RT3 root account and password

RT Users
1

Greeting, list.

I’m having trouble with the RT root account.
Just installed it, changed password, and now the root password I thought
I changed the default ‘password’ to doesn’t work - I’ve probably
forgotten the spelling/caps I used.

Looking through the list archives, I found advice to do the following
mysql> update rt3.Users set password = MD5(‘password’) where
name=‘root’;
(to reset back to the default ‘password’)

I have done this, and the mysql response is:
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0

However, it still doesn’t work.
I’m now at the ‘poke it with a stick’ stage, and would appreciate any
light thrown on my problem.

I have Request Tracker 3.0.7_01 installed, and
mysql> status
reports:
mysql Ver 11.18 Distrib 3.23.58, for pc-linux (i686)

–Benji

Benji Wakely b.wakely@latrobe.edu.au
or
aarlin.help@latrobe.edu.au
AARLIN Project
+61 3 9479 2142
http://www.aarlin.edu.au

2

If I recall properly, RT3 uses a base-64 digest of an MD5 hash. Simply
doing an MD5 could potentially cause issues with the database – perhaps
with different character sets, or what-have-you – because it could possibly
create unstorable characters.

Someone correct me if I’m wrong. All I know for certain is that I’ve found
a Javascript that does it properly.

http://pajhome.org.uk/crypt/md5/md5src.html

Using the function b64_md5(input_string) should get you what you’re looking
for. I’ve tested it and it works. Just need to whip up a webpage that will
utilize the script and print out the new password, then you can insert that
value directly into the table instead of using an internal MySQL function to
do it. At least that’s the only way I know of to do it without jumping
through hoops and over open flames.-----Original Message-----
From: Aarlin Help [mailto:Aarlin.Help@latrobe.edu.au]
Sent: Wednesday, December 17, 2003 9:15 PM
To: rt-users@lists.fsck.com
Subject: [rt-users] RT3 root account and password

Greeting, list.

I’m having trouble with the RT root account.
Just installed it, changed password, and now the root password I thought
I changed the default ‘password’ to doesn’t work - I’ve probably
forgotten the spelling/caps I used.

Looking through the list archives, I found advice to do the following
mysql> update rt3.Users set password = MD5(‘password’) where
name=‘root’;
(to reset back to the default ‘password’)

I have done this, and the mysql response is:
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0

However, it still doesn’t work.
I’m now at the ‘poke it with a stick’ stage, and would appreciate any
light thrown on my problem.

I have Request Tracker 3.0.7_01 installed, and
mysql> status
reports:
mysql Ver 11.18 Distrib 3.23.58, for pc-linux (i686)

–Benji

Benji Wakely b.wakely@latrobe.edu.au
or
aarlin.help@latrobe.edu.au
AARLIN Project
+61 3 9479 2142
http://www.aarlin.edu.au

rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm

3

Hi Mike.

Thanks for the advice, but it didn’t help.

Generating an MD5 hash via that javascript page
comes up with the same string as mysql’s MD5()
function.

Any other suggestions?

–Benji
Benji Wakely b.wakely@latrobe.edu.au
or
aarlin.help@latrobe.edu.au
AARLIN Project
+61 3 9479 2142
http://www.aarlin.edu.au-----Original Message-----
From: Mike Frazer [mailto:Michael.Frazer@InterCept.Net]
Sent: Friday, 19 December 2003 6:44 AM
To: Aarlin Help; rt-users@lists.fsck.com
Subject: RE: [rt-users] RT3 root account and password

If I recall properly, RT3 uses a base-64 digest of an MD5 hash. Simply
doing an MD5 could potentially cause issues with the database – perhaps
with different character sets, or what-have-you – because it could
possibly
create unstorable characters.

Someone correct me if I’m wrong. All I know for certain is that I’ve
found
a Javascript that does it properly.

http://pajhome.org.uk/crypt/md5/md5src.html

Using the function b64_md5(input_string) should get you what you’re
looking
for. I’ve tested it and it works. Just need to whip up a webpage that
will
utilize the script and print out the new password, then you can insert
that
value directly into the table instead of using an internal MySQL
function to
do it. At least that’s the only way I know of to do it without jumping
through hoops and over open flames.

-----Original Message-----
From: Aarlin Help [mailto:Aarlin.Help@latrobe.edu.au]
Sent: Wednesday, December 17, 2003 9:15 PM
To: rt-users@lists.fsck.com
Subject: [rt-users] RT3 root account and password

Greeting, list.

I’m having trouble with the RT root account.
Just installed it, changed password, and now the root password I thought
I changed the default ‘password’ to doesn’t work - I’ve probably
forgotten the spelling/caps I used.

Looking through the list archives, I found advice to do the following
mysql> update rt3.Users set password = MD5(‘password’) where
name=‘root’;
(to reset back to the default ‘password’)

I have done this, and the mysql response is:
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0

However, it still doesn’t work.
I’m now at the ‘poke it with a stick’ stage, and would appreciate any
light thrown on my problem.

I have Request Tracker 3.0.7_01 installed, and
mysql> status
reports:
mysql Ver 11.18 Distrib 3.23.58, for pc-linux (i686)

–Benji

Benji Wakely b.wakely@latrobe.edu.au
or
aarlin.help@latrobe.edu.au
AARLIN Project
+61 3 9479 2142
http://www.aarlin.edu.au

rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm

4

Do you have any other accounts in rt? Do you know their password? If so copy
that password hash to the root account’s password field in MySQL and be done
with it.----- Original Message -----
From: “Aarlin Help” Aarlin.Help@latrobe.edu.au
To: “Mike Frazer” Michael.Frazer@InterCept.Net; rt-users@lists.fsck.com
Sent: Thursday, December 18, 2003 7:01 PM
Subject: RE: [rt-users] RT3 root account and password

Hi Mike.

Thanks for the advice, but it didn’t help.

Generating an MD5 hash via that javascript page
comes up with the same string as mysql’s MD5()
function.

Any other suggestions?

5

At Thu, 18 Dec 2003 14:44:26 -0500,
Mike Frazer wrote:

If I recall properly, RT3 uses a base-64 digest of an MD5 hash. Simply
doing an MD5 could potentially cause issues with the database – perhaps
with different character sets, or what-have-you – because it could possibly
create unstorable characters.

For backwards compatibility, RT3 will also accept crypted passwords.

mysql> select ENCRYPT(“password”,“SA”);

should generate it.

(SA is the salt.)

-R