Re: Locked out from RB Admin!
Unfortunately, there's not much we could do without having access to the server or some of the original information, and the creation of the master account on the AD server overwrote that information. The built-in auth should take precedence if the account was originally created in the built-in auth (such as during site installation). The entry for that will be returned regardless of the type of auth. However, if it doesn't exist, and those login credentials are found for AD, then it will create a new entry, set an unusable password, and use the auth backend to validate. So I don't know how this was caused, but now that you have a new account for this that works, there's not much we can look at. Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com On Fri, Mar 5, 2010 at 4:02 AM, James McDougall wrote: > Fantastic - worked a treat! > > Can I help by raising an Issue with the details of the original > problem? > > Thanks. > > On Mar 5, 11:00 am, Christian Hammond wrote: > > Hi James, > > > > It tried to authenticate against AD, but given that it didn't find it, it > > should have fallen back to the built-in list of users in the database. > The > > fact that it didn't is concerning, but we can look into it once we get > your > > system back up and running. > > > > That method for creating a super user should work for making a new admin > > user, but we can also set your user to have superuser status again. Do > the > > following: > > > > $ rb-site manage /path/to/your/site shell > > >>> from django.contrib.auth.models import User > > >>> u = User.objects.get(username="master") > > >>> u.is_superuser = True > > >>> u.is_staff = True > > >>> u.save() > > > > That should reset it and give you access to the admin UI again. > > > > Christian > > > > -- > > Christian Hammond - chip...@chipx86.com > > Review Board -http://www.reviewboard.org > > VMware, Inc. -http://www.vmware.com > > > > On Fri, Mar 5, 2010 at 2:51 AM, James McDougall < > jamesmcdoug...@gmail.com>wrote: > > > > > Christian, > > > > > When we switched over to AD, the end-user accounts did exist on AD but > > > when they logged in for the first time against AD it appeared that > > > their account was reset, with existing reviews lost. That was not an > > > issue at the time. > > > > > The Master account (my admin ID) did continue to work until this > > > morning but without there being an equivalent AD account. (Contrary > > > to my original post, I'm thinking that I must have restarted the > > > server since the switchover without losing Admin rights.) > > > > > When I could not login this morning, the Apache error_log showed the > > > following - no references to any other Apache logs. > > > error_log:WARNING:root:Active Directory: Failed login for user master > > > > > I then added master to our AD and that error no longer appears, but I > > > can only log in as a normal user now. > > > > > Are there other logs I should be running with in general? If so then > > > how do I enable them please? > > > > > UPDATE - I've just found the following in the Admin Guide but not > > > tried it. Is this what I need? > > > > > Creating a Super User¶ > > > > > It is possible to create a new super user account without using the > > > website. This can be important if the main super user account is for > > > whatever reason disabled or if the login information is lost. > > > To create a new super user account, run: > > > $ rb-site manage /path/to/site createsuperuser > > > > > This will prompt for the username and password of the account. You > > > must specify a user that doesn’t already exist in the database. Once > > > this is finished, you should be able to log in under the new account > > > and fix any problems you have. > > > > > On Mar 5, 10:36 am, Christian Hammond wrote: > > > > Hi James, > > > > > > Was the username you used also an account on the Active Directory > server? > > > > > > Does anything appear in the log files? (Assuming logging was turned > on > > > > before this happened). > > > > > > Christian > > > > > > -- > > > > Christian Hammond - chip...@chipx86.com > > > > Review Board -http://www.reviewboard.org > > > > VMware, Inc. -http://www.vmware.com > > > > > > On Fri, Mar 5, 2010 at 2:30 AM, James McDougall < > > > jamesmcdoug...@gmail.com>wrote: > > > > > > > Bottom line is that I no longer appear to have an administrative > > > > > account and I am looking for a way to get myself back in again. > > > > > > > Sequence that got me to this was as follows. > > > > > - I set up accounts using the local user account system - end-user > > > > > accounts, a master admin account and a Submit-As account for post > > > > > review > > > > > - I then switched over to use Active Directory thinking the admin > > > > > account would be preserved. > > > > > - I could still use the admin account _UNTIL_ I restarted the httpd > > > > > server
Re: Locked out from RB Admin!
