Initial Password Setup Not Working

Description

Upon initial deployment, Lucee Admin now requires the password to be set via "password.txt" in lucee-server/context.

I can place the file there, import, and Lucee does update the lucee-server.xml with hspw and salt attributes on the cfLuceeConfiguration tag, but the password set in password.txt does not work.

I've tried using different text editors with different line endings, no line endings, and nothing will let me set the initial password to something that is recognized by Lucee admin.

The only way I've been able to get into Lucee admin was to take an old config's <cfLuceeConfiguration tag and apply that to the default conf of the new install.

Environment

Tomcat 8.5.4.5 + Java 1.8.0_211
Tomcat 9.0.24 + OpenJDK version "12.0.2" 2019-07-16
Ubuntu 18.04 - Linux 4.15.0-58-generic #64-Ubuntu SMP Tue Aug 6 11:12:41 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

Fresh installation using Lucee WAR (5.3.3.62, 5.3.5.3-SNAPSHOT)

Activity

Show:
Jamie Jackson
November 8, 2019, 6:55 PM

I guess I’m already used to (docker) secrets being space/newline sensitive, which is why my test cases had echo -n (no newline).

Adam Simons
November 12, 2019, 2:37 PM

The lucee-server.xml is default “out of the box” with the exception of the extensions installed via LUCEE_EXTENSIONS= during initial deployment.

 

password.txt:

letmein

 

Adam Simons
November 12, 2019, 2:48 PM

So, setting the password in the following way works:

echo -n “passwordIWantToUse” > password.txt

If I use any text editor (notepad, notepad++, Geany, etc), even without adding a newline at the end, the password doesn’t seem to be recognized after import.

Michael Offner
December 5, 2019, 4:29 PM

so does the fix in 5.3.4.64, 5.3.5.33 solve the issue for you or not?

Adam Simons
December 9, 2019, 9:20 PM

Just tested a build against 5.3.4.64 and yes, the password issue is solved.

Fixed

Assignee

Michael Offner

Reporter

Adam Simons

Priority

Blocker

Fix versions

Affects versions

Configure