Mantis Bug Tracker - Forums

Hi,

I just upgrade from 1.2.8 to 1.2.15.

First I forgot my previous logins, but I found them later.
(I have the users, too in database, but not sure of mail and had never function during test made one year ago..
I had tested connection with Eclipse but I got several problem and quit one year this implementation)

I tried to use default "administrator" and password "root".

This don't succeed. I got "error invalid login". So it is a dead lock.

May be it is because I tried before to connect with my old users (I thought to remember and hit naturally... got error, I had changed and found back later then could finally login)

Nevertheless I don't understand why I could not log with default and If I could not find back a good login : How I could reset (if the reason is that I try and failed to log before using the default login) ?

Now I am going to test :
- the mails (I note the changes in config, with no more details of port used). About I have a question : How to use ssl, is MantisBT using completely default values of php.ini ?
- Connector with Eclipse

Best regards

Trebly

Trebly wrote:How I could reset (if the reason is that I try and failed to log before using the default login) ?[/color]

Update the password of the administrator in mantis_user_table to 63a9f0ea7bb98050796b649e85481845 to reset it to root.

Okay, so that means MantisBT uses plain MD5 to hash password and does not even salt them?

whatever wrote:Okay, so that means MantisBT uses plain MD5 to hash password and does not even salt them?

Right

Wow, I've just noticed it's even worse. So, MantisBT even stores an unsalted MD5-hashed copy of each password if LDAP authentication is enabled.
https://www.mantisbt.org/bugs/view.php?id=12957