12.7.12 Upgrade issues with authentication

Howdy all, 

It looks like something changed in 12.7.12 from .11 in how credentials are salted/hashed in the database.  First indication of this is that is would not use the existing .whd.properties file and presented the initial configuration dialog in the browser rather than directing to upgrade the DB as usual.  

I put the same info back into the setup using the existing MSSQL DB and it recreated the .whd.properties file with the only difference being the password was hashed differently. 

Upgrade proceeded as typical, but upon testing, anything that had a stored credential for:

  • AD connectors
  • Incoming Email
  • Outgoing Email 

Failed to authenticate.  The creds had to be reapplied to restore.

Additionally came across an AES error in the log that I tracked down to an AES string that had a decryption error and turned out it was a password in an email config that was set to anonymous, but had that string for a password.  Set that to null and errors stopped.

Still lots of issues with HTML special characters.  Cases open on that, but the encryption issues were unexpected.

Parents
  • Thank you for your post - I just tried to upgrade from 12.7.10 to 12.7.12 tonight and had problems with my Mysql database. I'm used to it just 'finding' the database after an upgrade (if I've copied the mysql connector jar file in the correct place), but no luck with my upgrade tonight. My server is running on a VM so a restored my entire server back to the way it was before my install attempt (12.7.10) and I'll attempt 12.7.12 again another night. Glad to know that I'll need to re-enter the credentials for AD/email stuff, thanks!

  • 12.7.12 upgrade worked tonight once I re-entered all the correct information to the remote mysql db, by retyping the data already in the .whd.properties file (and typing the password), it reconnected this time. Thanks for the reminder to re-enter the password/auth info for AD connections and OAuth secret. Thanks!

Reply
  • 12.7.12 upgrade worked tonight once I re-entered all the correct information to the remote mysql db, by retyping the data already in the .whd.properties file (and typing the password), it reconnected this time. Thanks for the reminder to re-enter the password/auth info for AD connections and OAuth secret. Thanks!

Children
No Data