[rt-users] ModifySelf Privilege Prevents Login

Behzad Mahini mahini at apple.com
Fri Sep 25 21:28:09 EDT 2009 

Here is what I received (and 12 matches with the id for my 'root')

[Sat Sep 26 01:25:15 2009] [warning]: 12 at ./replace_password.pl line  
15. (./replace_password.pl:15)
[Sat Sep 26 01:25:15 2009] [warning]: 0That is already the current  
value at ./replace_password.pl line 20. (./replace_password.pl:20)


-Behzad
On Sep 25, 2009, at 4:43 PM, Jesse Vincent wrote:

>
>
>
>>
>> my $u = RT::User->new($RT::SystemUser);
>> $u->Load("root");
>
> # add this line:
> warn $u->id;
>
> # replace this line
>> $u->setPassword("secret");
>
> with:
>
> my ($val,$msg) = $u->setPassword("secret");
>
> warn $val, $msg;
>>
>>
>> 2) Executing it:
>> ============
>> $sudo ./replace_password.pl
>>
>> Change of config option 'MaxInlineBody' at /ngs/app/rt/oppresso/
>> rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 13 has been
>> ignored. It's may be ok, but we want you to be aware. This option
>> earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/etc/
>> RT_SiteConfig.pm line 152. at /ngs/app/rt/oppresso/rt-3.8.4/lib/RT/
>> Config.pm line 738.
>> Change of config option 'Active_MakeClicky' at /ngs/app/rt/oppresso/
>> rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 263 has been
>> ignored. It's may be ok, but we want you to be aware. This option
>> earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/etc/
>> RT_SiteConfig.pm line 186. at /ngs/app/rt/oppresso/rt-3.8.4/lib/RT/
>> Config.pm line 738.
>>
>>
>> 3) Assumptions:
>> =============
>>
>> I am assuming the above lines (per
>> http://wiki.bestpractical.com/view/RecoverRootPassword) are  
>> sufficient.
>>
>>
>> 4)Results:
>> ========
>> I did not get any other warnings (or error messages), which was good.
>> However, I still can not log back in (using root) from the UI. The
>> above warnings I received were trivial, so I am ignoring them.
>>
>>
>> Help please.
>>
>>
>> -Behzad
>>
>> On Sep 25, 2009, at 1:58 PM, Behzad Mahini wrote:
>>
>>> Since I had installed RT-FM & RT-IR, ...at the command line using
>>> the Perl command I decided to include the paths to RT-FM & RT-IR
>>> libraries (Plugins), and the error message changed (from what I had
>>> sent earlier) to the following:
>>>
>>>
>>> $sudo perl -I/usr/local/src/oppresso/rt-3.8.4/lib -I/ngs/app/rt/
>>> oppresso/rt-3.8.4/lib -I/ngs/app/rt/oppresso/rt-3.8.4/local/plugins/
>>> RT-FM/lib  -I/ngs/app/rt/oppresso/rt-3.8.4/local/plugins/RT-IR/ 
>>> lib  -
>>> e 'RT::LoadConfig(); RT::Init(); my $u = RT::User-
>>>> new($RT::SystemUser); $u->Load("root"); $u-
>>>> setPassword("<my_secret_pass>")'
>>>
>>> Undefined subroutine &RT::LoadConfig called at -e line 1.
>>>
>>>
>>> So, without Including the path to Plugins, it complains about "RT/
>>> FM.pm" which was missing in the Included paths I had the first
>>> round, and I addressed it above, but it now complains about
>>> "RT::LoadConfig()", which it should be able to grab from:
>>>
>>> 	/my_above_path_2_RT/lib/RT.pm  ........(<<sub LoadConfig {require
>>> RT::Config .........}   >>
>>> 	& /my_above_path_2_RT/RT/Config.pm
>>>
>>>
>>> So, why is complaining?
>>>
>>> Thanks,
>>> Behzad
>>> On Sep 25, 2009, at 10:47 AM, Behzad Mahini wrote:
>>>
>>>> ..I also looked at the real mysql log file (i.e., "
>>>> <serverName>.err"), and that did not reveal any worthy information,
>>>> besides its timestamp was also as of Aug 30th (again way before my
>>>> password problem of last night).
>>>>
>>>> -Behzad
>>>> On Sep 25, 2009, at 10:25 AM, Behzad Mahini wrote:
>>>>
>>>>>
>>>>> 1) Systemlog & MySQL log points:
>>>>> ==========================
>>>>> system.log file:
>>>>>
>>>>> RT[350]: FAILED LOGIN for root from xx.xx.xx.xx (/some_dir_xx//
>>>>> share/html/autohandler:268)
>>>>> ..<<which is saying the same thing that my Apache error_log
>>>>> indicated>>
>>>>>
>>>>>
>>>>> Mysql log files:
>>>>> The only log files that I have for MySQL are binary log files and
>>>>> they are:
>>>>>
>>>>> mysql-bin.xxx0
>>>>> mysql-bin.xxx1
>>>>> ...
>>>>>
>>>>> and
>>>>> ib_logfile0
>>>>> ib_logfile1
