nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Alfresco 3.2 and changing the password for the Admin user

mwildam

When I change the default password of the Admin user through the web client I get the error on Alfresco server startup:
Exception from executeScript - redirecting to status template error: 06170004 Login failed
org.alfresco.web.scripts.WebScriptException: 06170004 Login failed

Complete error message:

11:11:24,781  ERROR [web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 06170004 Login failed
org.alfresco.web.scripts.WebScriptException: 06170004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

As soon as I change the password back to the default "admin" the error disappears. I tried to find out where this password is hardcoded but I can't find and the error message unfortunately does not tell me which script is failing here. Anybody knows where I have to change the password in addition to changing it through the web client?

Find more posts tagged with

Comments

_sax

In former versions, I could simply remove admin from the list of admins in custom-authorities.xml, so the imposed 'security threat' was gone. With 3.2, the option passthru.authentication.defaultAdministratorUserNames= doesn't contain anything. So I, too, would be interested in a way to change the admin user's password.
Should this better be raised in JIRA?

mwildam

So far I was not able to fix this. Nobody has an idea?

dward

I've logged this in JIRA because it needs improving. In future, don't be shy about logging an issue yourself.

https://issues.alfresco.com/jira/browse/ETHREEOH-2603

Thanks

Dave

dward

Something that might help diagnose where the problem is. Try putting this line in log4j.properties and the paths of each invoked webscript will be logged.

log4j.logger.org.alfresco.web.scripts.AbstractWebScript=debug‍

mwildam

I already tried to get more detailed information into the logs without success. Thanks for creating the issue. I simply do feel too much beginner and tend to think that I missed something rather than discovering a bug. Will have more courage in the future.

mikeh

Hi Martin

Which webapps do you have deployed?

Thanks,
Mike

mwildam

I have installed the standard client, share and studio - if you mean that. Unfortunately the tomcat is locked down so I cannot look into the administration if there is something more I am not aware of.

mwildam

Probably it is Studio because when trying to login to studio using a wrong password I get a very similar error message.

But trying to login to Studio I got another message declared as info:

14:43:09,703  INFO  [web.site.FrameworkHelper] Reset Web Scripts Registry; registered 101 Web Scripts.  Previously, there were 101.
14:43:10,062  INFO  [web.site.FrameworkHelper] Invalidated Object Cache‍‍

dward

Please just edit $TOMCAT_HOME/webapps/alfresco/WEB-INF/classes/log4.properties as requested and let us know what scripts are being called when you see the error?

mwildam

Oh, I have seen that this entry was missing in the log4j.properties file. I was assuming it was on of the existing ones and those I already tried putting to debug value. Here is the debug output:

[…]
INFO: Starting Coyote HTTP/1.1 on http-8080
03.08.2009 15:06:57 org.apache.catalina.startup.Catalina start
INFO: Server startup in 283175 ms
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Initialised Web Script Servlet (authenticator='webscripts.authenticator.basic')
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Processing request (GET) http://localhost:8080/alfresco/s/avmstore/listpattern/alfresco/site-webscripts?s=sitestore&m=*.desc.xml&guest=true
15:06:57,515  DEBUG [scripts.servlet.WebScriptServlet] Processing request (POST) http://localhost:8080/alfresco/s/api/login
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] (Runtime=ServletRuntime, Container=Repository) Processing script url (POST) /api/login
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] (Runtime=ServletRuntime, Container=Repository) Processing script url (GET) /avmstore/listpattern/alfresco/site-webscripts
15:06:57,531  DEBUG [web.scripts.DeclarativeRegistry] Web Script index lookup for uri /avmstore/listpattern/alfresco/site-webscripts took 2.728ms
15:06:57,531  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: null
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] Agent: null
15:06:57,531  DEBUG [web.scripts.AbstractRuntime] Invoking Web Script org/alfresco/webframework/avmstore.get (format [undefined], style: argument,default: null)
15:06:57,546  DEBUG [web.scripts.DeclarativeRegistry] Web Script index lookup for uri /api/login took 1.200432ms
15:06:57,546  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: application/json
15:06:57,546  DEBUG [web.scripts.AbstractRuntime] Agent: null
15:06:57,546  DEBUG [web.scripts.AbstractRuntime] Invoking Web Script org/alfresco/repository/login.post (format json, style: any, default: json)
15:06:57,734  DEBUG [web.scripts.DeclarativeWebScript] Caught exception; decorating with appropriate status template : org.alfresco.web.scripts.WebScriptException: 07030004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
15:06:57,750  DEBUG [web.scripts.AbstractRuntime] Web Script org/alfresco/repository/login.post executed in 209.39757ms
15:06:57,750  ERROR [web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 07030004 Login failed org.alfresco.web.scripts.WebScriptException: 07030004 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
15:06:57,750  DEBUG [scripts.servlet.WebScriptServletRequest] Content Type: application/json
15:06:58,156  DEBUG [web.scripts.AbstractWebScript] Caching template /json.status.ftl for web script org/alfresco/repository/login.post and status 403 (format:json)
15:06:58,156  DEBUG [web.scripts.AbstractRuntime] Force success status header in response: false
15:06:58,156  DEBUG [web.scripts.AbstractRuntime] Sending status 403 (Template:/json.status.ftl)
15:06:58,171  DEBUG [web.scripts.AbstractRuntime] Rendering response: content type=application/json
15:06:58,171  DEBUG [scripts.servlet.WebScriptServletResponse] Cache - set response header Cache-Control: no-cache
15:06:58,171  DEBUG [scripts.servlet.WebScriptServletResponse] Cache - set response header Pragma: no-cache
15:06:58,234  DEBUG [web.scripts.AbstractRuntime] Processed script url (POST) /api/login in 706.2881ms
15:06:58,250 User:guest DEBUG [web.scripts.AbstractRuntime] Web Script org/alfresco/webframework/avmstore.get executed in 717.5051ms
15:06:58,265 User:guest DEBUG [web.scripts.AbstractRuntime] Processed script url (GET) /avmstore/listpattern/alfresco/site-webscripts in 729.8176ms
[…]‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

