View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 2
IDProjectCategoryView StatusDate SubmittedLast Update
05343Bug reportsAuthenticationpublic2011-07-13 15:082011-07-13 15:27
Reportershilbert Assigned Toc_schmitz  
PrioritynormalSeveritypartial_block 
Status closedResolutionno change required 
Product Version1.91+ 
Summary05343: password returned from database is different from the hashed version
Description

One cannot log in because the comparison of the password given in the login dialog does not match the password returned from the database.

Steps To Reproduce

try to login into the admin section

Additional Information

Only seems to happen on openSUSE installation of mine.

using pgadmin to run the command:
select * from lime_users;

shows:
"5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8"
as password hash stored in the database

hacking in a few print commands in user_control.php to show the return values of the queries gives me:

uid] = 1
[users_name] = admin
[password] = 5653838343839386461323830343731353164306535366638646336323932373733363033643064366161626264643632613131656637323164313534326438
[full_name] = Foo Bar
[parent_id] = 0
[lang] = de
[email] = foo@bar.org
[create_survey] = 1
[create_user] = 1
[delete_user] = 1
[superadmin] = 1
[configurator] = 1
[manage_template] = 1
[manage_label] = 1
[htmleditormode] = default
[one_time_pw] =
[dateformat] = 1

observe the difference in the password stored in the db (sha256 hash) and the password returned.

Subsequently the comparison of the the sha256 of the password in the login dialog leads to not equal the one (correctly stored but incorrectly returned) in the database.

I do not see this issue on Debian with Postgresql 8.4

TagsNo tags attached.
Bug heat2
Complete LimeSurvey version number (& build)10453
I will donate to the project if issue is resolvedNo
BrowserFirefox 5.0
Database type & versionPostgresql 9.0
Server OS (if known)openSUSE 11.4
Webserver software & version (if known)apache2-2.2.17-3.1.i586
PHP Versionphp5-5.3.5-5.12.1.i586
Git branch / Pull Request URL

Users monitoring this issue

There are no users monitoring this issue.

Activities

c_schmitz

c_schmitz

2011-07-13 15:27

administrator   ~15759

If the database is properly installed using the LimeSurvey installation there is no problem.

Run the following command on the database:

ALTER DATABASE <dbname> SET bytea_output='escape';

Please use the forums next time, this is not a support tracker.

Issue History

Date Modified Username Field Change
2011-07-13 15:08 shilbert New Issue
2011-07-13 15:27 c_schmitz Note Added: 15759
2011-07-13 15:27 c_schmitz Status new => closed
2011-07-13 15:27 c_schmitz Assigned To => c_schmitz
2011-07-13 15:27 c_schmitz Resolution open => no change required