>>>>>
>>>>> ..and timestamp associated to these ar as of Aug 30, 2009 (which
>>>>> way before I started having my password problem of yesterday!)
>>>>>
>>>>> 2) I rebooted my box, in the hopes of it clearing up some item
>>>>> that I am not aware of -- that did not do any good
>>>>> ===============================================================
>>>>>
>>>>> 3) Using the "RecoverRootPassword" Wiki page, I tried to change my
>>>>> password at the command/Perl level:
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> =
>>>>> = 
>>>>> = 
>>>>> ==================================================================
>>>>>
>>>>> perl -I/opt/rt3/local/lib -I/opt/rt3/lib \
>>>>>   -MRT -MRT::User \
>>>>>   -e'RT::LoadConfig();RT::Init(); my $u = RT::User-
>>>>>> new($RT::SystemUser); $u->Load("root"); $u- 
>>>>>> >SetPassword("secret")'
>>>>> that did not help either, and I got the following complaint:
>>>>>
>>>>> Change of config option 'MaxInlineBody' at /ngs/app/rt/oppresso/
>>>>> rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 13 has been
>>>>> ignored. It's may be ok, but we want you to be aware. This option
>>>>> earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/etc/
>>>>> RT_SiteConfig.pm line 152. at /usr/local/src/oppresso/rt-3.8.4/ 
>>>>> lib/
>>>>> RT/Config.pm line 738.
>>>>>
>>>>> Change of config option 'Active_MakeClicky' at /ngs/app/rt/
>>>>> oppresso/rt-3.8.4/local/plugins/RT-IR/etc/RTIR_Config.pm line 263
>>>>> has been ignored. It's may be ok, but we want you to be aware.
>>>>> This option earlier has been set in /ngs/app/rt/oppresso/rt-3.8.4/
>>>>> etc/RT_SiteConfig.pm line 186. at /usr/local/src/oppresso/ 
>>>>> rt-3.8.4/
>>>>> lib/RT/Config.pm line 738.
>>>>>
>>>>> [Fri Sep 25 16:59:45 2009] [crit]: Can't locate RT/FM.pm in @INC
>>>>> (@INC contains: /usr/local/src/oppresso/rt-3.8.4/lib /ngs/app/rt/
>>>>> oppresso/rt-3.8.4/lib /Library/Perl/Updates/5.8.8/darwin-thread-
>>>>> multi-2level /Library/Perl/Updates/5.8.8 /System/Library/Perl/
>>>>> 5.8.8/darwin-thread-multi-2level /System/Library/Perl/5.8.8 /
>>>>> Library/Perl/5.8.8/darwin-thread-multi-2level /Library/Perl/ 
>>>>> 5.8.8 /
>>>>> Library/Perl /Network/Library/Perl/5.8.8/darwin-thread-
>>>>> multi-2level /Network/Library/Perl/5.8.8 /Network/Library/Perl /
>>>>> System/Library/Perl/Extras/5.8.8/darwin-thread-multi-2level /
>>>>> System/Library/Perl/Extras/5.8.8 /Library/Perl/5.8.6 /Library/ 
>>>>> Perl/
>>>>> 5.8.1 .) at /usr/local/src/oppresso/rt-3.8.4/lib/RT.pm line 627.  
>>>>> (/
>>>>> usr/local/src/oppresso/rt-3.8.4/lib/RT.pm:377)
>>>>>
>>>>> Can't locate RT/FM.pm in @INC (@INC contains: /usr/local/src/
>>>>> oppresso/rt-3.8.4/lib /ngs/app/rt/oppresso/rt-3.8.4/lib /Library/
>>>>> Perl/Updates/5.8.8/darwin-thread-multi-2level /Library/Perl/
>>>>> Updates/5.8.8 /System/Library/Perl/5.8.8/darwin-thread-
>>>>> multi-2level /System/Library/Perl/5.8.8 /Library/Perl/5.8.8/ 
>>>>> darwin-
>>>>> thread-multi-2level /Library/Perl/5.8.8 /Library/Perl /Network/
>>>>> Library/Perl/5.8.8/darwin-thread-multi-2level /Network/Library/
>>>>> Perl/5.8.8 /Network/Library/Perl /System/Library/Perl/Extras/ 
>>>>> 5.8.8/
>>>>> darwin-thread-multi-2level /System/Library/Perl/Extras/5.8.8 /
>>>>> Library/Perl/5.8.6 /Library/Perl/5.8.1 .) at /usr/local/src/
>>>>> oppresso/rt-3.8.4/lib/RT.pm line 627.
>>>>>
>>>>>
>>>>> -Behzad
>>>>> On Sep 25, 2009, at 9:46 AM, Jesse Vincent wrote:
>>> _______________________________________________
>>> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>>>
>>> Community help: http://wiki.bestpractical.com
>>> Commercial support: sales at bestpractical.com
>>>
>>>
>>> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
>>> Buy a copy at http://rtbook.bestpractical.com
>>
>
>> _______________________________________________
>> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>>
>> Community help: http://wiki.bestpractical.com
>> Commercial support: sales at bestpractical.com
>>
>>
>> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
>> Buy a copy at http://rtbook.bestpractical.com
>
> --

More information about the rt-users mailing list