nilsteampassnet / TeamPass

Collaborative Passwords Manager
https://www.teampass.net
1.68k stars 550 forks source link

Your authentication password has been changed in your AD since you last get logged in in Teampass. We need to adapt your encryption key. Please provide your previous password and the current one. #4478

Open XzX-DPG opened 5 days ago

XzX-DPG commented 5 days ago
### Steps to reproduce 1.Change Active Directory password 2- The user get auth in TP 3- He wants to open an item 4- A message is displayed asking him to sync new and old passwords ### Expected behaviour Log in and view passwords ### Actual behaviour Repeatedly prompted with a message that "Your authentication password has been changed in your AD since you last get logged in in Teampass. We need to adapt your encryption key. Please provide your previous password and the current one." Entering the correct AD passwords results in a "This password is not correct message". ### Server configuration **Operating system**: Linux tp-app1.tudelft.nl 4.18.0-553.22.1.el8_10.x86_64 #1 SMP **Web server:** Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k **Database:** 5.5.5-10.3.39-MariaDB **PHP version:** 7.4.33 **Teampass version:** 3.0.0.22 **Teampass configuration file:** ### Page on which it happened ### Steps to reproduce 1. 2. 3. ### Expected behaviour Tell us what should happen ### Actual behaviour Tell us what happens instead ### Server configuration **Operating system**: Linux tp-app1.tudelft.nl 4.18.0-553.22.1.el8_10.x86_64 #1 SMP Wed Sep 11 18:02:00 EDT 2024 x86_64 **Web server:** Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k **Database:** 5.5.5-10.3.39-MariaDB **PHP version:** 7.4.33 **Teampass version:** 3.0.0.22 **Teampass configuration file:** ``` 'max_latest_items' => '10', 'enable_favourites' => '1', 'show_last_items' => '1', 'enable_pf_feature' => '0', 'log_connections' => '1', 'log_accessed' => '1', 'time_format' => 'H:i:s', 'date_format' => 'd-m-y', 'duplicate_folder' => '1', 'item_duplicate_in_same_folder' => '1', 'duplicate_item' => '1', 'number_of_used_pw' => '3', 'manager_edit' => '1', 'cpassman_dir' => '/var/www/html/TeamPass', 'cpassman_url' => 'https:// 'favicon' => 'https:///favicon.ico', 'path_to_upload_folder' => '/var/www/html/TeamPass/upload', 'path_to_files_folder' => '/var/www/html/TeamPass/files', 'url_to_files_folder' => 'https:///files', 'activate_expiration' => '0', 'pw_life_duration' => '0', 'maintenance_mode' => '0', 'enable_sts' => '0', 'encryptClientServer' => '1', 'cpassman_version' => '3.0.0.20', 'ldap_mode' => '1', 'ldap_type' => 'ActiveDirectory', 'ldap_suffix' => '0', 'ldap_domain_dn' => '0', 'ldap_domain_controler' => '0', 'ldap_user_attribute' => 'samaccountname', 'ldap_ssl' => '1', 'ldap_tls' => '0', 'ldap_elusers' => '0', 'ldap_search_base' => '0', 'ldap_port' => '636', 'richtext' => '0', 'allow_print' => '0', 'roles_allowed_to_print' => '0', 'show_description' => '1', 'anyone_can_modify' => '0', 'anyone_can_modify_bydefault' => '0', 'nb_bad_authentication' => '0', 'utf8_enabled' => '1', 'restricted_to' => '0', 'restricted_to_roles' => '0', 'enable_send_email_on_user_login' => '0', 'enable_user_can_create_folders' => '1', 'insert_manual_entry_item_history' => '0', 'enable_kb' => '0', 'enable_email_notification_on_item_shown' => '0', 'enable_email_notification_on_user_pw_change' => '0', 'custom_logo' => '', 'custom_login_text' => '', 'default_language' => 'english', 'send_stats' => '0', 'send_statistics_items' => 'stat_country;stat_users;stat_items;stat_items_shared;stat_folders;stat_folders_shared;stat_admins;stat_managers;stat_ro;stat_mysqlversion;stat_phpversion;stat_teampassversion;stat_languages;stat_kb;stat_suggestion;stat_customfields;stat_api;stat_2fa;stat_agses;stat_duo;stat_ldap;stat_syslog;stat_stricthttps;stat_fav;stat_pf;', 'send_stats_time' => '1662276744', 'get_tp_info' => '1', 'send_mail_on_user_login' => '0', 'nb_items_by_query' => 'auto', 'enable_delete_after_consultation' => '0', 'enable_personal_saltkey_cookie' => '0', 'personal_saltkey_cookie_duration' => '31', 'email_smtp_server' => '' 'email_smtp_auth' => '', 'email_auth_username' => '' 'email_auth_pwd' => '' 'email_port' => '25', 'email_security' => 'tls', 'email_server_url' => '', 'email_from' => '' 'email_from' => '' 'pwd_maximum_length' => '40', 