_sax

To answer my own question:
To disallow the admin user it's name-implied rights, one just needs to remove it from the administrators group in the admin console.
Be sure to add someone else before, or edit in the line passthru.authentication.defaultAdministratorUserNames= in your alfresco-global.properties, if you use passthru to authenticate.

mwildam

I assume in disabling the admin would even cause the error message as it seems that something here wants to login with admin. Did you test that?

_sax

Actually, yes, that should provoce the error. But since we only use the classic JSP-Webclient and Webscripts, this is of no immediate concern to us, because the error seems to stem from somewhere else. Actually, as soon, as I now try to logon to share, "your" error appears in the logs.

11:44:46,896 DEBUG [org.alfresco.passthru.auth] Authenticate user=admin via local credentials
11:44:46,897 DEBUG [org.alfresco.passthru.auth] Authenticate org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@5fa6e7d9: Username: admin; Password: [PROTECTED]; Authenticated: false; Details: null; Not granted any authorities via token
11:44:47,233 DEBUG [org.alfresco.passthru.auth] Authenticated token=org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@5fa6e7d9: Username: admin; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_AUTHENTICATED
11:44:56,466 ERROR [org.alfresco.web.site.servlet.DispatcherServlet] java.lang.OutOfMemoryError: PermGen space
11:46:09,395 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] Detected first UserTransaction which is being garbage collected without a commit() or rollback()
11:46:09,395 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] Logging of transaction call stack is now enabled and will affect performance
11:47:31,772 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] UserTransaction being garbage collected without a commit() or rollback(). NOTE: Prior to transaction call stack logging.

Following this is a somehow crashed Alfresco.
After restarting, as soon as I add the admin user back to the Administrators group, a Share logon is flawless.
So, it's exactly the same here.

mikeh

java.lang.OutOfMemoryError: PermGen space‍
So, it's exactly the same here.

Hmm… no, looks like a different error in your case.

Mike

_sax

ops: Doubled the permgen space and now Share works without the admin user in "its" group.

alexandre

Sorry for bothering, I encountered the same problem today.
As far as I recently started playing with Alfresco, the admin user is the only user in the system.
Are there any ways to rollback the admin password or to somehow find another workaround?
Thank you

UPD: The same exception occurs if you manually disable the admin account via the web-interface (although it is not that critical in this case, because the site is available for other user accs)

_sax

If you logon using your new admin's password, you should be able to change that like every other user can. The User details option in the headline of the webclient is the right place to do that.

newmember

So I tried to change my admin password and ran into errors.
What is the solution for changing the admin password?

I started looking for where the admin password might be hardcoded, and then thought I might be going down a wrong path.

00:18:13,983 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 07040005 Login failed
org.alfresco.web.scripts.WebScriptException: 07040005 Login failed
        at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:81)
        at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
        at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
        at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
        at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
        at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
        at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
        at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
        at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
        at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

newmember

We removed studio from the production server and that removed the admin password error we have in our log files.
We left studio on the dev lab server.

Cheers