Authentication strangeness

View: New views
2 Messages — Rating Filter:   Alert me  

Authentication strangeness

by Joe Walker-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


My pebble installation suddenly stopped letting me log in. I'm 99.9% sure it wasn't me typing my password wrongly because Firefox was auto-filling for me.

I think it was something to do with changing the domain, but I'm not sure.
Anyway I frobbed things randomly until I could log in again.

Part of my frobbing was to write a SHA password encrypter to let me reset my password.
Edit your pebble-data/realm/USERNAME.properties file and change the password to the output of this:

import net.sourceforge.pebble.security.PebbleUserDetails;
import org.acegisecurity.providers.dao.salt.ReflectionSaltSource;
import org.acegisecurity.providers.encoding.ShaPasswordEncoder;

PebbleUserDetails pud = new PebbleUserDetails();
pud.setUsername("USERNAME");
ShaPasswordEncoder passwordEncoder = new ShaPasswordEncoder();
ReflectionSaltSource saltSource = new ReflectionSaltSource();
saltSource.setUserPropertyToUse("getUsername");
String cipherText = passwordEncoder.encodePassword("PASSWORD", saltSource.getSalt(pud));
System.out.println(cipherText);

I'm just passing it on in case anyone forgets their password and wants to reset it.

Joe.


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Pebble-user mailing list
Pebble-user@...
https://lists.sourceforge.net/lists/listinfo/pebble-user

Re: Authentication strangeness

by David McLure :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hey, thanks Joe for the Pebble password workaround!

I see this authentication issue from time to time as well, but I've
only ever seen the issue on a shared Apache virtual host to single
[also shared] Tomcat server environment which I am currently still
working on partitioning into multiple entities.  I have never seen the
issue on a simple (single [Tomcat] Server) environment.  As such, I've
always assumed that the problem was due to the sharing issue.  I'd be
interested to know whether people are also seeing this problem on a
simple single server environment.

David McLure


On Fri, Jul 18, 2008 at 1:44 PM, Joe Walker <joe@...> wrote:

>
> My pebble installation suddenly stopped letting me log in. I'm 99.9% sure it
> wasn't me typing my password wrongly because Firefox was auto-filling for
> me.
>
> I think it was something to do with changing the domain, but I'm not sure.
> Anyway I frobbed things randomly until I could log in again.
>
> Part of my frobbing was to write a SHA password encrypter to let me reset my
> password.
> Edit your pebble-data/realm/USERNAME.properties file and change the password
> to the output of this:
>
> import net.sourceforge.pebble.security.PebbleUserDetails;
> import org.acegisecurity.providers.dao.salt.ReflectionSaltSource;
> import org.acegisecurity.providers.encoding.ShaPasswordEncoder;
>
> PebbleUserDetails pud = new PebbleUserDetails();
> pud.setUsername("USERNAME");
> ShaPasswordEncoder passwordEncoder = new ShaPasswordEncoder();
> ReflectionSaltSource saltSource = new ReflectionSaltSource();
> saltSource.setUserPropertyToUse("getUsername");
> String cipherText = passwordEncoder.encodePassword("PASSWORD",
> saltSource.getSalt(pud));
> System.out.println(cipherText);
>
> I'm just passing it on in case anyone forgets their password and wants to
> reset it.
>
> Joe.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Pebble-user mailing list
Pebble-user@...
https://lists.sourceforge.net/lists/listinfo/pebble-user
LightInTheBox - Buy quality products at wholesale price