topic Re: Alfresco 3.2 and changing the password for the Admin user in Alfresco Archive

Alfresco 3.2 and changing the password for the Admin user

mwildam — Fri, 17 Jul 2009 09:57:19 GMT

When I change the default password of the Admin user through the web client I get the error on Alfresco server startup:Exception from executeScript - redirecting to status template error: 06170004 Login failedorg.alfresco.web.scripts.WebScriptException: 06170004 Login failedComplete error message:11

Re: Alfresco 3.2 and changing the password for the Admin user

_sax — Fri, 17 Jul 2009 13:31:34 GMT

In former versions, I could simply remove admin from the list of admins in custom-authorities.xml, so the imposed 'security threat' was gone. With 3.2, the option passthru.authentication.defaultAdministratorUserNames= doesn't contain anything. So I, too, would be interested in a way to change the admin user's password.
Should this better be raised in JIRA?

Re: Alfresco 3.2 and changing the password for the Admin user

mwildam — Mon, 03 Aug 2009 11:16:45 GMT

So far I was not able to fix this. Nobody has an idea?

Re: Alfresco 3.2 and changing the password for the Admin user

dward — Mon, 03 Aug 2009 11:37:32 GMT

I've logged this in JIRA because it needs improving. In future, don't be shy about logging an issue yourself.

https://issues.alfresco.com/jira/browse/ETHREEOH-2603

Thanks

Dave

Re: Alfresco 3.2 and changing the password for the Admin user

dward — Mon, 03 Aug 2009 11:46:27 GMT

Something that might help diagnose where the problem is. Try putting this line in log4j.properties and the paths of each invoked webscript will be logged.

log4j.logger.org.alfresco.web.scripts.AbstractWebScript=debug‍

Re: Alfresco 3.2 and changing the password for the Admin user

mwildam — Mon, 03 Aug 2009 12:25:27 GMT

I already tried to get more detailed information into the logs without success. Thanks for creating the issue. I simply do feel too much beginner and tend to think that I missed something rather than discovering a bug. Will have more courage in the future. :wink:

Re: Alfresco 3.2 and changing the password for the Admin user

mikeh — Mon, 03 Aug 2009 12:26:37 GMT

Hi Martin

Which webapps do you have deployed?

Thanks,
Mike

Re: Alfresco 3.2 and changing the password for the Admin user

mwildam — Mon, 03 Aug 2009 12:42:46 GMT

I have installed the standard client, share and studio - if you mean that. Unfortunately the tomcat is locked down so I cannot look into the administration if there is something more I am not aware of.

Re: Alfresco 3.2 and changing the password for the Admin user

mwildam — Mon, 03 Aug 2009 12:49:15 GMT

Probably it is Studio because when trying to login to studio using a wrong password I get a very similar error message.

But trying to login to Studio I got another message declared as info:

14:43:09,703  INFO  [web.site.FrameworkHelper] Reset Web Scripts Registry; registered 101 Web Scripts.  Previously, there were 101.
14:43:10,062  INFO  [web.site.FrameworkHelper] Invalidated Object Cache‍‍

Re: Alfresco 3.2 and changing the password for the Admin user

dward — Mon, 03 Aug 2009 12:54:45 GMT

Please just edit $TOMCAT_HOME/webapps/alfresco/WEB-INF/classes/log4.properties as requested and let us know what scripts are being called when you see the error?

Re: Alfresco 3.2 and changing the password for the Admin user

mwildam — Mon, 03 Aug 2009 13:13:25 GMT

Oh, I have seen that this entry was missing in the log4j.properties file. I was assuming it was on of the existing ones and those I already tried putting to debug value. Here is the debug output:

[…]
INFO: Starting Coyote HTTP/1.1 on http-8080
03.08.2009 15:06:57 org.apache.catalina.startup.Catalina start
INFO: Server startup in 283175 ms
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Initialised Web Script Servlet (authenticator='webscripts.authenticator.basic')
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Processing request (GET) http://localhost:8080/alfresco/s/avmstore/listpattern/alfresco/site-webscripts?s=sitestore&m=*.desc.xml&guest=true
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Processing request (POST) http://localhost:8080/alfresco/s/api/login
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] (Runtime=ServletRuntime, Container=Repository) Processing script url (POST) /api/login
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] (Runtime=ServletRuntime, Container=Repository) Processing script url (GET) /avmstore/listpattern/alfresco/site-webscripts
15:06:57,531  DEBUG [web.scripts.DeclarativeRegistry] Web Script index lookup for uri /avmstore/listpattern/alfresco/site-webscripts took 2.728ms
15:06:57,531  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: null
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] Agent: null
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] Invoking Web Script org/alfresco/webframework/avmstore.get (format [undefined], style: argument,default: null)
15:06:57,546  DEBUG [web.scripts.DeclarativeRegistry] Web Script index lookup for uri /api/login took 1.200432ms
15:06:57,546  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: application/json
15:06:57,546  DEBUG [web.scripts.AbstractRuntime] Agent: null
15:06:57,546  DEBUG [web.scripts.AbstractRuntime] Invoking Web Script org/alfresco/repository/login.post (format json, style: any, default: json)
15:06:57,734  DEBUG [web.scripts.DeclarativeWebScript] Caught exception; decorating with appropriate status template : org.alfresco.web.scripts.WebScriptException: 07030004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
15:06:57,750  DEBUG [web.scripts.AbstractRuntime] Web Script org/alfresco/repository/login.post executed in 209.39757ms
15:06:57,750  ERROR [web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 07030004 Login failed org.alfresco.web.scripts.WebScriptException: 07030004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
15:06:57,750  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: application/json
15:06:58,156  DEBUG [web.scripts.AbstractWebScript] Caching template /json.status.ftl for web script org/alfresco/repository/login.post and status 403 (format:json)
15:06:58,156  DEBUG [web.scripts.AbstractRuntime] Force success status header in response: false
15:06:58,156  DEBUG [web.scripts.AbstractRuntime] Sending status 403 (Template:/json.status.ftl)
15:06:58,171  DEBUG [web.scripts.AbstractRuntime] Rendering response: content type=application/json
15:06:58,171  DEBUG [scripts.servlet.WebScriptServletResponse] Cache - set response header Cache-Control: no-cache
15:06:58,171  DEBUG [scripts.servlet.WebScriptServletResponse] Cache - set response header Pragma: no-cache
15:06:58,234  DEBUG [web.scripts.AbstractRuntime] Processed script url (POST) /api/login in 706.2881ms
15:06:58,250 User:guest DEBUG [web.scripts.AbstractRuntime] Web Script org/alfresco/webframework/avmstore.get executed in 717.5051ms
15:06:58,265 User:guest DEBUG [web.scripts.AbstractRuntime] Processed script url (GET) /avmstore/listpattern/alfresco/site-webscripts in 729.8176ms
[…]‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Alfresco 3.2 and changing the password for the Admin user

