deleted in the process and hence no password comes into the database at the first place that the login can compare with. So I guess there is some other concept of creating a new user from the MW-core point of view that extension:ConfirmAccount is not synchronous with?

Is there any solution to this in planning?

Reply to "Unkown password after account creation"