Fantastic - worked a treat! Can I help by raising an Issue with the details of the original problem? Thanks. On Mar 5, 11:00 am, Christian Hammond wrote: > Hi James, > > It tried to authenticate against AD, but given that it didn't find it, it > should have fallen back to the built-in list of users in the database. The > fact that it didn't is concerning, but we can look into it once we get your > system back up and running. > > That method for creating a super user should work for making a new admin > user, but we can also set your user to have superuser status again. Do the > following: > > $ rb-site manage /path/to/your/site shell > >>> from django.contrib.auth.models import User > >>> u = User.objects.get(username="master") > >>> u.is_superuser = True > >>> u.is_staff = True > >>> u.save() > > That should reset it and give you access to the admin UI again. > > Christian > > -- > Christian Hammond - chip...@chipx86.com > Review Board -http://www.reviewboard.org > VMware, Inc. -http://www.vmware.com > > On Fri, Mar 5, 2010 at 2:51 AM, James McDougall > wrote: > > > Christian, > > > When we switched over to AD, the end-user accounts did exist on AD but > > when they logged in for the first time against AD it appeared that > > their account was reset, with existing reviews lost. That was not an > > issue at the time. > > > The Master account (my admin ID) did continue to work until this > > morning but without there being an equivalent AD account. (Contrary > > to my original post, I'm thinking that I must have restarted the > > server since the switchover without losing Admin rights.) > > > When I could not login this morning, the Apache error_log showed the > > following - no references to any other Apache logs. > > error_log:WARNING:root:Active Directory: Failed login for user master > > > I then added master to our AD and that error no longer appears, but I > > can only log in as a normal user now. > > > Are there other logs I should be running with in general? If so then > > how do I enable them please? > > > UPDATE - I've just found the following in the Admin Guide but not > > tried it. Is this what I need? > > > Creating a Super User¶ > > > It is possible to create a new super user account without using the > > website. This can be important if the main super user account is for > > whatever reason disabled or if the login information is lost. > > To create a new super user account, run: > > $ rb-site manage /path/to/site createsuperuser > > > This will prompt for the username and password of the account. You > > must specify a user that doesn’t already exist in the database. Once > > this is finished, you should be able to log in under the new account > > and fix any problems you have. > > > On Mar 5, 10:36 am, Christian Hammond wrote: > > > Hi James, > > > > Was the username you used also an account on the Active Directory server? > > > > Does anything appear in the log files? (Assuming logging was turned on > > > before this happened). > > > > Christian > > > > -- > > > Christian Hammond - chip...@chipx86.com > > > Review Board -http://www.reviewboard.org > > > VMware, Inc. -http://www.vmware.com > > > > On Fri, Mar 5, 2010 at 2:30 AM, James McDougall < > > jamesmcdoug...@gmail.com>wrote: > > > > > Bottom line is that I no longer appear to have an administrative > > > > account and I am looking for a way to get myself back in again. > > > > > Sequence that got me to this was as follows. > > > > - I set up accounts using the local user account system - end-user > > > > accounts, a master admin account and a Submit-As account for post > > > > review > > > > - I then switched over to use Active Directory thinking the admin > > > > account would be preserved. > > > > - I could still use the admin account _UNTIL_ I restarted the httpd > > > > server. > > > > > Since then, having created the equivalent AD account, I have only been > > > > able to login as a normal user. > > > > > Is there any way of patching admin privileges in through MySQL or am I > > > > hosed? > > > > > Thanks for any help! > > > > > James > > > > > -- > > > > Want to help the Review Board project? Donate today at > > > >http://www.reviewboard.org/donate/ > > > > Happy user? Let us know athttp://www.reviewboard.org/users/ > > > > -~--~~~~--~~--~--~--- > > > > To unsubscribe from this group, send email to > > > > reviewboard+unsubscr...@googlegroups.com > > > > > > > For more options, visit this group at > > > >http://groups.google.com/group/reviewboard?hl=en > > > -- > > Want to help the Review Board project? Donate today at > >http://www.reviewboard.org/donate/ > > Happy user? Let us know athttp://www.reviewboard.org/users/ > > -~--~~~~--~~--~--~--- > > To unsubscribe from this group, send email to > > reviewboard+unsubscr...@googlegroups.com > > For more options, visit this group at > >http://groups.google.com/group/reviewboard?hl=e
Re: Locked out from RB Admin!