_sax — Mon, 03 Aug 2009 16:31:04 GMT

To answer my own question:
To disallow the admin user it's name-implied rights, one just needs to remove it from the administrators group in the admin console.
Be sure to add someone else before, or edit in the line passthru.authentication.defaultAdministratorUserNames= in your alfresco-global.properties, if you use passthru to authenticate.

Re: Alfresco 3.2 and changing the password for the Admin user

mwildam — Tue, 04 Aug 2009 06:57:14 GMT

I assume in disabling the admin would even cause the error message as it seems that something here wants to login with admin. Did you test that?

Re: Alfresco 3.2 and changing the password for the Admin user

_sax — Tue, 04 Aug 2009 09:52:23 GMT

Actually, yes, that should provoce the error. But since we only use the classic JSP-Webclient and Webscripts, this is of no immediate concern to us, because the error seems to stem from somewhere else. Actually, as soon, as I now try to logon to share, "your" error appears in the logs.

11:44:46,896 DEBUG [org.alfresco.passthru.auth] Authenticate user=admin via local credentials
11:44:46,897 DEBUG [org.alfresco.passthru.auth] Authenticate org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@5fa6e7d9: Username: admin; Password: [PROTECTED]; Authenticated: false; Details: null; Not granted any authorities via token
11:44:47,233 DEBUG [org.alfresco.passthru.auth] Authenticated token=org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@5fa6e7d9: Username: admin; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_AUTHENTICATED
11:44:56,466 ERROR [org.alfresco.web.site.servlet.DispatcherServlet] java.lang.OutOfMemoryError: PermGen space
11:46:09,395 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] Detected first UserTransaction which is being garbage collected without a commit() or rollback()
11:46:09,395 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] Logging of transaction call stack is now enabled and will affect performance
11:47:31,772 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] UserTransaction being garbage collected without a commit() or rollback(). NOTE: Prior to transaction call stack logging.

Following this is a somehow crashed Alfresco.
After restarting, as soon as I add the admin user back to the Administrators group, a Share logon is flawless.
So, it's exactly the same here.

Re: Alfresco 3.2 and changing the password for the Admin user

mikeh — Tue, 04 Aug 2009 10:26:38 GMT

java.lang.OutOfMemoryError: PermGen space‍
So, it's exactly the same here.

Hmm… no, looks like a different error in your case.

Mike

Re: Alfresco 3.2 and changing the password for the Admin user

_sax — Tue, 04 Aug 2009 13:03:12 GMT

ops: Doubled the permgen space and now Share works without the admin user in "its" group.

Re: Alfresco 3.2 and changing the password for the Admin user

alexandre — Thu, 06 Aug 2009 20:41:21 GMT

Sorry for bothering, I encountered the same problem today.
As far as I recently started playing with Alfresco, the admin user is the only user in the system.
Are there any ways to rollback the admin password or to somehow find another workaround?
Thank you

UPD: The same exception occurs if you manually disable the admin account via the web-interface (although it is not that critical in this case, because the site is available for other user accs)

Re: Alfresco 3.2 and changing the password for the Admin user

_sax — Tue, 11 Aug 2009 14:31:23 GMT

If you logon using your new admin's password, you should be able to change that like every other user can. The User details option in the headline of the webclient is the right place to do that.

Re: Alfresco 3.2 and changing the password for the Admin user

newmember — Wed, 12 Aug 2009 21:49:22 GMT

So I tried to change my admin password and ran into errors.
What is the solution for changing the admin password?

I started looking for where the admin password might be hardcoded, and then thought I might be going down a wrong path.

00:18:13,983 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 07040005 Login failed
org.alfresco.web.scripts.WebScriptException: 07040005 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Alfresco 3.2 and changing the password for the Admin user

newmember — Fri, 14 Aug 2009 06:43:23 GMT

We removed studio from the production server and that removed the admin password error we have in our log files.
We left studio on the dev lab server.

Cheers