Hi Petr,

We are looking into the issue (see 
https://github.com/inveniosoftware/invenio/issues/3070). We have identified 
that there was an issue if a user had an empty password. Is it possible for you 
to verify that this was or wasn’t the case in your situtation?

Best regards,
Lars
---
Lars Holm Nielsen
CERN, IT Department, Collaboration & Information Services
http://zenodo.org | Tel: +41 22 76 79182 | Cel: +41 76 672 8927 | Twitter: 
@larshankat | Skype: larsholm-hankat

On 28 Apr 2015, at 22:31, Petr Brož 
<[email protected]<mailto:[email protected]>> wrote:

Hello,

we have installed the current git master Invenio version over an older
one from pu (09/28/2014) but now no user is able to log in. The system
says "Invalid credentials".

We have managed to reset password for individual users through
inveniomanage shell but would like to warn other people of this
possibly serious problem.

We suspect accounts_2015_03_06_passlib upgrade recipe to be the
culprit. Since the upgrade recipe also deletes old passwords, there is
probable no way back.

Regards,

Petr

Reply via email to