admin password reset

phuiberts

How do I recover or reset the admin password?

I have inherited a system and I need to do maintenance.

phuiberts

I tried possible words, but get the following error: Excessive failed login attempts

Is the system locked, how can I reset this?

ryanp

How do I recover or reset the admin password?

Tricky, I run 2 full installations of osTicket, development and production, I also have multiple admins, the reason being is I locked myself out at one point (thanks to forgetting to note down the password given by the password generator), I was able to go into the other distribution and copy the MD5 hash to the user with the forgotten password.

Technically speaking, the only way to recover it is if mcrypt is not enabled on the server as the passwords are protected with an MD5 hash, no mcrypt no MD5 hash. If no mcrypt then you will be able to read the data directly in mySQL.

You can try generating a new password with another application that uses MD5 hash and pasting the new string into mySQL... it is a possibility but make sure you copy your original MD5 hash before doing this in-case there is a problem.

Is the system locked, how can I reset this?

My udnerstanding is the system will release the locks periodically, the alternative is to go into mySQL, under the staff table find the user that is locked and change it from memory to 0.

ntozier

Sadly he cross posted and I answered in the setup part of the forums.

Here is my post from over there to make sure you get it.

All users (including the admin) are stored in the database in the ost_staff table. Presuming that you have access to the database with another username/password that has (or can have) privs you should be able to run a MySQL query to change whats in there. It is stored as an MD5Hash iirc. Here is the query:

UPDATE `ost_staff` SET `passwd` = MD5( 'newpassword' ) WHERE `username` = 'username';

Obviously change newpassword to what you want the password to be, and username to the admin account name. This same query can be used for any user with those changes.

How to run a MySQL query varies depending on what OS your running under of course. :) I personally use a product called Navicat Lite at home. At work I have MySQL WorkBench installed. If you do not have a priv account in MySQL (like root) there are several good articles on the net about how to recover that password.