Topic: new 7.3 install; can create users; can't reset password / unlock accounts

[mmellon]

hello all,

I did search to no avail, but apologize if I've missed this covered elsewhere - the only mention I found was from v5.6 in the legacy forums describing the very same problem with no solution/no replies.

with a clean/new 7.3 install (server/gateway mode, protected by a hardware firewall while I test), I have created 2 users.  I have "reset passwords" under users in server-manager.  I have some complex passwords with numbers, punctuation and mix of caps/lowercase letters.  length is about 10 characters.  All I get after setting the password is a blank page -- no error message, no ok message, and no dice accessing the account.

what am i foolishly missing?  I'm so impressed with SME, and am very grateful for all the hard work that's gone into it.  I'm really embarrased that with my first production installation test, I can't even create a user that can log in.

thanks in advance for any help!

--Matt

[mmellon]

ps... the "view log" with "messages" option shows absolutely no updates after getting the blank page when "setting" the user's password.  It appears that the reset-password option doesn't actually try to do anything.  This did not appear anywhere in bugzilla, and few if any other users of SME seem to have this problem.  I'm baffled.....

--matt

[byte]

with a clean/new 7.3 install (server/gateway mode, protected by a hardware firewall while I test), I have created 2 users.  I have "reset passwords" under users in server-manager.  I have some complex passwords with numbers, punctuation and mix of caps/lowercase letters.  length is about 10 characters.  All I get after setting the password is a blank page -- no error message, no ok message, and no dice accessing the account.

Please report bugs and potential bugs in the bug tracker. Thanks. Also tell us an example of a 10 character password your using as I've never seen any one experience the issue your mentioning on a new fresh install of 7.3.

[mmellon]

I have opened:
http://bugs.contribs.org/show_bug.cgi?id=3860

Thanks.  Stumped.

--Matt

[mmellon]

Soooo embarassed.

I started to test different punctuation characters and found that a semicolon
was the offending character.

I'm *so* sorry to have bothered you.  Perhaps a "catch" or "trap" would have
prevented a dope like me from continuing to use a semicolon.

When I tried a too-short and punctuation-free password, I was brought to an
appropriate warnnig screen.  When I tried periods in place of semicolons, tada!

*Many* thanks to the cooler heads responding....

Very sincerely yours,

--Matt

ps... I leave it to you to please mark "resolved" if that is appropriate.

[william_syd]

Why close the bug so quickly?

I would think some sort of warning is required that the password entered does not meet the password requirements.

[raem]

mmellon

FYI
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Password_Strength_Checking

[mmellon]

Thanks again.  In the password FAQ, there is no mention of the semicolon:

"strong:     The password is passed through Cracklib for dictionary type word checking as well as requiring upper case, lower case, number, non alpha and a mimimum length of 7 characters."

I'm guessing it is problematic b/c it is reserved in sql, and must present an issue for sme's database structure, which justdidn't occurto me until someone pointed out that there might be an offending character.

--Matt

[CharlieBrady]

Thanks again.  In the password FAQ, there is no mention of the semicolon:

"strong:     The password is passed through Cracklib for dictionary type word checking as well as requiring upper case, lower case, number, non alpha and a mimimum length of 7 characters."

Semi-colon is non-alpha.

I'm guessing it is problematic b/c ...

To all:

Please don't guess. Just report anything which doesn't "just work" via the bug tracker. Thanks.