Mibew Messenger Community

General => Support => Topic started by: Marlamin on November 27, 2013, 12:02:03 PM

Title: Default admin account not working after fresh installation
Post by: Marlamin on November 27, 2013, 12:02:03 PM

Hey guys,

I just did a fresh install of Mibew 1.6.8 on my server and I can't seem to login with the default admin user (admin) and password (empty). I've already reinstalled it twice and it just refuses to login.

There was some password enhancements done (https://github.com/Mibew/mibew/commit/4873d03d4242fe46edf2fe3eb2df266be95f5c60) but the default SQL install script still seems to use MD5 (https://github.com/Mibew/mibew/blob/master/src/mibew/install/dbinfo.php#L347) instead of your new calculate_password_hash functionality.

Anything I can do to make this work instead of going back to Mibew 1.6.7?

With Friendly Regards,

Marlamin

Title: Re: Default admin account not working after fresh installation
Post by: faf on November 27, 2013, 12:44:17 PM

There were no any changes in passwords-related code between Mibew 1.6.7 and 1.6.8.

You've gave a link to the commit in the master branch which stands for the upcoming Mibew 2.0. And that commit is actually just a port of this commit (https://github.com/Mibew/mibew/commit/5afc23c446b837b36687d6d08e88804b225a45b2) in the legacy branch.

The switch to a properly salted and hashed passwords was between Mibew 1.6.5 and Mibew 1.6.6. But we saved the backwards compatibility with old hashing, so that's why install script still use plain MD5 hashing. Since one should change the default empty password anyway.  ;)

So... For now I don't know what's your problem. Do you use the same database for your new Mibew installation or a new one? Are there any messages in error logs?

Title: Re: Default admin account not working after fresh installation
Post by: Marlamin on November 27, 2013, 12:52:21 PM

Sorry, my mistake. Should have looked better through commits.

I guess it might be related to the fact we run an older version of MySQL (4).

I kinda missed the MySQL 5+ requirement on the download page when I downloaded it and I guess the installer doesn't warn when using an old MySQL (which it shouldn't if people read the requirements correctly like I didnt  :P).

My bad, sorry for the inconvenience. :)

Title: Re: Default admin account not working after fresh installation
Post by: faf on November 27, 2013, 01:20:11 PM

Well, no problems. Err is human.  :)

And we'll implement the DB version check in the future releases. Thanks for this issue. :)