Hi,
Sorry for the "urgent" label but I urgently need to unblock a user who cannot login anymore because of too many login attempts with wrong password.
What can I do ?
Laurent
On Wed, Oct 13, 2010 at 12:38 PM, Wikimini webmaster@wikimini.org wrote:
Hi,
Sorry for the "urgent" label but I urgently need to unblock a user who cannot login anymore because of too many login attempts with wrong password.
IIRC the failed login counters are stored in the cache. If not already expired out, you could restart memcached (if using memcache) or clear out the objectcache table; or you could temporarily change the $wgPasswordAttemptThrottle settings.
Cache key for the login attempts includes the IP address and a hash of the username, if you're brave enough to clear an individual entry: $throttleKey = wfMemcKey( 'password-throttle', wfGetIP(), md5( $this->mName ) );
The default maximum is 5 hits in 5 minutes (300 seconds), so _should_ be long expired already if using defaults.
-- brion
Since you have probably tried to manually unblock him (http://www.mediawiki.org/wiki/Manual:Block_and_unblock#Unblocking), you could still modify $wgAutoblockExpiry and/or $wgBlockDisablesLogin, see http://www.mediawiki.org/wiki/Manual:Block_and_unblock#Configuration_setting....
Am 13.10.2010 21:38, schrieb Wikimini:
Hi,
Sorry for the "urgent" label but I urgently need to unblock a user who cannot login anymore because of too many login attempts with wrong password.
What can I do ?
Laurent _______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Thank you very much for the quick replies !
2010/10/13 Der Administrator @ Wijuki admin@wijuki.org
Since you have probably tried to manually unblock him (http://www.mediawiki.org/wiki/Manual:Block_and_unblock#Unblocking), you could still modify $wgAutoblockExpiry and/or $wgBlockDisablesLogin, see
http://www.mediawiki.org/wiki/Manual:Block_and_unblock#Configuration_setting... .
Am 13.10.2010 21:38, schrieb Wikimini:
Hi,
Sorry for the "urgent" label but I urgently need to unblock a user who cannot login anymore because of too many login attempts with wrong
password.
What can I do ?
Laurent _______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Mhh... finally it didn't work. :-(
What I did yesterday :
1) cleared out the objectcache table in phpmyadmin (today this table is still empty) 2) cleared out the field 'user_newpass_time' for this user in the user table 3) set $wgPasswordAttemptThrottle to "null" in localsettings 4) changed the user's password with following command : UPDATE user SET user_password = MD5(CONCAT(user_id, '-', MD5('somepass'))) WHERE user_name = 'someuser'; 5) tried to connect myself with username 'someuser' and new password 'somepass' --> it worked! 6) removed the line $wgPasswordAttemptThrottle = null; from localsettings
PROBLEM :
I can login with his account but the user can't. He still gets the message : "You have made too many recent attempts on this account's password. Please wait before trying again."
Could you suggest something else ? I really need to solve this.
I'm not sure but I think I'm not using memcache on my server. Here is what I've found in my localsettings :
## Shared memory settings $wgMainCacheType = CACHE_NONE;
$wgMemCachedServers = array(); # File cache! # $wgUseFileCache = true; # $wgFileCacheDirectory = '/tmp/cache/'; # C:\Server\xampp\htdocs\MW_trunk\cache'; $wgEnableSidebarCache = true; # NO DB HITS! # $wgDisableCounters = true; # $wgMiserMode = true; # Text cache # $wgCompressRevisions = true; # $wgRevisionCacheExpiry = 3*24*3600; # $wgParserCacheExpireTime = 14*24*3600; # Diffs
Thank you very much for your help.
Laurent
2010/10/13 Wikimini webmaster@wikimini.org
Thank you very much for the quick replies !
2010/10/13 Der Administrator @ Wijuki admin@wijuki.org
Since you have probably tried to manually unblock him (http://www.mediawiki.org/wiki/Manual:Block_and_unblock#Unblocking), you could still modify $wgAutoblockExpiry and/or $wgBlockDisablesLogin, see http://www.mediawiki.org/wiki/Manual:Block_and_unblock#Configuration_setting....
Am 13.10.2010 21:38, schrieb Wikimini:
Hi,
Sorry for the "urgent" label but I urgently need to unblock a user who cannot login anymore because of too many login attempts with wrong password.
What can I do ?
Laurent _______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
On Sat, 16 Oct 2010, Wikimini wrote:
I can login with his account but the user can't. He still gets the message : "You have made too many recent attempts on this account's password. Please wait before trying again."
Given the level of effort you've put into this, this has almost gotta be too stupid: Could it be a cookie on your user's browser?
mediawiki-l@lists.wikimedia.org