Opened 13 years ago

Closed 13 years ago

#133 closed task (fixed)

Find out why Kuljot has no hashing algorithm

Reported by: adehnert Owned by:
Priority: minor Milestone: Sometime
Component: Infrastructure Version:
Keywords: Cc:
Size: medium

Description

See ​https://diswww.mit.edu/menelaus/asa-db/2132.

Change History (1)

comment:1 Changed 13 years ago by adehnert

  • Resolution set to fixed
  • Status changed from new to closed

The answer appears to be that if the ScriptsRemoteUserBackend?.configure_user method errors while configuring the user, it can leave the password field blank. This appears to be a rare issue --- it affects seven users on the production database. It's plausible that forcibly calling .save() in configure_user after setting the password to UNUSABLE_PASSWORD would help, but I'm not sure. I think this is an acceptable rate of issues, so I'm not going to investigate further.

For current users, the migration added in commit 0290330bb96451c893bc1ebe01ff0dfcb23a8fec will set their password to UNUSABLE_PASSWORD.

Note: See TracTickets for help on using tickets.