How to use old password after omd update

Troubleshooting
,
1

CMK version:2.3.0.cre
OS version: Read Hat Enterprise Linux 8.10

Hello,

I am running omd update of my site from 2.2.0 to 2.3.0. After I run the update I can’t use my old passwords to login to web ui. I know that I can change the password with cmk-passwd and then it will work. But I need to have this automated. I am doing the update with ansible steps and would like to manage it somehow there that after the omd update also the old password are usable. I tried to copy old hashes from etc/htpasswd and return it back after the omd update, then restart the site, but that one didn’t work.
Is there some way to achieve this ?

Thanks in advance

2

Reset the password before the update. Then it is already saved with the newer hash algorithm.

4

Thank you for your reply. But I am nto sure if I understand what exactly do you mean by reset the password before the update ? You mean with cmk-passwd ?

5

You can also set a new password over the GUI.
Or you use mk-passwd on command line.
The password needs only be saved with the newer and accepted hash algorithm.

1 Like
6

The thing is that the old password hashs are insecure, so they are depricated with 2.3. As there are only hash values stored, there is no way to automatically convert it to the new hash format. The users have to manually change the password once during the site is still running 2.2. (If they like they can change it to a new one and than back to the old.) This stores the password with the new hash, so that it can be used in 2.3.

1 Like