Mordur Ingólfsson wrote: > Platonides wrote: >> Mordur Ingólfsson wrote: >> >>> Dear list, >>> >>> Hi, I just moved a Mediawiki from one Debian server to another. In the >>> database that I imported from the previous server the user's password >>> hashes looked like this: >>> >>> :B:728d4f83:c0890522e6b9dfc8e3c55a45e5c05156 >>> >>> but now they look like this: >>> >>> a4c520344c6ce5b3e2dfea3d43301a99. >>> >>> And no authentication works. >>> >>> >>> I have found out that this has got to do with salting the hash, but I >>> cannot seem to make Mediawiki use the salted kind of hashes, so my users >>> are having to change their passwords, which is a nuisance. >>> >>> Thanks, >>> >>> Mordur Ingolfsson >>> >> Is the new server at a mediawiki version greater or equal to the old one? >> The first hash is on a newer format, and is always salted. The second >> one may be salted or not depending on $wgPasswordSalt >> >> > The version of mediawiki on the server onto which I moved the wiki is > 1.12, I´m not sure which version on the machine the mediawiki came FROM. > Is there a way to let MW 1.12 recognize and use the first kind of > password hash?
The :B: style of password was introduced in MediaWiki 1.13. You should change your copy of MediaWiki to 1.13, rather than attempt to downgrade the database to 1.12. The Debian packages of MediaWiki are pretty much useless. They don't even keep up with our security releases, it took them a month to backport 1.13.3/1.12.2. And it's not particularly easy to use, it doesn't install or upgrade the database for you. Just install it from the source tarball available on mediawiki.org, it's virtually the same procedure. I have plans to improve the Debian package. If/when I think it's up to an appropriate standard, I'll advertise it on our download page. -- Tim Starling _______________________________________________ MediaWiki-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
