Mordur Ingólfsson wrote:
Platonides wrote:
Mordur Ingólfsson wrote:
Dear list,
Hi, I just moved a Mediawiki from one Debian server to another. In the
database that I imported from the previous server the user's password
hashes looked like this:
:B:728d4f83:c0890522e6b9dfc8e3c55a45e5c05156
but now they look like this:
a4c520344c6ce5b3e2dfea3d43301a99.
And no authentication works.
I have found out that this has got to do with salting the hash, but I
cannot seem to make Mediawiki use the salted kind of hashes, so my users
are having to change their passwords, which is a nuisance.
Thanks,
Mordur Ingolfsson
Is the new server at a mediawiki version greater or equal to the old
one?
The first hash is on a newer format, and is always salted. The second
one may be salted or not depending on $wgPasswordSalt
The version of mediawiki on the server onto which I moved the wiki is
1.12, I´m not sure which version on the machine the mediawiki came FROM.
Is there a way to let MW 1.12 recognize and use the first kind of
password hash?
The :B: style of password was introduced in MediaWiki 1.13. You should
change your copy of MediaWiki to 1.13, rather than attempt to downgrade
the database to 1.12.
The Debian packages of MediaWiki are pretty much useless. They don't even
keep up with our security releases, it took them a month to backport
1.13.3/1.12.2. And it's not particularly easy to use, it doesn't install
or upgrade the database for you. Just install it from the source tarball
available on
mediawiki.org, it's virtually the same procedure.
I have plans to improve the Debian package. If/when I think it's up to an
appropriate standard, I'll advertise it on our download page.
-- Tim Starling
Thank you for your reply Mr. Starling.
Is it, in your opinion, safe to install the source tarball of 1.13 on
top of the debian package installation? What would I need to keep in
mind for such a procedure? There is a lot of different things going on
on this particular server where the MW is running so I am a bit wary of
breaking things.
Thanks,
Mordur Ingolfsson
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l