<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>No,
I haven’t. It makes sense to me that the old authentication was local (mysql)
and the new authentication is external (LDAP for example) that if the username
is the same, you should be able to use either. It doesn’t make sense, however,
that it requires the local password for administration (enter current password:
).<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>I
also didn’t submit a bug report, because the installation here was so messed
up, I wasn’t sure it wasn’t just local until someone else just now asked about
it. </span><span style='font-size:11.0pt;font-family:Wingdings'>J</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>But
yeah, setting the password = ‘’ actually forces the external authentication
(trying to login with a blank password does NOT work).<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
ruslan.zakirov@gmail.com [mailto:ruslan.zakirov@gmail.com] <b>On Behalf Of </b>Ruslan
Zakirov<br>
<b>Sent:</b> Tuesday, November 08, 2011 1:08 PM<br>
<b>To:</b> Izz Abdullah<br>
<b>Cc:</b> rt-users@lists.bestpractical.com<br>
<b>Subject:</b> Re: [rt-users] ExternalAuth, local users, and upgrade woes<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p>Direct db access in this case is ok. Have you sent a bug report?<o:p></o:p></p>
<p>Regards, Ruslan. From phone.<o:p></o:p></p>
<div>
<p class=MsoNormal>08.11.2011 18:54 пользователь "Izz Abdullah" <<a
href="mailto:Izz.Abdullah@hibbett.com">Izz.Abdullah@hibbett.com</a>> написал:<o:p></o:p></p>
<p class=MsoNormal>What I did, and it may be a "no-no", is<br>
update Users set Password="" where username = something <excuse
the syntax as the column / table names may differ slightly><br>
<br>
But this worked and forced External Authentication only. I had to do it
directly to the mysql db though.<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:rt-users-bounces@lists.bestpractical.com">rt-users-bounces@lists.bestpractical.com</a>
[mailto:<a href="mailto:rt-users-bounces@lists.bestpractical.com">rt-users-bounces@lists.bestpractical.com</a>]
On Behalf Of Yan Seiner<br>
Sent: Tuesday, November 08, 2011 9:49 AM<br>
To: <a href="mailto:rt-users@lists.bestpractical.com">rt-users@lists.bestpractical.com</a><br>
Subject: Re: [rt-users] ExternalAuth, local users, and upgrade woes<br>
<br>
That worked!<br>
<br>
Interesting....<br>
<br>
Any way to remove the mysql password?<br>
<br>
On Tue, November 8, 2011 7:31 am, Izz Abdullah wrote:<br>
> I've seen this on our system. When you move the database and are
using<br>
> external authentication, you, at least I am able, to login with either my<br>
> MySQL credentials, or my LDAP credentials. When modifying / adding
users,<br>
> I have to put in my MySQL password for this to work for local users.
I<br>
> would try using the password you used in 3.8.10 installation on the new<br>
> system as the current password to see if that fixes your problem.<br>
><br>
> -----Original Message-----<br>
> From: <a href="mailto:rt-users-bounces@lists.bestpractical.com">rt-users-bounces@lists.bestpractical.com</a><br>
> [mailto:<a href="mailto:rt-users-bounces@lists.bestpractical.com">rt-users-bounces@lists.bestpractical.com</a>]
On Behalf Of Yan Seiner<br>
> Sent: Tuesday, November 08, 2011 9:28 AM<br>
> To: <a href="mailto:rt-users@lists.bestpractical.com">rt-users@lists.bestpractical.com</a><br>
> Subject: [rt-users] ExternalAuth, local users, and upgrade woes<br>
><br>
> Yesterday we upgraded our RT instance to 4.0.2. Before then we were<br>
> running 3.8.10 in production, and 4.0.2 in testing.<br>
><br>
> We had 4.0.2 set up in testing with ExternalAuth. That worked well;
our<br>
> LDAP users could log in with their credentials. I could create non-LDAP<br>
> users manually (which is the setup I wanted).<br>
><br>
> Then we moved the database from the server hosting 3.8.10 to our new 4.0.2<br>
> server. Everything went well, except that non-LDAP users cannot log
in.<br>
> Further, I cannot change their password.<br>
><br>
> When I try to change their password, I get<br>
><br>
> Please enter your current password correctly. Password has not been set.<br>
><br>
> I tried creating a user manually. Same thing; I can create the user
but<br>
> cannot set the password.<br>
><br>
> This worked fine in the 4.0.2 test but started happening after we moved<br>
> the 3.8.10 database over to 4.0.2. I did use the procedures in the
README<br>
> and otherwise the new installation is working great.<br>
><br>
> Where do I look?<br>
><br>
><br>
> --<br>
> Pain is temporary. It may last a minute, or an hour, or a day, or a year,<br>
> but eventually it will subside and something else will take its place. If<br>
> I quit, however, it lasts forever.<br>
><br>
> --------<br>
> RT Training Sessions (<a
href="http://bestpractical.com/services/training.html" target="_blank">http://bestpractical.com/services/training.html</a>)<br>
> * Barcelona, Spain November 28 & 29, 2011<br>
> --------<br>
> RT Training Sessions (<a
href="http://bestpractical.com/services/training.html" target="_blank">http://bestpractical.com/services/training.html</a>)<br>
> * Barcelona, Spain November 28 & 29, 2011<br>
><br>
> !DSPAM:4eb94b64141411804284693!<br>
><br>
><br>
<br>
<br>
--<br>
Pain is temporary. It may last a minute, or an hour, or a day, or a year,<br>
but eventually it will subside and something else will take its place. If<br>
I quit, however, it lasts forever.<br>
<br>
--------<br>
RT Training Sessions (<a href="http://bestpractical.com/services/training.html"
target="_blank">http://bestpractical.com/services/training.html</a>)<br>
* Barcelona, Spain November 28 & 29, 2011<br>
--------<br>
RT Training Sessions (<a href="http://bestpractical.com/services/training.html"
target="_blank">http://bestpractical.com/services/training.html</a>)<br>
* Barcelona, Spain November 28 & 29, 2011<o:p></o:p></p>
</div>
</div>
</body>
</html>