Password encryption failed!

[saulortega]

Hello.

Version: 2.8b0.5
SVN Version: 1930
DB Schema Version: 1373
DB Schema Update Date: 2014-04-22 14:26:16
Password Encryption: DISABLED - S1 - C1

I did this:

cpan
install Crypt::Eksblowfish::Bcrypt (Crypt::Eksblowfish::Bcrypt is up to date (0.009))
quit
/usr/share/astguiclient/ADMIN_bcrypt_convert.pl --debugX --test (No errors: BCRYPT PROCESSES COMPLETE: 0 USERS UPDATED)
/usr/share/astguiclient/ADMIN_bcrypt_convert.pl --debugX (BCRYPT PROCESSES COMPLETE: 98 USERS UPDATED)


Now I cant log in to the admin interface!


MariaDB [asterisk]> select pass,pass_hash from vicidial_users where user='6666';
+----------+---------------------------------+
| pass | pass_hash |
+----------+---------------------------------+
| v1cidial | n5OSl41zLLIbzne/kpLfZM.Rp2fLvvO |
+----------+---------------------------------+

/srv/www/htdocs/agc/bp.pl --pass=v1cidial
PHASH: n5OSl41zLLIbzne/kpLfZM.Rp2fLvvO

In web:
Login incorrect, please try again: |6666|v1cidial|BAD|

[saulortega]

Now I ran /usr/share/astguiclient/ADMIN_bcrypt_convert.pl --debugX --update-override --clear-plaintext-pass. No changes.


Vicidial upgrated to revision 2301. No changes.


Server restarted. No changes.

[mflorell]

A lot of bugs were fixed in the last year, I would recommend upgrading to a more recent svn/trunk version.

[saulortega]

Upgrated to revision 2301 today!

MariaDB [asterisk]> select version,db_schema_update_date from system_settings;
+----------+-----------------------+
| version | db_schema_update_date |
+----------+-----------------------+
| 2.12b0.5 | 2015-03-26 12:07:37 |
+----------+-----------------------+

[mflorell]

Check your apache error_log file for errors, also check that the script is executable for the apache user that is set(usually "nobody" or "wwwuser")

[saulortega]

errors_log:

Code: Select all

Can't locate Crypt/Eksblowfish/Bcrypt.pm in @INC (@INC contains: /usr/lib/perl5/site_perl/5.16.2/i586-linux-thread-multi /usr/lib/perl5/site_perl/5.16.2 /usr/lib/perl5/vendor_perl/5.16.2/i586-linux-thread-multi /usr/lib/perl5/vendor_perl/5.16.2 /usr/lib/perl5/5.16.2/i586-linux-thread-multi /usr/lib/perl5/5.16.2 /usr/lib/perl5/site_perl/5.16.2/i586-linux-thread-multi /usr/lib/perl5/site_perl/5.16.2 /usr/lib/perl5/site_perl .) at ../agc/bp.pl line 22.
BEGIN failed--compilation aborted at ../agc/bp.pl line 22.

cpan[1]> install Crypt::Eksblowfish::Bcrypt:

Code: Select all

...
Crypt::Eksblowfish::Bcrypt is up to date (0.009).

the problem persists.


How do I rollback to use plaintext passwords?

[mflorell]

You just have to manually change the values for encryption in the system_settings table and set the 'pass' field in vicidial_users.

What Linux distro are you using?

[saulortega]

Ok, thank you.

It's a openSUSE 12.3, from Vicibox.

[mflorell]

We have activated encrypted passwords on several vicibox systems. It's very strange that it didn't work properly on yours.