Can't Login As Admin

ntj 2020-08-31 03:32:38 UTC #1

Keywords: Mediawiki - Windows - Technical issue - Credentials
Description:
When I ran the setup, the installer only asked me for the 'application password' which I provided. However, it did not give me the option to set up any user or admin. When I tried to use the password to log into 'Mediawiki Default', 'admin', 'root', or 'user' it wouldn't let me.
For some reason, bitnami doesn't install a user_auth file so I can't actually edit the passwords manually by creating an md5 hash.

gongomgra 2020-08-31 07:59:44 UTC #2

Hi @ntj,

Thanks for using Bitnami. I couldn't reproduce your issue. I installed the latest MediaWiki version available in our website and I only set the password in the next screen of the installation process (note the username by default is user)

After that, I didn't have any issue login into the admin panel of the application. Did you get any error message running the installer?

We have a Support Tool that will gather relevant information for us to analyze your configuration and logs. Could you please execute it on the machine where the stack is running by following the steps described in the guide below?

How to Run the Bitnami Support Tool when using a native installer

Please note that you need to paste the code ID that is shown at the end.

ntj 2020-08-31 08:35:00 UTC #3

Hi there. I received that screen the first time I installed Media Wiki, but I still encountered the problem where it wouldn't accept my password
Here is my support ID: 5f9b2a2e-0687-7135-4863-b5bf07be952d

ntj 2020-08-31 22:55:17 UTC #4

OK, so I reinstalled XAMPP and MediaWiki and I was able to get the screen you mentioned. This time I definitely created a user with a simple password and I tried logging in and it still won't accept my password!

ntj 2020-08-31 23:40:00 UTC #5

I figured it out. It turns out that I used a password that normally MediaWiki forbids. For some reason the setup will let you use invalid passwords (i.e. ones that do not meet the strength requirements) so it was just considering it as incorrect. I tried a much stronger password and it worked fine! I didn't need a strong password because it's on a local machine and has no sensitive information so I didn't think it would matter but apparently it did. Please pass the message along to your developers that they should enforce proper password verification and not just the 10 character limit.

gongomgra 2020-09-01 08:52:38 UTC #6

Hi @ntj,

Thanks for the investigation and for letting us know. Would you mind sharing with us what are those restrictions so we can open a new task to implement them?

Regards,
Gonzalo

ntj 2020-09-01 20:21:31 UTC #7

For all accounts:

New password minimum length of 8 characters for all new accounts;
Must not be in the 100,000 most popular passwords (as defined by the Password Blacklist Library); and
Must not be the same as the username.

If you set up the user with a password that does not meet these requirements, Bitnami's installer doesn't seem to stop you from progressing thus creating an inaccessible account.

gongomgra 2020-09-02 14:15:56 UTC #8

Hi @ntj,

Thanks, would you mind sharing us the official link to that documentation explaining the password requirements for MediaWiki in case it exists? It would be of help for us

gongomgra 2020-09-03 09:11:15 UTC #9

Hi @ntj,

I reproduced the issue you mentioned here using password123 from the list you linked for testing. I will notify the Engineering team about this. However, we can't provide you with an ETA on when this will be fixed.

system 2020-09-17 09:11:27 UTC #10

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!