Hi James, It tried to authenticate against AD, but given that it didn't find it, it should have fallen back to the built-in list of users in the database. The fact that it didn't is concerning, but we can look into it once we get your system back up and running. That method for creating a super user should work for making a new admin user, but we can also set your user to have superuser status again. Do the following: $ rb-site manage /path/to/your/site shell >>> from django.contrib.auth.models import User >>> u = User.objects.get(username="master") >>> u.is_superuser = True >>> u.is_staff = True >>> u.save() That should reset it and give you access to the admin UI again. Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com On Fri, Mar 5, 2010 at 2:51 AM, James McDougall wrote: > Christian, > > When we switched over to AD, the end-user accounts did exist on AD but > when they logged in for the first time against AD it appeared that > their account was reset, with existing reviews lost. That was not an > issue at the time. > > The Master account (my admin ID) did continue to work until this > morning but without there being an equivalent AD account. (Contrary > to my original post, I'm thinking that I must have restarted the > server since the switchover without losing Admin rights.) > > When I could not login this morning, the Apache error_log showed the > following - no references to any other Apache logs. > error_log:WARNING:root:Active Directory: Failed login for user master > > I then added master to our AD and that error no longer appears, but I > can only log in as a normal user now. > > Are there other logs I should be running with in general? If so then > how do I enable them please? > > UPDATE - I've just found the following in the Admin Guide but not > tried it. Is this what I need? > > Creating a Super User¶ > > It is possible to create a new super user account without using the > website. This can be important if the main super user account is for > whatever reason disabled or if the login information is lost. > To create a new super user account, run: > $ rb-site manage /path/to/site createsuperuser > > This will prompt for the username and password of the account. You > must specify a user that doesn’t already exist in the database. Once > this is finished, you should be able to log in under the new account > and fix any problems you have. > > On Mar 5, 10:36 am, Christian Hammond wrote: > > Hi James, > > > > Was the username you used also an account on the Active Directory server? > > > > Does anything appear in the log files? (Assuming logging was turned on > > before this happened). > > > > Christian > > > > -- > > Christian Hammond - chip...@chipx86.com > > Review Board -http://www.reviewboard.org > > VMware, Inc. -http://www.vmware.com > > > > On Fri, Mar 5, 2010 at 2:30 AM, James McDougall < > jamesmcdoug...@gmail.com>wrote: > > > > > Bottom line is that I no longer appear to have an administrative > > > account and I am looking for a way to get myself back in again. > > > > > Sequence that got me to this was as follows. > > > - I set up accounts using the local user account system - end-user > > > accounts, a master admin account and a Submit-As account for post > > > review > > > - I then switched over to use Active Directory thinking the admin > > > account would be preserved. > > > - I could still use the admin account _UNTIL_ I restarted the httpd > > > server. > > > > > Since then, having created the equivalent AD account, I have only been > > > able to login as a normal user. > > > > > Is there any way of patching admin privileges in through MySQL or am I > > > hosed? > > > > > Thanks for any help! > > > > > James > > > > > -- > > > Want to help the Review Board project? Donate today at > > >http://www.reviewboard.org/donate/ > > > Happy user? Let us know athttp://www.reviewboard.org/users/ > > > -~--~~~~--~~--~--~--- > > > To unsubscribe from this group, send email to > > > reviewboard+unsubscr...@googlegroups.com > > > > > > For more options, visit this group at > > >http://groups.google.com/group/reviewboard?hl=en > > -- > Want to help the Review Board project? Donate today at > http://www.reviewboard.org/donate/ > Happy user? Let us know at http://www.reviewboard.org/users/ > -~--~~~~--~~--~--~--- > To unsubscribe from this group, send email to > reviewboard+unsubscr...@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/reviewboard?hl=en > -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit t
Re: Locked out from RB Admin!
