Item2287: 1.0.7 clobbers password file Windows OS, md5 encryption

Converting from TWiki to FosWiki, Windows OS, htpasswd authentication, md5 encryption. I copy my password file from TWiki to FosWiki. Then, when I attempt to login, the login fails and the password file is clobbered with

"Enter your LoginName. (Typically First name and last name, no space, no dots, capitalized, e.g. JohnSmith, unless you chose otherwise). Visit UserRegistration if you do not have one."

Added in for each user right on top of the password, completely messing up the file.

If I start from scratch with no users, it works fine. But I have thousands of users and need to be able to just copy the htpasswd file from TWiki.

-- DavidPontzer

I fixed a similar problem in Item1780

Can this be a similar bug?

I cannot check from where I am now.

-- KennethLavrsen

Sven was not able to duplicate the problem. I have given up and gone back to TWiki for now. Will attemp the conversion again when I have some time.

-- DavidPontzer

David and I are working to track this down - I've asked for more specifics wrt versions and other details.

I've just tested it by xfering an old htpasswd file from a linux twiki to a foswiki 1.0.6 windows installer based install, and that works - so it is probably not going to happen to everyone.

I think that I'll need to actually see a copy of part of the htpasswd file (names and/or emails changed to protect the users) with at least one known password.

-- SvenDowideit - 28 Oct 2009

Any update on this one?

-- KennethLavrsen - 09 Jan 2010

I tried an install again using 1.0.9. With the encryption set to MD5, no joy, the file was corrupted by the registration process. However, when I switched to SH1, all seems to be fine. The instructions for Windows should maybe be expanded to include a reminder to install the "Digest - SH1" perl module.

-- DavidPontzer - 26 Mar 2010

This is reported to be fixed with Apache 2.2.16. I've not tested this.

-- DavidPontzer - 28 Aug 2010