[opencms-dev] Imported users cannot login in opencms 13 (solved)

[Hein van der Kallen]

Alex

Thank you for your fast reply.

 

I found my error: 

 

In a test for opencms 11 ( upgraded from opencms 8) I had

       <passwordhandler class="org.opencms.security.CmsDefaultPasswordHandler">

            <encoding>UTF-8</encoding>

            <digest-type>md5</digest-type>

            <param name="compatibility.convert.digestencoding">false</param>

        </passwordhandler>

 

 

But in production on opencms10.5.4 ( not 10.5.1) ( from new install with opencms 10.5.4) I had 

       <passwordhandler class="org.opencms.security.CmsDefaultPasswordHandler">

            <encoding>UTF-8</encoding>

            <digest-type>scrypt</digest-type>

            <param name="compatibility.convert.digestencoding">false</param>

            <param name="scrypt.settings">16384,8,1</param>

        </passwordhandler>

 

So I was wrong to assume that I had to change the passwordhandler for import of users from opencms10.5.

 

Kind Regards

Hein van der Kallen

 

 

 

Van: opencms-dev <opencms-dev-bounces at opencms.org> Namens Alex Kandzior via opencms-dev
Verzonden: donderdag 8 september 2022 12:26
Aan: The OpenCms mailing list <opencms-dev at opencms.org>
CC: Alex Kandzior <alex at opencms.org>
Onderwerp: Re: [opencms-dev] Imported users cannot login in opencms 13

 

Dear Hein

 

It should work, as it apparently did for Fabian.

 

What you can do:

 

- Check the exported manifest.xml file with the user data to see if it contains the MD5 hash for the passwords

- Maybe use an external tool to verify if the password data in the XML is a correct MD5 hash

- After the import, use a database tool to verify that the MD5 hash from the export is imported correctly in the OpenCms database

- If the MD5 hash was correctly imported, then the <passwordhandler> settings should work


Kind regards,
Alex.

-------------------
Alexander Kandzior

Alkacon Software - The OpenCms Experts                                                    
http://www.alkacon.com - http://www.opencms.org                                                          







Am 07.09.2022 um 17:28 schrieb Hein van der Kallen via opencms-dev <opencms-dev at opencms.org <mailto:opencms-dev at opencms.org> >:

 

Alex

I have the same problem as Fabian 

I imported users and groups from production on 10.5.1 to a fresh install of OpenCms 13

 

I tried the suggested

        <passwordhandler class="org.opencms.security.CmsDefaultPasswordHandler">

            <encoding>UTF-8</encoding>

            <digest-type>MD5</digest-type>

            <param name="compatibility.convert.digestencoding">false</param>

        </passwordhandler>

 

But it did NOT work. 

The users are imported but cannot log in. 

 

I also tried ( from opencms 10.5.1) 

<digest-type>md5</digest-type> 

 

But that did NOT work either.

 

Kind regards

Hein van der Kallen

 

Van: opencms-dev < <mailto:opencms-dev-bounces at opencms.org> opencms-dev-bounces at opencms.org> Namens Alex Kandzior via opencms-dev
Verzonden: vrijdag 5 augustus 2022 11:04
Aan: The OpenCms mailing list < <mailto:opencms-dev at opencms.org> opencms-dev at opencms.org>
CC: Alex Kandzior < <mailto:alex at opencms.org> alex at opencms.org>
Onderwerp: Re: [opencms-dev] Search index configuration

 

Hi Fabian!

 

- How can I import users and groups that have been exported from e.g. 10.5? In other terms, as the password mechanics seem to have changed, how can I migrate local users and groups to a fresh install of OpenCms 13?

 

Check the configuration file „opencms-system.xml“. Somewhere aound line 35 is the <passwordhandler> configuration.

Change this back to:

 

                              <passwordhandler class="org.opencms.security.CmsDefaultPasswordHandler">
                                            <encoding>UTF-8</encoding>
                                            <digest-type>MD5</digest-type>
                                            <param name="compatibility.convert.digestencoding">false</param>
                              </passwordhandler>

 

Then the old MD5 encoded password should still work. 

 

- Can I no longer add/modify search indexes and sources through the GUI?

 

Yes, this is the case.

 

Kind regards,
Alex.

-------------------
Alexander Kandzior

Alkacon Software - The OpenCms Experts                                                    
 <http://www.alkacon.com/> http://www.alkacon.com -  <http://www.opencms.org/> http://www.opencms.org                                                          









Am 04.08.2022 um 22:10 schrieb Fabian Huschka via opencms-dev < <mailto:opencms-dev at opencms.org> opencms-dev at opencms.org>:

 

Hi,

 

I had finally the chance to fiddle with OpenCms 13. And two things struck me right away:

 

- How can I import users and groups that have been exported from e.g. 10.5? In other terms, as the password mechanics seem to have changed, how can I migrate local users and groups to a fresh install of OpenCms 13?

- Can I no longer add/modify search indexes and sources through the GUI?

 

Many thanks,

 

 

\Fabian

_______________________________________________
This mail is sent to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
 <https://lists.opencms.org/mailman/listinfo/opencms-dev> https://lists.opencms.org/mailman/listinfo/opencms-dev





 

_______________________________________________
This mail is sent to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
 <https://lists.opencms.org/mailman/listinfo/opencms-dev> https://lists.opencms.org/mailman/listinfo/opencms-dev

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencms.org/pipermail/opencms-dev/attachments/20220908/e8a795f0/attachment.htm>