Can't login with local user "admin"

enggal

Hi, I have cloned from the existing osTicket application to another instance. After success importing the osTicket DB into my new environment I'm having a problem because I can't login with local admin and encounter "Access denied" error. I also update the user in the ost_staff table, but still facing an issue. Does anyone help me to fix this issue?

UPDATE ost_staff SET passwd = 'myspassword' WHERE username = 'admin';
FLUSH PRIVILEGES;

KevinTheJedi

@enggal

You can't use a plain password like that. Please use a bcrypt generator online, generate a bcrypt password (with preferably 8 rounds of entropy), and update the staff password to the hash. Then you should be able to login. If not then your issue is something else.

Cheers.

enggal

Hi KevinTheJedi
Thanks and works now

ntozier

Or try something like
update ost_staff set passwd = md5('yournewpassword') where username='admin';

Also make sure that you are logging into /scp not the user login prompt

hello2022

hi guys,
I am having the same issue as enggal had and I have tried the suggested solution which does not work for me.

here is some info from "select * from ost_staff\G;

*************************** 1. row ***************************
staff_id: 1
dept_id: 1
role_id: 1
username: ostadmin
firstname: john
lastname: smith
passwd: dd303252c449375e9dff17ad5d022c85

Am I missing anything from the below command?

\MySQL [johnticket]> update ost_staff set passwd =md5('ostpassword') where username='ostadmin';
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0

It looks like the command completes fine but when I try to log in using userid: ostadmin password: ostpassword it still doen't work.

Any suggestions?

Thank you.

KevinTheJedi

hello2022

I would recommend using Bcrypt with 8 Round entropy instead of MD5. There are Bcrypt generators all around the web.

Cheers.

hello2022

hi KevinTheJedi,
If using the Bcrypt generators, how would this command change? update ost_staff set passwd =md5('ostpassword') where username='ostadmin';

thank you

KevinTheJedi

hello2022

UPDATE `ost_staff` SET `passwd` = 'bcrypt_string' WHERE `username` = 'staff_username';

hello2022

KevinTheJedi
Hi so I tried your commands:

MySQL [johnticket]> UPDATE ost_staff SET passwd = '$2a$12$PD.JrZ0JFI4uPubX8fUEvuwee1wZ5Fz08ayDSH9AnnByuZWxLmwAO' WHERE username = 'ostadmin';
Query OK, 0 rows affected (0.00 sec)
Rows matched: 0 Changed: 0 Warnings: 0

all seems ok but when I tried to login, I am still gettting the "authentication required" screen.

I found https://bcrypt-generator[dot]com/ and executed the following:

Did I miss anything?

KevinTheJedi

hello2022

Use 8 Round entropy.

Cheers.

hello2022

KevinTheJedi

MySQL [johnticket]> UPDATE ost_staff SET passwd = '$2a$08$96famizO4ShC.2w5lgXxzOJqddilhkoRnO099e/bTmDAA9ynAnsP.' WHERE username = 'ostadmin';
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0

Am still seeing "Authentication Required"

Thank you

KevinTheJedi

hello2022

What is the agents backend set to?

Cheers.

hello2022

KevinTheJedi
hi, if you are referring to the DB, it's mysql in aws RDS.

What is quite odd is that after several days, the site just goes offline and I am never able to log back in so I have re-installed it several times. This is the first time that I am actually trying to solve this odd issue.

KevinTheJedi

hello2022

Sounds like you have other issues but what I meant is the value of the bk column for the agent.

Cheers.

hello2022

KevinTheJedi
HI, Could you be more detailed about the bk column please. I have no idea what that is or where to find it. Sorry, very newbie in osticket AND sql :-)

KevinTheJedi

hello2022

It's in the same table, ost_staff.

Cheers.

hello2022

KevinTheJedi

Are you referring to this?

MySQL [johnticket]> select * from ost_staff\G;
*************************** 1. row ***************************
staff_id: 1
dept_id: 1
role_id: 1
username: ostadmin
firstname: john
lastname: smith
passwd: $2a$08$96famizO4ShC.2w5lgXxzOJqddilhkoRnO099e/bTmDAA9ynAnsP.
backend: NULL

KevinTheJedi

hello2022

Yes, sorry. Then I have no idea why this person can't login. If you set the password and their backend is NULL then you should have no issues. Try clearing the cache/cookies/sessions or use an Incognito/Private window and retest.

Cheers.

hello2022

KevinTheJedi

I see ok, thank you.