You are here: Foswiki>Tasks Web>Item2287 (28 Aug 2010, DavidPontzer)Edit Attach

Item2287: 1.0.7 clobbers password file Windows OS, md5 encryption

pencil
Priority: Normal
Current State: Closed
Released In:
Target Release: n/a
Applies To: Engine
Component:
Branches:
Reported By: DavidPontzer
Waiting For: Main.DavidPontzer, Main.SvenDowideit
Last Change By: DavidPontzer
Converting from TWiki to FosWiki, Windows OS, htpasswd authentication, md5 encryption. I copy my password file from TWiki to FosWiki. Then, when I attempt to login, the login fails and the password file is clobbered with

"Enter your LoginName. (Typically First name and last name, no space, no dots, capitalized, e.g. JohnSmith, unless you chose otherwise). Visit UserRegistration if you do not have one."

Added in for each user right on top of the password, completely messing up the file.

If I start from scratch with no users, it works fine. But I have thousands of users and need to be able to just copy the htpasswd file from TWiki.

-- DavidPontzer

I fixed a similar problem in Item1780

Can this be a similar bug?

I cannot check from where I am now.

-- KennethLavrsen

Sven was not able to duplicate the problem. I have given up and gone back to TWiki for now. Will attemp the conversion again when I have some time.

-- DavidPontzer

David and I are working to track this down - I've asked for more specifics wrt versions and other details.

I've just tested it by xfering an old htpasswd file from a linux twiki to a foswiki 1.0.6 windows installer based install, and that works - so it is probably not going to happen to everyone.

I think that I'll need to actually see a copy of part of the htpasswd file (names and/or emails changed to protect the users) with at least one known password.

-- SvenDowideit - 28 Oct 2009

Any update on this one?

-- KennethLavrsen - 09 Jan 2010

I tried an install again using 1.0.9. With the encryption set to MD5, no joy, the file was corrupted by the registration process. However, when I switched to SH1, all seems to be fine. The instructions for Windows should maybe be expanded to include a reminder to install the "Digest - SH1" perl module.

-- DavidPontzer - 26 Mar 2010

This is reported to be fixed with Apache 2.2.16. I've not tested this.

-- DavidPontzer - 28 Aug 2010

ItemTemplate edit

Summary 1.0.7 clobbers password file Windows OS, md5 encryption
ReportedBy DavidPontzer
Codebase 1.0.7
SVN Range Foswiki-1.0.7, Sun, 20 Sep 2009, build 5061
AppliesTo Engine
Component
Priority Normal
CurrentState Closed
WaitingFor DavidPontzer, SvenDowideit
Checkins
TargetRelease n/a
ReleasedIn
Topic revision: r7 - 28 Aug 2010, DavidPontzer
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy