Hi Folks,
We have just adjusted our modules to be the appropriate version for 3.10.3 and have noticed that after the upgrade some of the user accounts were made under construction. We have noticed this with previous versions…
(The root user was unaffected).
Does anyone know why this has occurred, or did we miss some steps here?
Thanks,
Anthony :blink:
Three invalid login attempts will set a user to be under-construction. Can you rule this out as a possibility for these users?
[quote]Three invalid login attempts will set a user to be under-construction. Can you rule this out as a possibility for these users?
[right][post=“14021”]<{POST_SNAPBACK}>[/post][/right][/quote]
Yup, one of the accounts was my account. 
A
[quote]Yup, one of the accounts was my account.
[right][post=“14061”]<{POST_SNAPBACK}>[/post][/right][/quote]
Did they all go Under Construction, or you just weren’t able to login? Sometimes when moving a system from one server to another, the MD5 salt changes so that passwords are no longer valid. This could then result in a three-strikes-you’re-out switch to Under Construction.
[quote]Did they all go Under Construction, or you just weren’t able to login? Sometimes when moving a system from one server to another, the MD5 salt changes so that passwords are no longer valid. This could then result in a three-strikes-you’re-out switch to Under Construction.
[right][post=“14065”]<{POST_SNAPBACK}>[/post][/right][/quote]
No migration occured we simply added in the commercial/premuim module sets…Also it is not all the System Administrator accounts, only some.
A
[quote]No migration occured we simply added in the commercial/premuim module sets…Also it is not all the System Administrator accounts, only some.
[right][post=“14070”]<{POST_SNAPBACK}>[/post][/right][/quote]
Can you check the logs for those assets to see if there is a record of the status change?
[quote]Can you check the logs for those assets to see if there is a record of the status change?
[right][post=“14076”]<{POST_SNAPBACK}>[/post][/right][/quote]
Here is the log entries surrounding the account locking…
[2007-01-16 14:59:50][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 14:59:59][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:02][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:10][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:15][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:25][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:30][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:39][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:41][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:43][12:Root User][1024:mysource notice][ ] [install.package.success - ] (Install) - %package_name% Package Installed Succesfully
[2007-01-16 15:00:49][12:Root User][1024:mysource notice][ ] [install.prefs - ] (Install) - Global Preferences Done
[2007-01-16 15:00:49][12:Root User][1024:mysource notice][ ] [install.event_listeners - ] (Install) - Event Listeners Done
[2007-01-16 15:01:45][7:Public User][1024:mysource notice][ ] [system.security.login.failed - remote_addr:;sessionid:a67209cf482221798246454fd6efe519;] (User Login Failed) - User "s997630" failed to login (Invalid username or password entered)
[2007-01-16 15:01:48][7:Public User][1024:mysource notice][ ] [system.security.login.failed - remote_addr:;sessionid:a67209cf482221798246454fd6efe519;] (User Login Failed) - User "s997630" failed to login (Invalid username or password entered)
[2007-01-16 15:02:02][12:Root User][1024:mysource notice][ ] [asset.status - assetid:212;] (Asset Status Changed) - The status of "Aleks Bochniak" was successfully changed from "Live" to "Under Construction"
[2007-01-16 15:02:02][7:Public User][1024:mysource notice][ ] [system.security.locked - remote_addr:;sessionid:a67209cf482221798246454fd6efe519;] (User Account Locked) - User "Aleks Bochniak (Id: #212)" has had their account locked after 3 unsuccessful login attempts
[2007-01-16 15:02:02][7:Public User][1024:mysource notice][ ] [system.security.login.failed - remote_addr:;sessionid:a67209cf482221798246454fd6efe519;] (User Login Failed) - User "s997630" failed to login (Invalid username or password entered)
[2007-01-16 15:02:29][7:Public User][1024:mysource notice][ ] [system.security.login.failed - remote_addr:;sessionid:a67209cf482221798246454fd6efe519;] (User Login Failed) - User "root" failed to login (Invalid username or password entered)Please note that a number of accounts were set to under construction and no entry is in the log file of people trying to access these accounts. However I can see entries where I logged in as root and changed them to Live.
Also the install package log entries seem to record a keyword not the actual package name (ie: %package_name% Package Installed Succesfully)......
Funny thing is that no one logged in as root to do this.....
A
You are getting login failures, though – that's why Matrix set the user accounts under construction. Can you check the Apache logs for that period to determine where the login attempts were coming from?