Agent Sign-in Stuck Verifying Forever

sunshine-struggle

I am testing an upgrade from v1.16.3 to v1.17-rc3 so I can try configuring OAuth2.0 for email and ran into an interesting error.

Upon completing all the steps to perform the upgrade, I signed out of the admin panel. Upon attempting to sign in again, the Sign-In page was just stuck saying "Validating"

I had to modify my agent account from the ost_staff table to reset the password before I was able to sign-in again and I was immediately prompted to change my password. After doing so, I tried logging out and signing back in again. And it's stuck validating again.
Disabling the Password Policy Plugin fixes the issue.
Reenabling this plugin and trying to set different passwords after I have reset it to log in, some passwords it is stuck verifying and others give me an Access Denied error.
I tried lowering the complexity requirements and now I'm getting nonsense errors (see image) that will not allow me to set a new password

I have also tested a user account and it had no issues logging in.

I'm not entirely sure what is happening here, what else to test, or if this is even worth a forum post as this is still an RC.

stery

Did you check your PHP logs? This might help you to understand what is happening

sunshine-struggle

I'm not finding any errors in my PHP logs. I've also double-checked by creating a temporary page for phpinfo() to make sure I was looking in the right place. And still found nothing logged.

robbyb20

If youre still looking, disable password complexity in the database. then log in and youu should be set.

sunshine-struggle

Does it start working as normal after re-enabling the plugin? Or is the solution right now to just not use the plugin?

I've also run into an issue where I can't get past the change password screen anymore.
I update my agent account on the database so passwd is the hash for "password" and change_passwd=0. But immediately after signing-in, I get the change password window, and checking the values for those earlier fields in the database, change_passwd is set to 1 and passwd to some other hash value, which is different each time I repeat the steps.

ntozier

I read on the forums of someone else having a similar issue, and that disabling the password complexity plugin fixed them. I think that there is a incompatibility with that plugin.

Out of curiosity, do you actually need the password complexity plugin since you are using an identity provider, and would manage password complexity there?

sunshine-struggle

I do need to use the password complexity plugin as I am not using an identity provider, all accounts are local to osTicket..