Alfresco 3.2 and changing the password for the Admin user

[mwildam]

When I change the default password of the Admin user through the web client I get the error on Alfresco server startup:
Exception from executeScript - redirecting to status template error: 06170004 Login failed
org.alfresco.web.scripts.WebScriptException: 06170004 Login failed

Complete error message:

11:11:24,781  ERROR [web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 06170004 Login failed
org.alfresco.web.scripts.WebScriptException: 06170004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

As soon as I change the password back to the default "admin" the error disappears. I tried to find out where this password is hardcoded but I can't find and the error message unfortunately does not tell me which script is failing here. Anybody knows where I have to change the password in addition to changing it through the web client?

[mwildam]

Oh, I have seen that this entry was missing in the log4j.properties file. I was assuming it was on of the existing ones and those I already tried putting to debug value. Here is the debug output:

[…]
INFO: Starting Coyote HTTP/1.1 on http-8080
03.08.2009 15:06:57 org.apache.catalina.startup.Catalina start
INFO: Server startup in 283175 ms
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Initialised Web Script Servlet (authenticator='webscripts.authenticator.basic')
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Processing request (GET) http://localhost:8080/alfresco/s/avmstore/listpattern/alfresco/site-webscripts?s=sitestore&m=*.desc....
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Processing request (POST) http://localhost:8080/alfresco/s/api/login
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] (Runtime=ServletRuntime, Container=Repository) Processing script url (POST) /api/login
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] (Runtime=ServletRuntime, Container=Repository) Processing script url (GET) /avmstore/listpattern/alfresco/site-webscripts
15:06:57,531  DEBUG [web.scripts.DeclarativeRegistry] Web Script index lookup for uri /avmstore/listpattern/alfresco/site-webscripts took 2.728ms
15:06:57,531  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: null
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] Agent: null
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] Invoking Web Script org/alfresco/webframework/avmstore.get (format [undefined], style: argument,default: null)
15:06:57,546  DEBUG [web.scripts.DeclarativeRegistry] Web Script index lookup for uri /api/login took 1.200432ms
15:06:57,546  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: application/json
15:06:57,546  DEBUG [web.scripts.AbstractRuntime] Agent: null
15:06:57,546  DEBUG [web.scripts.AbstractRuntime] Invoking Web Script org/alfresco/repository/login.post (format json, style: any, default: json)
15:06:57,734  DEBUG [web.scripts.DeclarativeWebScript] Caught exception; decorating with appropriate status template : org.alfresco.web.scripts.WebScriptException: 07030004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
15:06:57,750  DEBUG [web.scripts.AbstractRuntime] Web Script org/alfresco/repository/login.post executed in 209.39757ms
15:06:57,750  ERROR [web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 07030004 Login failed org.alfresco.web.scripts.WebScriptException: 07030004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
15:06:57,750  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: application/json
15:06:58,156  DEBUG [web.scripts.AbstractWebScript] Caching template /json.status.ftl for web script org/alfresco/repository/login.post and status 403 (format:json)
15:06:58,156  DEBUG [web.scripts.AbstractRuntime] Force success status header in response: false
15:06:58,156  DEBUG [web.scripts.AbstractRuntime] Sending status 403 (Template:/json.status.ftl)
15:06:58,171  DEBUG [web.scripts.AbstractRuntime] Rendering response: content type=application/json
15:06:58,171  DEBUG [scripts.servlet.WebScriptServletResponse] Cache - set response header Cache-Control: no-cache
15:06:58,171  DEBUG [scripts.servlet.WebScriptServletResponse] Cache - set response header Pragma: no-cache
15:06:58,234  DEBUG [web.scripts.AbstractRuntime] Processed script url (POST) /api/login in 706.2881ms
15:06:58,250 User:guest DEBUG [web.scripts.AbstractRuntime] Web Script org/alfresco/webframework/avmstore.get executed in 717.5051ms
15:06:58,265 User:guest DEBUG [web.scripts.AbstractRuntime] Processed script url (GET) /avmstore/listpattern/alfresco/site-webscripts in 729.8176ms
[…]‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[_sax]

To answer my own question:
To disallow the admin user it's name-implied rights, one just needs to remove it from the administrators group in the admin console.
Be sure to add someone else before, or edit in the line passthru.authentication.defaultAdministratorUserNames= in your alfresco-global.properties, if you use passthru to authenticate.

[mwildam]

I assume in disabling the admin would even cause the error message as it seems that something here wants to login with admin. Did you test that?

[_sax]

Actually, yes, that should provoce the error. But since we only use the classic JSP-Webclient and Webscripts, this is of no immediate concern to us, because the error seems to stem from somewhere else. Actually, as soon, as I now try to logon to share, "your" error appears in the logs.

11:44:46,896 DEBUG [org.alfresco.passthru.auth] Authenticate user=admin via local credentials
11:44:46,897 DEBUG [org.alfresco.passthru.auth] Authenticate org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@5fa6e7d9: Username: admin; Password: [PROTECTED]; Authenticated: false; Details: null; Not granted any authorities via token
11:44:47,233 DEBUG [org.alfresco.passthru.auth] Authenticated token=org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@5fa6e7d9: Username: admin; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_AUTHENTICATED
11:44:56,466 ERROR [org.alfresco.web.site.servlet.DispatcherServlet] java.lang.OutOfMemoryError: PermGen space
11:46:09,395 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] Detected first UserTransaction which is being garbage collected without a commit() or rollback()
11:46:09,395 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] Logging of transaction call stack is now enabled and will affect performance
11:47:31,772 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] UserTransaction being garbage collected without a commit() or rollback(). NOTE: Prior to transaction call stack logging.

Following this is a somehow crashed Alfresco.
After restarting, as soon as I add the admin user back to the Administrators group, a Share logon is flawless.
So, it's exactly the same here.

[mikeh]

java.lang.OutOfMemoryError: PermGen space‍

So, it's exactly the same here.

Hmm… no, looks like a different error in your case.

Mike

[_sax]

ops: Doubled the permgen space and now Share works without the admin user in "its" group.

[alexandre]

Sorry for bothering, I encountered the same problem today.
As far as I recently started playing with Alfresco, the admin user is the only user in the system.
Are there any ways to rollback the admin password or to somehow find another workaround?
Thank you

UPD: The same exception occurs if you manually disable the admin account via the web-interface (although it is not that critical in this case, because the site is available for other user accs)

[_sax]

If you logon using your new admin's password, you should be able to change that like every other user can. The User details option in the headline of the webclient is the right place to do that.

[newmember]

So I tried to change my admin password and ran into errors.
What is the solution for changing the admin password?

I started looking for where the admin password might be hardcoded, and then thought I might be going down a wrong path.

00:18:13,983 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 07040005 Login failed
org.alfresco.web.scripts.WebScriptException: 07040005 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[newmember]

We removed studio from the production server and that removed the admin password error we have in our log files.
We left studio on the dev lab server.


Cheers