So our installation of osTicket started getting repeat login attempts that are failing, so I wanted to login and review and maybe put into maintenance mode or prepare to shut it down since it isn't being used anymore, so thats where my issues begin.....Just to save some time, I am aware of this article (http://www.tmib.net/content/recover-reset-admin-account-passowrd-osticket) and have tried it. The change I make succeeds but when attempting to login I am still getting the error 'access denied'.I am also aware of this article (http://forum.osticket.com/d/discussion//recover-lost-admin-password) and about 15 others and have tested/tried everything I could find.Any thoughts/ideas outside of re-linking the same articles I have above (and the 100+ others with the same replies) would be helpful. Worst case scenario is I nuke it from orbit. Thanks all.

You would want to make sure that you are resetting the correct account. (You can look at the db tables to make sure).Are you using an authentication plugin? (such as the LDAP/AD one)

Sorry, forgot to mention that part. I have made the change using phpMyAdmin and typing in the command directly as well as editing the password hash directly in ost_staff (as seen in the screenshot attached). Regardless of which way I do it it returns successful but when I attempt to actually login I get the error 'Access Denied'.

screenshot.186.png

Another screenshot showing the command from your article. I have tried with staff_id, email, and username.

screenshot.187.png

Are you by any chanse using internet explorer?

We’ve seen issues for our users when they let internet explorer autoconplete their login details which then needs to be deleted before they can login again.

No, I do not use any automatic login nor am I using IE. I am using Chrome and the login information isn't saved. I have tested in IE, Chrome, and Firefox for both logging into the site as well as making the change to SQL.

It does not appear that you answered my question.Are you using an authentication plugin? (such as the LDAP/AD one)

No, this is a stand alone install with no outside connections to any type if authentication services outside whats built in.

So to add to this issue, I finally got the 'Forgot Password' option to appear and when I try to verify both my username or email it says it cannot verify them. All the while I am looking at the ost_staff table and see my username and email address listed.Am I able to add a new user via SQL and attempt to login as that new user?

User?  You were talking about Agents (aka Staff).  you were trying to reset an Agent/Staff login, not a user login.Are you sure that you are going to yoursite.tld/scp to login as an agent?

Well shite..... shows how long it has been since we have used it I forgot about the /scp for staff logon. So apparently the repeated attempts to login on the user page looks like some probing but they didn't make any headway and stopped trying. At least now I know what I was missing, thanks.

Write a Reply...