Invalid username or password

[Massimo]

I updated from Tac 1.0.9 to 1.2 Because of #12715 I updated the AccountManagerPlugin to r16171 which solved that issue. Now I have the same issue that I had when I tried that latest plugin revision on Trac 1.0.9. Reverting to the older plugin solved that, but here on 1.2 I need the latest fixes.

Do I need to re-generate all passwords? Different method?

[Ryan J Ollos]

Replying to massimo:

Now I have the same issue that I had when I tried that latest plugin revision on Trac 1.0.9.

I'm unsure of what issue you are referring to. Did we discuss this on the mailing list?

You shouldn't need to regenerate passwords.

[Massimo]

Not sure, I looked at my last comments on the mailing list about AccountManagerPlugin, that was only about ​Regsiter new user......

On Trac 1.0.9 I already tried updating AccountManagerPlguin to the latest revision. The result was that after logoff no user was able to login anymore: "Invalid username or password". I realized that replacing the TracAccountManager-0.5.dev0-py2.7.egg by the older TracAccountManager-0.4.3-py2.7.egg made it work again, and I did not care anymore.

Now on Trac 1.2 I I ran into #12715, so I updated the plugin to the latest revision. Now users fail to login again.

This is my unchanged configuration:

[account-manager]
htpasswd_file = /mnt/data/trac/projects/trac-pp/trac.htpasswd
htpasswd_hash_type = md5
login_attempt_max_count = 3
password_store = HtPasswdStore
persistent_sessions = enabled
reset_password = enabled
user_lock_time = 30

[Ryan J Ollos]

I tried your configuration with Trac 1.0.13 and AccountManager 0.4.3. I then upgraded to Trac 1.2 and AccountManager 0.5dev. I was still able to login.

I also looked at ​gmessage:trac-users:kIiYSfhJh8s/zKXDMA5FAQAJ.

You might take a look at the log and see if there are any errors.

However, without further hints I have no idea on how to locate the issue, so I suggest you just reset passwords for all your users. You can reset passwords from the admin page. Anyway, it is a good idea to have users periodically reset passwords, so it's not all bad.