'google_authentication' => '1', 'delay_item_edition' => '0', 'allow_import' => '1', 'proxy_ip' => '' 'proxy_port' => '', 'upload_maxfilesize' => '10mb', 'upload_docext' => 'doc,docx,dotx,xls,xlsx,xltx,rtf,csv,txt,pdf,ppt,pptx,pot,dotx,xltx', 'upload_imagesext' => 'jpg,jpeg,gif,png', 'upload_pkgext' => '7z,rar,tar,zip', 'upload_otherext' => 'sql,xml', 'upload_imageresize_options' => '1', 'upload_imageresize_width' => '800', 'upload_imageresize_height' => '600', 'upload_imageresize_quality' => '90', 'use_md5_password_as_salt' => '0', 'ga_website_name' => 'TeamPassTUDelft', 'api' => '0', 'subfolder_rights_as_parent' => '1', 'show_only_accessible_folders' => '1', 'enable_suggestion' => '1', 'otv_expiration_period' => '7', 'default_session_expiration_time' => '480', 'duo' => '0', 'enable_server_password_change' => '0', 'ldap_object_class' => '0', 'bck_script_path' => '/var/www/html/TeamPass/backups', 'bck_script_filename' => 'bck_teampass', 'syslog_enable' => '0', 'syslog_host' => '' 'syslog_port' => '514', 'manager_move_item' => '0', 'create_item_without_password' => '1', 'otv_is_enabled' => '0', 'agses_authentication_enabled' => '0', 'item_extra_fields' => '0', 'saltkey_ante_2127' => 'none', 'migration_to_2127' => 'done', 'files_with_defuse' => 'done', 'timezone' => 'Europe/Amsterdam', 'enable_attachment_encryption' => '1', 'personal_saltkey_security_level' => '50', 'ldap_new_user_is_administrated_by' => '0', 'disable_show_forgot_pwd_link' => '0', 'offline_key_level' => '0', 'enable_http_request_login' => '0', 'ldap_and_local_authentication' => '0', 'secure_display_image' => '1', 'upload_zero_byte_file' => '0', 'upload_all_extensions_file' => '0', 'bck_script_passkey' => '' 'admin_2fa_required' => '0', 'password_overview_delay' => '4', 'copy_to_clipboard_small_icons' => '1', 'duo_ikey' => '' 'duo_skey' => '' 'duo_host' => '' 'duo_failmode' => 'secure', 'teampass_version' => '', 'roles_allowed_to_print_select' => '', 'clipboard_life_duration' => '30', 'mfa_for_roles' => '[]', 'tree_counters' => '0', 'settings_offline_mode' => '0', 'settings_tree_counters' => '0', 'enable_massive_move_delete' => '0', 'email_debug_level' => '0', 'ga_reset_by_user' => '', 'onthefly-backup-key' => '' 'onthefly-restore-key' => '' 'ldap_user_dn_attribute' => 'distinguishedname', 'ldap_dn_additional_user_dn' => '', 'ldap_user_object_filter' => '(memberOf=CN=App_Teampass,OU=Beheer,OU=Groups,OU=Resources,DC=tudelft,DC=net)', 'ldap_bdn' => 'OU=MDS,DC=tudelft,DC=net', 'ldap_hosts' => '' 'ldap_password' => '' 'ldap_username' => 'CN=_sa-teampass-ldap,OU=Service Accounts,OU=Back Office,OU=Support Accounts,DC=tudelft,DC=net', 'api_token_duration' => '60', 'enable_tasks_manager' => '0', 'task_maximum_run_time' => '300', 'tasks_manager_refreshing_period' => '20', 'maximum_number_of_items_to_treat' => '100', 'ldap_new_user_role' => '', 'ldap_tls_certifacte_check' => 'LDAP_OPT_X_TLS_NEVER', 'can_create_root_folder' => '1', ``` **Updated from an older Teampass or fresh install:** ### Client configuration **Browser:** - Edge **Operating system:** - bits Windows 10 ### Logs #### Web server error log ``` - () ``` #### Teampass 10 last system errors ``` ``` #### Log from the web-browser developer console (CTRL + SHIFT + i) ``` Insert the log here and especially the answer of the query that failed. ``` **Updated from an older Teampass or fresh install:** PLEASE attach to this issue the file `/includes/config/tp.config.php`. ### Client configuration **Browser:** **Operating system:** ### Logs #### Web server error log ``` Insert your webserver log here ``` #### Log from the web-browser developer console (CTRL + SHIFT + i) ``` Insert the log here and especially the answer of the query that failed. ```
corentin-soriano commented 4 days ago

This issue will be fixed by https://github.com/nilsteampassnet/TeamPass/commit/12f7eca967d421d1e2b0ec0522316e10a03db1f3 and https://github.com/nilsteampassnet/TeamPass/commit/aad0401609aeddc16e40da6d3e906a97fcb575c0.

However you need manual action to repair your account. You need to restore your personal keys or re generate them (re generation will clear all passwords on your personnal folder, so it's better to restore them).

How to do this: image image

Or leave fields empty and check the checkbox to generate new keys (can take few minutes to prepare your account).