Christian, When we switched over to AD, the end-user accounts did exist on AD but when they logged in for the first time against AD it appeared that their account was reset, with existing reviews lost. That was not an issue at the time. The Master account (my admin ID) did continue to work until this morning but without there being an equivalent AD account. (Contrary to my original post, I'm thinking that I must have restarted the server since the switchover without losing Admin rights.) When I could not login this morning, the Apache error_log showed the following - no references to any other Apache logs. error_log:WARNING:root:Active Directory: Failed login for user master I then added master to our AD and that error no longer appears, but I can only log in as a normal user now. Are there other logs I should be running with in general? If so then how do I enable them please? UPDATE - I've just found the following in the Admin Guide but not tried it. Is this what I need? Creating a Super User¶ It is possible to create a new super user account without using the website. This can be important if the main super user account is for whatever reason disabled or if the login information is lost. To create a new super user account, run: $ rb-site manage /path/to/site createsuperuser This will prompt for the username and password of the account. You must specify a user that doesn’t already exist in the database. Once this is finished, you should be able to log in under the new account and fix any problems you have. On Mar 5, 10:36 am, Christian Hammond wrote: > Hi James, > > Was the username you used also an account on the Active Directory server? > > Does anything appear in the log files? (Assuming logging was turned on > before this happened). > > Christian > > -- > Christian Hammond - chip...@chipx86.com > Review Board -http://www.reviewboard.org > VMware, Inc. -http://www.vmware.com > > On Fri, Mar 5, 2010 at 2:30 AM, James McDougall > wrote: > > > Bottom line is that I no longer appear to have an administrative > > account and I am looking for a way to get myself back in again. > > > Sequence that got me to this was as follows. > > - I set up accounts using the local user account system - end-user > > accounts, a master admin account and a Submit-As account for post > > review > > - I then switched over to use Active Directory thinking the admin > > account would be preserved. > > - I could still use the admin account _UNTIL_ I restarted the httpd > > server. > > > Since then, having created the equivalent AD account, I have only been > > able to login as a normal user. > > > Is there any way of patching admin privileges in through MySQL or am I > > hosed? > > > Thanks for any help! > > > James > > > -- > > Want to help the Review Board project? Donate today at > >http://www.reviewboard.org/donate/ > > Happy user? Let us know athttp://www.reviewboard.org/users/ > > -~--~~~~--~~--~--~--- > > To unsubscribe from this group, send email to > > reviewboard+unsubscr...@googlegroups.com > > For more options, visit this group at > >http://groups.google.com/group/reviewboard?hl=en -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
Re: Locked out from RB Admin!
Hi James, Was the username you used also an account on the Active Directory server? Does anything appear in the log files? (Assuming logging was turned on before this happened). Christian -- Christian Hammond - chip...@chipx86.com Review Board - http://www.reviewboard.org VMware, Inc. - http://www.vmware.com On Fri, Mar 5, 2010 at 2:30 AM, James McDougall wrote: > Bottom line is that I no longer appear to have an administrative > account and I am looking for a way to get myself back in again. > > Sequence that got me to this was as follows. > - I set up accounts using the local user account system - end-user > accounts, a master admin account and a Submit-As account for post > review > - I then switched over to use Active Directory thinking the admin > account would be preserved. > - I could still use the admin account _UNTIL_ I restarted the httpd > server. > > Since then, having created the equivalent AD account, I have only been > able to login as a normal user. > > Is there any way of patching admin privileges in through MySQL or am I > hosed? > > Thanks for any help! > > James > > -- > Want to help the Review Board project? Donate today at > http://www.reviewboard.org/donate/ > Happy user? Let us know at http://www.reviewboard.org/users/ > -~--~~~~--~~--~--~--- > To unsubscribe from this group, send email to > reviewboard+unsubscr...@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/reviewboard?hl=en -- Want to help the Review Board project? Donate today at http://www.reviewboard.org/donate/ Happy user? Let us know at http://www.reviewboard.org/users/ -~--~~~~--~~--~--~--- To unsubscribe from this group, send email to reviewboard+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/reviewboard?hl=en
