Topic on Project:Support desk

Upgrade to mediawiki-1.28.0 Killed my PW and I now cannot log in

6
216.36.161.27 (talkcontribs)

I got caught unaware with a new update to a new version of MWiki, in which my old password was rendered unusable. This is a local installation with no internet access to any outside my computer, so I have not been "hacked." The account is still there, I simply cannot:

1) log in, won't accept stored password;

2) cannot CHANGE pw because of the above; will not accept "previous" password. I don't really want to set up another account; I want to use the one I already have.

So, how to nuke the existing password and account files, and simply set up a new account over the old one? Surely there's a way to do that.

System: FC Linux, version 4.15.9-200.fc26.x86_64.

星耀晨曦 (talkcontribs)

Will the upgrade lose password? Very strange. Fortunately, we have a command line script to change a user password -- changePassword.php.

2001:16B8:10B9:200:9846:F04:B025:5A5E (talkcontribs)

Sounds like a configuration problem to me. Maybe an update script had been used to convert the passwords to a new format, e.g. to pbkdf2, but LocalSettings.php has been configured not to use this format?

This problem should then not only affect one user, but all users. In this case running changePassword.php would be needed for all users...

星耀晨曦 (talkcontribs)

This script will only change the password for the specified user.

2001:16B8:10B9:200:982A:8317:6182:F7C5 (talkcontribs)

Right. What I wanted to say is: If really all users are affected, changePassword.php is not really a good option. Actually, I - just like you - do not quite understand, how the problem happened. Without knowing what now is wrong exactly, it will be hard to give a good advice.

More investigation will be needed!

星耀晨曦 (talkcontribs)

Have you backed up the pre-upgrade database? This allows you to roll back your upgrade.

Is there a weird thing happening when you run update.php?

Reply to "Upgrade to mediawiki-1.28.0 Killed my PW and I now cannot log in"