Bug 23375

Summary: Incorrect username or password when trying to log in
Product: Websites Reporter: Christian C <bugzzzz>
Component: OtherAssignee: Sysadmin Team <sysadmin-bugs>
Status: RESOLVED WORKSFORME QA Contact:
Severity: normal    
Priority: Normal CC: LpSolit, krst.gen, marja11
Version: trunk   
Target Milestone: ---   
Hardware: x86_64   
OS: Linux   
URL: https://bugs.mageia.org/
Whiteboard:
Source RPM: CVE:
Status comment:

Description Christian C 2018-08-01 21:14:55 CEST
Description of problem:

I tried to log in from my laptop with a different IP than I usually use and got an error message like : Incorrect username or password
I then tried to reinitialize my password, got the email with the link, entered a new password but it was finally refused by the server with the same error message.

I tried the same operation from my home (with my current IP) and got the same result but after a few attempts, it finally succeeded !
This is why I take advantage of it to submit this bug with my original id. I do not know how long it is going to last.
Could you please check in the logs why my login is sometimes refused ?

Thanks

Version-Release number of selected component (if applicable):


How reproducible:
I don't know, I couldn't log in for 1 month

Steps to Reproduce:
1. load https://bugs.mageia.org/ in firefox
2. enter username and password and a message displays something like Incorrect username or password
3.
Comment 1 Marja Van Waes 2018-08-02 14:36:51 CEST
I have no idea what happened, reassigning to sysadmin team because Atelier team can't access the relevant logs.

Also CC'ing LpSolit, in case our Bugzilla logs show something.

CC: (none) => LpSolit, marja11
Assignee: atelier-bugs => sysadmin-bugs

Comment 2 Marja Van Waes 2018-08-02 14:38:48 CEST
(In reply to Christian CHEVALIER from comment #0)
> Description of problem:
> 
> I tried to log in from my laptop with a different IP than I usually use and
> got an error message like : Incorrect username or password

Btw, were you still logged in from a different system on that different IP?
Comment 3 Frédéric "LpSolit" Buclin 2018-08-02 14:53:50 CEST
Bugzilla uses LDAP to check credentials. If Bugzilla rejects the username/password, it's maybe because the password has been changed in identity.mageia.org.
Comment 4 Christian C 2018-08-04 09:09:18 CEST
(In reply to Marja Van Waes from comment #2)
> (In reply to Christian CHEVALIER from comment #0)
> > Description of problem:
> > 
> > I tried to log in from my laptop with a different IP than I usually use and
> > got an error message like : Incorrect username or password
> 
> Btw, were you still logged in from a different system on that different IP?

My laptop is under mageia 6 and my desktop under mageia 5.
I just tried to log in from my laptop connected to the same box (same public IP) but different private IP and got the error message "Incorrect username or password". Maybe because 2 simultaneous connection are not allowed. I'll try when I have finished writing this report.
Comment 5 Christian CHEVALIER 2018-08-04 10:30:31 CEST
I created another username to post this comment.
After my previous report (comment 4 above),I logged out from my desktop and tried to connect from my laptop : I got the same error message.
Then I tried to reconnect from my desktop and couldn't with the same error message. I restarted firefox, tried with chromium : same result.
So, I am using this other user account to post.

@Frédéric Buclin : I still use the same password because all my attempts to change it failed and sometimes, my current password is recognised and I can log in, sometimes not.

CC: (none) => krst.gen

Comment 6 Marja Van Waes 2018-08-05 10:19:44 CEST
@ Christian


I have a vague memory that some users who had their old password stored in the browser, reported problems after renewing their passwords (after all passwords were reset at the end of February). 

Is it possible that that is part of the problem?



Anyway, I see that, for _both_ of your accounts, the last time you logged into our Bugzilla was yesterday
Comment 7 Christian CHEVALIER 2018-08-05 11:58:28 CEST
I opened https://bugs.mageia.org/ and was automatically logged in as krst.gen.

I logged out and tried to log in as bugzzzz with the password stored in firefox : it was refused with the message Incorrect username or password.

I tried to log in as bugzzzz and entered manually its password : it was refused with the message Incorrect username or password.

I clicked Forgot Password, entered bugzzzz@free.fr and pushed the button Reinitialize password, received the email with the link https://identity.mageia.org/forgot_password/confirm?secret=846AC882-9893-11E8-B1FC-A5E8C2AC3BC7, entered a new password, pushed the button Define a new password, was redirected to https://identity.mageia.org/, entered bugzzzz@free.fr and my new password and got the message Incorrect username or password.

Then, I logged in with krst.gen and wrote this comment.

So I conclude there's something wrong somewhere !
Comment 8 Marja Van Waes 2018-08-07 09:55:09 CEST
(In reply to Christian CHEVALIER from comment #7)
> I opened https://bugs.mageia.org/ and was automatically logged in as
> krst.gen.
> 
> I logged out and tried to log in as bugzzzz with the password stored in
> firefox : it was refused with the message Incorrect username or password.
> 
> I tried to log in as bugzzzz and entered manually its password : it was
> refused with the message Incorrect username or password.
> 
> I clicked Forgot Password, entered bugzzzz@free.fr and pushed the button
> Reinitialize password, received the email with the link
> https://identity.mageia.org/forgot_password/confirm?secret=846AC882-9893-
> 11E8-B1FC-A5E8C2AC3BC7, entered a new password, pushed the button Define a
> new password, was redirected to https://identity.mageia.org/, entered
> bugzzzz@free.fr and my new password and got the message Incorrect username
> or password.
> 
> Then, I logged in with krst.gen and wrote this comment.
> 
> So I conclude there's something wrong somewhere !

If, in Firefox, you go to:

  about:preferences#privacy

and then click on 

  Saved Logins

and remove all the logins for bugs.mageia.org that you see (you might need to restart Firefox after that)

Can you then login as bugzzzz ?

If so, then this is a Firefox issue.
Comment 9 Christian C 2018-08-07 19:00:10 CEST
Today, in firefox, I could log in as bugzzzz without error. I just entered manually the password which was refused the last time I tried to log in.
I have recorded it in firefox and see later.
Comment 10 Frédéric "LpSolit" Buclin 2019-04-21 19:04:15 CEST
No news for a long time. Closing.

Status: NEW => RESOLVED
Resolution: (none) => WORKSFORME

Comment 11 Christian C 2019-04-27 11:40:17 CEST
OK, no more problems since.