Ticket modified by Sebastian Steinhuber at 2011/03/18 02:23
Tracking System: Bugs
Category: API
Version: Trunk
Status: Closed
Resolution: Works for me
Completed: 0%
Priority: 5 - medium
Created By: Sebastian Steinhuber
Created on: 2011/03/17 01:08
Assigned to: Klaus Leithoff
Summary: #2892 - Trunk r34166: User login fails
Hi there!
I authenticate to EGroupware’s database (mysql).
With revision 34166 the user login fails with ‘bad login or password’.
No messages in the system’s logs.
I’m able to do a user login with revision 34165.
mysql Ver 14.14 Distrib 5.1.56, for debian-linux-gnu (i486)
Apache/2.2.17 (Debian)
PHP 5.3.5-1 with Suhosin-Patch (cli) (built: Feb 19 2011 01:57:59)
Copyright © 1997-2009 The PHP Group
Zend Engine v2.3.0, Copyright © 1998-2010 Zend Technologies
with XCache v1.3.1, Copyright © 2005-2010, by mOo
with Suhosin v0.9.32.1, Copyright © 2007-2010, by SektionEins GmbH
There doesn’t seem to be a proper category for this issue, please correct.
Thanks in advance for any help,
Sebastian
Comment by Sebastian Steinhuber at 2011/03/18 02:23:
Since I changed SQL encryption type for passwords in setup from sha to md5, it works for me.
I remember that I had set sha more than a year ago – without renewing the passwords, they were md5 encrypted since the very first install – and I had supposed that passwords were converted from md5 to sha by EGroupware’s php routines.
So, authentication worked without problems until r34166 with password ecryption type sha and md5 encrypted hashes.
That’s the reason for all the noise.
I’d like to close the ticket. Thanks for your time,
Sebastian
Comment by Sebastian Steinhuber at 2011/03/17 22:20:
Thanks for your consideration.
I’m able to login with revision 34165.
There is no change if I add @domain as you suggested with svn r34166 and above.
Unfortunately I don’t have further informations at this time, although I checked all relevant log-files and I am currently trying several options in EGroupware and system setup regarding authentication.
Sebastian
Comment by Klaus Leithoff at 2011/03/17 08:59:
additional question:
If you revert back to 34165 does login work?
Comment by Klaus Leithoff at 2011/03/17 08:57:
could you check if login is successful if you login as
user@domain
where domain is the egw_domain used in your header.inc.php
I have seen such a problem, caused by an empty domainlist on login, but cannot tell the reason yet.
The workaround was to login as user@domain.
If this is NOT working, your problem may be different.
Comment by Ralf Becker at 2011/03/17 08:02:
Hi Sebastian,
the category is no problem.
But I can not reproduce that on any of my systems, neither with sql nor ldap systems.
I’m afraid without further information, we can NOT help.
Ralf
linked entries:
http://www.egroupware.org/egroupware/index.php?menuaction=tracker.tracker_ui.edit&tr_id=2892&no_popup=1