[rt-users] ModifySelf Privilege Prevents Login

Jesse Vincent jesse at bestpractical.com
Fri Sep 25 19:43:49 EDT 2009 



> 
> my $u = RT::User->new($RT::SystemUser);
> $u->Load("root");

# add this line:
warn $u->id;

# replace this line
> $u->setPassword("secret");

with: 

my ($val,$msg) = $u->setPassword("secret");

warn $val, $msg;
> 
> 
> 2) Executing it:
> ============
> $sudo ./replace_password.pl
> 
> Change of config option 'MaxInlineBody' at /ngs/app/rt/oppresso/ 
> rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 13 has been  
> ignored. It's may be ok, but we want you to be aware. This option  
> earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/etc/ 
> RT_SiteConfig.pm line 152. at /ngs/app/rt/oppresso/rt-3.8.4/lib/RT/ 
> Config.pm line 738.
> Change of config option 'Active_MakeClicky' at /ngs/app/rt/oppresso/ 
> rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 263 has been  
> ignored. It's may be ok, but we want you to be aware. This option  
> earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/etc/ 
> RT_SiteConfig.pm line 186. at /ngs/app/rt/oppresso/rt-3.8.4/lib/RT/ 
> Config.pm line 738.
> 
> 
> 3) Assumptions:
> =============
> 
> I am assuming the above lines (per 
> http://wiki.bestpractical.com/view/RecoverRootPassword) are sufficient.
> 
> 
> 4)Results:
> ========
> I did not get any other warnings (or error messages), which was good.  
> However, I still can not log back in (using root) from the UI. The  
> above warnings I received were trivial, so I am ignoring them.
> 
> 
> Help please.
> 
> 
> -Behzad
> 
> On Sep 25, 2009, at 1:58 PM, Behzad Mahini wrote:
> 
> >Since I had installed RT-FM & RT-IR, ...at the command line using  
> >the Perl command I decided to include the paths to RT-FM & RT-IR  
> >libraries (Plugins), and the error message changed (from what I had  
> >sent earlier) to the following:
> >
> >
> >$sudo perl -I/usr/local/src/oppresso/rt-3.8.4/lib -I/ngs/app/rt/ 
> >oppresso/rt-3.8.4/lib -I/ngs/app/rt/oppresso/rt-3.8.4/local/plugins/ 
> >RT-FM/lib  -I/ngs/app/rt/oppresso/rt-3.8.4/local/plugins/RT-IR/lib  - 
> >e 'RT::LoadConfig(); RT::Init(); my $u = RT::User- 
> >>new($RT::SystemUser); $u->Load("root"); $u- 
> >>setPassword("<my_secret_pass>")'
> >
> >Undefined subroutine &RT::LoadConfig called at -e line 1.
> >
> >
> >So, without Including the path to Plugins, it complains about "RT/ 
> >FM.pm" which was missing in the Included paths I had the first  
> >round, and I addressed it above, but it now complains about  
> >"RT::LoadConfig()", which it should be able to grab from:
> >
> >	/my_above_path_2_RT/lib/RT.pm  ........(<<sub LoadConfig {require  
> >RT::Config .........}   >>
> >	& /my_above_path_2_RT/RT/Config.pm
> >
> >
> >So, why is complaining?
> >
> >Thanks,
> >Behzad
> >On Sep 25, 2009, at 10:47 AM, Behzad Mahini wrote:
> >
> >>..I also looked at the real mysql log file (i.e., "  
> >><serverName>.err"), and that did not reveal any worthy information,  
> >>besides its timestamp was also as of Aug 30th (again way before my  
> >>password problem of last night).
> >>
> >>-Behzad
> >>On Sep 25, 2009, at 10:25 AM, Behzad Mahini wrote:
> >>
> >>>
> >>>1) Systemlog & MySQL log points:
> >>>==========================
> >>>system.log file:
> >>>
> >>>RT[350]: FAILED LOGIN for root from xx.xx.xx.xx (/some_dir_xx// 
> >>>share/html/autohandler:268)
> >>>..<<which is saying the same thing that my Apache error_log  
> >>>indicated>>
> >>>
> >>>
> >>>Mysql log files:
> >>>The only log files that I have for MySQL are binary log files and  
> >>>they are:
> >>>
> >>>mysql-bin.xxx0
> >>>mysql-bin.xxx1
> >>>...
> >>>
> >>>and
> >>>ib_logfile0
> >>>ib_logfile1
> >>>
> >>>..and timestamp associated to these ar as of Aug 30, 2009 (which  
> >>>way before I started having my password problem of yesterday!)
> >>>
