Cacti (home)ForumsDocumentation
Cacti: offical forums and support
It is currently Sun Apr 23, 2017 4:44 pm

All times are UTC - 5 hours




Post new topic Reply to topic  [ 10 posts ] 
Author Message
 Post subject: can't change password in cacti 1.0.4
PostPosted: Thu Mar 09, 2017 8:36 am 
Offline

Joined: Fri Aug 07, 2015 8:15 am
Posts: 27
Peace, I tried to change the password from the link on the right where there is log out, but it keeps saying wrong current password, even though i can log in using it. I tried it on several user names the results were the same. is this a mysql problem?


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Thu Mar 09, 2017 9:01 am 
Offline
Cacti Guru User
User avatar

Joined: Thu Jan 31, 2008 6:39 am
Posts: 2573
Location: Kressbronn, Germany
Is this for a new installation or an upgraded one ?

_________________
Greetings,
Phalek
---
Need more help ? Read the Cacti documentation or my new Cacti Book
Need on-site support ? Look here Cacti Workshop
Need professional Cacti support ? Look here CereusService
---
Plugins : CereusTransporter | CereusReporting | nmidWebService | nmidSmokeping | nmidWeb2 |

Code:
CereusServer Master:  SYSTEM STATS: Time:2.5621 Method:spine Processes:1 Threads:16 Hosts:446 HostsPerProcess:446 DataSources:14683 RRDsProcessed:7573
CereusServer Agent:   SYSTEM STATS: Time:27.4840 Method:spine Processes:1 Threads:8 Hosts:16 HostsPerProcess:16 DataSources:114576 RRDsProcessed:48061


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Thu Mar 09, 2017 9:02 am 
Offline

Joined: Fri Aug 07, 2015 8:15 am
Posts: 27
upgraded


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Thu Mar 09, 2017 9:11 am 
Offline
Cacti Guru User
User avatar

Joined: Thu Jan 31, 2008 6:39 am
Posts: 2573
Location: Kressbronn, Germany
Just checked the code. It "looks" like the password change method is still using md5, while the login process re-hashes the password with bcrypt and stored that in the database.

_________________
Greetings,
Phalek
---
Need more help ? Read the Cacti documentation or my new Cacti Book
Need on-site support ? Look here Cacti Workshop
Need professional Cacti support ? Look here CereusService
---
Plugins : CereusTransporter | CereusReporting | nmidWebService | nmidSmokeping | nmidWeb2 |

Code:
CereusServer Master:  SYSTEM STATS: Time:2.5621 Method:spine Processes:1 Threads:16 Hosts:446 HostsPerProcess:446 DataSources:14683 RRDsProcessed:7573
CereusServer Agent:   SYSTEM STATS: Time:27.4840 Method:spine Processes:1 Threads:8 Hosts:16 HostsPerProcess:16 DataSources:114576 RRDsProcessed:48061


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Thu Mar 09, 2017 9:19 am 
Offline
Cacti Guru User
User avatar

Joined: Thu Jan 31, 2008 6:39 am
Posts: 2573
Location: Kressbronn, Germany
Hm from a closer look at the code, this should be fine. What PHP version do you use ?

_________________
Greetings,
Phalek
---
Need more help ? Read the Cacti documentation or my new Cacti Book
Need on-site support ? Look here Cacti Workshop
Need professional Cacti support ? Look here CereusService
---
Plugins : CereusTransporter | CereusReporting | nmidWebService | nmidSmokeping | nmidWeb2 |

Code:
CereusServer Master:  SYSTEM STATS: Time:2.5621 Method:spine Processes:1 Threads:16 Hosts:446 HostsPerProcess:446 DataSources:14683 RRDsProcessed:7573
CereusServer Agent:   SYSTEM STATS: Time:27.4840 Method:spine Processes:1 Threads:8 Hosts:16 HostsPerProcess:16 DataSources:114576 RRDsProcessed:48061


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Thu Mar 09, 2017 9:20 am 
Offline

Joined: Fri Aug 07, 2015 8:15 am
Posts: 27
php -v
PHP 7.0.15 (cli) (built: Feb 24 2017 16:30:30) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.0.0, Copyright (c) 1998-2017 Zend Technologies
with Zend OPcache v7.0.15, Copyright (c) 1999-2017, by Zend Technologies


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Sat Mar 11, 2017 9:37 pm 
Offline
Cacti User
User avatar

Joined: Mon Jan 05, 2015 10:10 am
Posts: 202
This is fixed in GitHub.

_________________
Before history, there was a paradise, now dust.


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Mon Mar 13, 2017 5:05 am 
Offline

Joined: Fri Aug 07, 2015 8:15 am
Posts: 27
and what is the solution?


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Mon Mar 13, 2017 5:11 am 
Offline
Cacti Guru User
User avatar

Joined: Thu Jan 31, 2008 6:39 am
Posts: 2573
Location: Kressbronn, Germany
Look here for an explanation of the root cause and the fix:

https://github.com/Cacti/cacti/issues/382

_________________
Greetings,
Phalek
---
Need more help ? Read the Cacti documentation or my new Cacti Book
Need on-site support ? Look here Cacti Workshop
Need professional Cacti support ? Look here CereusService
---
Plugins : CereusTransporter | CereusReporting | nmidWebService | nmidSmokeping | nmidWeb2 |

Code:
CereusServer Master:  SYSTEM STATS: Time:2.5621 Method:spine Processes:1 Threads:16 Hosts:446 HostsPerProcess:446 DataSources:14683 RRDsProcessed:7573
CereusServer Agent:   SYSTEM STATS: Time:27.4840 Method:spine Processes:1 Threads:8 Hosts:16 HostsPerProcess:16 DataSources:114576 RRDsProcessed:48061


Top
 Profile  
 
 Post subject: Re: can't change password in cacti 1.0.4
PostPosted: Tue Mar 14, 2017 6:50 am 
Offline

Joined: Fri Aug 07, 2015 8:15 am
Posts: 27
here is the lines 104 till 110 in auth_changepassword.php:
Code:
// Get old password to compare against the database
   if (function_exists('password_hash')) {
      $current_password_new = password_hash(get_nfilter_request_var('current_password'), PASSWORD_DEFAULT);
   }else{
      $current_password_new = '';
   }
   $current_password_old = md5(get_nfilter_request_var('current_password'));


what to change and would it look like when changed?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC - 5 hours


Who is online

Users browsing this forum: Google Adsense [Bot] and 8 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group