[Mediawiki-l] Resetting admin password, LDAP enabled

[Sumurai8 (DD)]

Hi Nina,

I don't know how crowded your wiki is, but when you are able to access
localsettings, you are able to change the rights of your '*'-group. You
could create a new account, grant all users to modify any user-rights, grant
your superuser all desired user-groups and then put back the original
settings. This only have to take seconds and I don't think it will cause
much trouble as long as you don't tell people the exact time you'll do this.

Faithfully,
D. (Sumurai8)



From: mediawiki-l-bounces op lists.wikimedia.org [mailto:
> mediawiki-l-bounces op lists.wikimedia.org] On Behalf Of McHale, Nina
> Sent: Saturday, April 24, 2010 3:14 AM
> To: mediawiki-l op lists.wikimedia.org
> Subject: [Mediawiki-l] Resetting admin password, LDAP enabled
>
>
> Hi, all,
>
> When we first launched our wiki, I had users create their own accounts. I
> set an account, Wikiadmin, as a Bureaucrat and Sysop. Then, I implemented
> the LDAP login. Problem is, I can't remember that Wikiadmin account password
> now, and none of the password reset methods (using the changePassword.php
> script or directly editing it in MySQL) will work. The user Wikiadmin does
> not exist in our LDAP/AD environment-although we could create it-and
> stupidly, it was the only account to which I gave elevated permissions
> before setting up LDAP.
>
> The only thing I can think of to try is to take off LDAP authentication
> temporarily, reset the Wikiadmin password, and then put LDAP back. I'm
> nervous about causing harm by doing this; thoughts?
>
> Thanks in advance,
>
> Nina
> _______________________________________________
> MediaWiki-l mailing list
> MediaWiki-l op lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
>