> >>>2) I rebooted my box, in the hopes of it clearing up some item  
> >>>that I am not aware of -- that did not do any good
> >>>===============================================================
> >>>
> >>>3) Using the "RecoverRootPassword" Wiki page, I tried to change my  
> >>>password at the command/Perl level:
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>= 
> >>>====================================================================
> >>>
> >>>perl -I/opt/rt3/local/lib -I/opt/rt3/lib \
> >>>    -MRT -MRT::User \
> >>>    -e'RT::LoadConfig();RT::Init(); my $u = RT::User- 
> >>>>new($RT::SystemUser); $u->Load("root"); $u->SetPassword("secret")'
> >>>that did not help either, and I got the following complaint:
> >>>
> >>>Change of config option 'MaxInlineBody' at /ngs/app/rt/oppresso/ 
> >>>rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 13 has been  
> >>>ignored. It's may be ok, but we want you to be aware. This option  
> >>>earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/etc/ 
> >>>RT_SiteConfig.pm line 152. at /usr/local/src/oppresso/rt-3.8.4/lib/ 
> >>>RT/Config.pm line 738.
> >>>
> >>>Change of config option 'Active_MakeClicky' at /ngs/app/rt/ 
> >>>oppresso/rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 263  
> >>>has been ignored. It's may be ok, but we want you to be aware.  
> >>>This option earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/ 
> >>>etc/RT_SiteConfig.pm line 186. at /usr/local/src/oppresso/rt-3.8.4/ 
> >>>lib/RT/Config.pm line 738.
> >>>
> >>>[Fri Sep 25 16:59:45 2009] [crit]: Can't locate RT/FM.pm in @INC  
> >>>(@INC contains: /usr/local/src/oppresso/rt-3.8.4/lib /ngs/app/rt/ 
> >>>oppresso/rt-3.8.4/lib /Library/Perl/Updates/5.8.8/darwin-thread- 
> >>>multi-2level /Library/Perl/Updates/5.8.8 /System/Library/Perl/ 
> >>>5.8.8/darwin-thread-multi-2level /System/Library/Perl/5.8.8 / 
> >>>Library/Perl/5.8.8/darwin-thread-multi-2level /Library/Perl/5.8.8 / 
> >>>Library/Perl /Network/Library/Perl/5.8.8/darwin-thread- 
> >>>multi-2level /Network/Library/Perl/5.8.8 /Network/Library/Perl / 
> >>>System/Library/Perl/Extras/5.8.8/darwin-thread-multi-2level / 
> >>>System/Library/Perl/Extras/5.8.8 /Library/Perl/5.8.6 /Library/Perl/ 
> >>>5.8.1 .) at /usr/local/src/oppresso/rt-3.8.4/lib/RT.pm line 627. (/ 
> >>>usr/local/src/oppresso/rt-3.8.4/lib/RT.pm:377)
> >>>
> >>>Can't locate RT/FM.pm in @INC (@INC contains: /usr/local/src/ 
> >>>oppresso/rt-3.8.4/lib /ngs/app/rt/oppresso/rt-3.8.4/lib /Library/ 
> >>>Perl/Updates/5.8.8/darwin-thread-multi-2level /Library/Perl/ 
> >>>Updates/5.8.8 /System/Library/Perl/5.8.8/darwin-thread- 
> >>>multi-2level /System/Library/Perl/5.8.8 /Library/Perl/5.8.8/darwin- 
> >>>thread-multi-2level /Library/Perl/5.8.8 /Library/Perl /Network/ 
> >>>Library/Perl/5.8.8/darwin-thread-multi-2level /Network/Library/ 
> >>>Perl/5.8.8 /Network/Library/Perl /System/Library/Perl/Extras/5.8.8/ 
> >>>darwin-thread-multi-2level /System/Library/Perl/Extras/5.8.8 / 
> >>>Library/Perl/5.8.6 /Library/Perl/5.8.1 .) at /usr/local/src/ 
> >>>oppresso/rt-3.8.4/lib/RT.pm line 627.
> >>>
> >>>
> >>>-Behzad
> >>>On Sep 25, 2009, at 9:46 AM, Jesse Vincent wrote:
> >_______________________________________________
> >http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> >
> >Community help: http://wiki.bestpractical.com
> >Commercial support: sales at bestpractical.com
> >
> >
> >Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> >Buy a copy at http://rtbook.bestpractical.com
> 

> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> 
> Community help: http://wiki.bestpractical.com
> Commercial support: sales at bestpractical.com
> 
> 
> Discover RT's hidden secrets with RT Essentials from O'Reilly Media. 
> Buy a copy at http://rtbook.bestpractical.com

--

More information about the rt-users mailing list