Hello, i looked into the DB.

every time I logon as WikiSysop the password si disabled. I reset the password with changePassword.php an it is changed in the DB nd I can logon.

after I login the password is set to nologin

mysql> select user_password,user_newpassword from user where user_name like "%WikiSysop%"; +---------------+------------------+ | user_password | user_newpassword | +---------------+------------------+ | nologin | | +---------------+------------------+ 1 row in set (0.01 sec)

is there a way to disable this behaviour ?

thanks

Rick

On 12/7/10 4:32 PM, Platonides wrote:

Riccardo Veraldi wrote:

...

hello, when I try to cahnge a user password with changePassword.php maintenance program, password is correctly changed and user can logon.

but if I restart mysql daemon, user cannot logon anymore, because passsword does not work.

Looks like password is stored only untli mysql is restarted

the sames also happens changing password manually inside the user table in the wiki database any clue ?

thanks

Rick

Is other data stored in mysql kept on restart? This looks like mysql unable to save things to disk and keeping it in memory until it stops. Maybe its file is being replaced and the changes are written to a deleted inode?

---

MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

the wiki site is closed on the firewall and used only on local LAN, user logon is given by x509 authentication and I have actually only a WikiSysop password user. the mediawiki version is 1.15.3

I have enabled and installed the following extensions:

-rw-r--r-- 1 apache apache 1815 Dec 6 17:25 accesscontrolSettings.php -rw-rw-r-- 1 apache apache 7175 Dec 29 14:24 HttpAuthPlugin.php -rw-r--r-- 1 apache apache 9541 Dec 29 14:25 SSLAuthPlugin.php

thank you very much

Rick

On 12/29/10 8:32 PM, Sulka Haro wrote:

The three questions that come to mind are:

1. Which version of MediaWiki are you running?
2. Have you installed any extensions?
3. Is there a chance that someone's modified your copy of MediaWiki? I'd

assume a poorly programmed trojan (password stealing utility) might cause the type of symptoms you're describing.

sulka

On Wed, Dec 29, 2010 at 3:54 PM, Riccardo Veraldi< Riccardo.Veraldi@cnaf.infn.it> wrote:

...

Hello, i looked into the DB.

every time I logon as WikiSysop the password si disabled. I reset the password with changePassword.php an it is changed in the DB nd I can logon.

after I login the password is set to nologin

mysql> select user_password,user_newpassword from user where user_name like "%WikiSysop%"; +---------------+------------------+ | user_password | user_newpassword | +---------------+------------------+ | nologin | | +---------------+------------------+ 1 row in set (0.01 sec)

is there a way to disable this behaviour ?

thanks

Rick

On 12/7/10 4:32 PM, Platonides wrote:

...

Riccardo Veraldi wrote:

...

hello, when I try to cahnge a user password with changePassword.php maintenance program, password is correctly changed and user can logon.

but if I restart mysql daemon, user cannot logon anymore, because passsword does not work.

Looks like password is stored only untli mysql is restarted

the sames also happens changing password manually inside the user table in the wiki database any clue ?

thanks

Rick

Is other data stored in mysql kept on restart? This looks like mysql unable to save things to disk and keeping it in memory until it stops. Maybe its file is being replaced and the changes are written to a deleted inode?

---

MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

---

MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l