Item2287: 1.0.7 clobbers password file Windows OS, md5 encryption
Priority: Normal
Current State: Closed
Released In:
Target Release: n/a
Applies To: Engine
Component:
Branches:
Converting from TWiki to
FosWiki, Windows OS, htpasswd authentication, md5 encryption.
I copy my password file from TWiki to
FosWiki.
Then, when I attempt to login, the login fails and the password file is clobbered with
"Enter your
LoginName. (Typically First name and last name, no space, no dots, capitalized, e.g. JohnSmith, unless you chose otherwise). Visit
UserRegistration if you do not have one."
Added in for each user right on top of the password, completely messing up the file.
If I start from scratch with no users, it works fine. But I have thousands of users and need to be able to just copy the htpasswd file from TWiki.
--
DavidPontzer
I fixed a similar problem in
Item1780
Can this be a similar bug?
I cannot check from where I am now.
--
KennethLavrsen
Sven was not able to duplicate the problem. I have given up and gone back to TWiki for now. Will attemp the conversion again when I have some time.
--
DavidPontzer
David and I are working to track this down - I've asked for more specifics wrt versions and other details.
I've just tested it by xfering an old htpasswd file from a linux twiki to a foswiki 1.0.6 windows installer based install, and
that works - so it is probably not going to happen to everyone.
I
think that I'll need to actually see a copy of part of the htpasswd file (names and/or emails changed to protect the users) with at least one known password.
--
SvenDowideit - 28 Oct 2009
Any update on this one?
--
KennethLavrsen - 09 Jan 2010
I tried an install again using 1.0.9. With the encryption set to MD5, no joy, the file was corrupted by the registration process. However, when I switched to SH1, all seems to be fine. The instructions for Windows should maybe be expanded to include a reminder to install the "Digest - SH1" perl module.
--
DavidPontzer - 26 Mar 2010
This is reported to be fixed with Apache 2.2.16. I've not tested this.
--
DavidPontzer - 28 Aug 2010