EA 12.1 passwords do not work

[JayHollingsworth]

We have been using EA 11 in the cloud for while and it has been more or less working OK. We have upgraded some of our users to EA 12.1, so we have a mixed environment, if that's important.

Yesterday I created a new cloud database and transferred a project up there and it all looks OK.

I enabled security and created a couple of users and they look to be ok.

But, there isn't any way to give anyone a password. If I login as admin and change someone's password (using Project Security->Security->Manage Users) to something other than null that username can no longer login. If I go back into Manage Users and change the password for that user back to null, they can login again with a null password.

If the user is not an administrator but has the Change password rights they can use their null password and go into the Project Security->Security->Change Password dialog and give themselves a password.

If the user is an administrator they can log in with their null password but if they change it to something other than null (in either Project Security->Security->Change Password or Project Security->Security->Manage Users) they cannot log in with that password and they're stuck. Admin has to delete the user and re-create it with a null password.

Interestingly, admin itself can only use the Project Security->Security->Change Password dialog but not the Project Security->Security->Manage Users dialog to change its own password.

Basically I can't roll out this cloud database to our user community with all the Administrator passwords (except admin) set to null.


I'm not so impressed with 12.1 at this point.

[Aaron B]

There was a change introduced in EA 11 to the way passwords are saved in the repository.  Which specific build(s) of EA are you using?  If a password was set using EA 12.1 for example and then that user tries to login with EA 10 (or possibly an early build of EA 11), it will fail.

Edit: Just realised you were talking about using a cloud repository, which would mean all users are running EA 11 or higher already and therefore my first guess above would likely not be relevant.  Sorry.  Are you setting the password and then trying to login as a different user with the same EA installation and exact same cloud repository connection?  What authentication settings are configured in your Cloud Service?  E.g. Is it using MODEL_AUTHENTICATION or GLOBAL_AUTHENTICATION?  Are you using Active Directory / Windows Authentication?

[JayHollingsworth]

Thanks for the reply

I login as admin to a project, then go to Project Security->Security->Manage Users to do this. I don't use the Login As Another User functionality, just to make sure things are saved. I then close the project (which presumably logs me out of the connection) and re-connect to the project using the credentials of the user I just created.

Further experimentation over the weekend showed that the passwords may work if I RDP into the cloud server and use the copy of EA we have placed there to create the passwords and alter them. Someone else thought about this particular wrinkle so I don't know the details.

So the problem may be with the way the change password functionality works remotely rather than locally on the cloud machine.

But users (and even users with administrator EA rights) can't be expected to be able to log onto the cloud virtual machine.

We aren't using Active Directory for this, largely because most of our users are not in our company so they would have many different domains.

And MODEL_AUTHENTICATION=1 in SSCloudServices.config



Thanks for any ideas...