Login impossible after upgrade to V3

[tosca]

I just upgraded from 2.11.6 to 3.0.0 and the installation of the new version seemed to have run smoothly except for this:

[attachment=0:7ymciy8q]ContaoV3.jpg[/attachment:7ymciy8q]

However, I cannot login to backend anymore. Even if I force-change the admin password using PhpMyAdmin, I'm able to log once, but the second time, the password doesn't work any longer (and now I have tried to reupgrade a second time from previous version, that doens't seem to work any longer).

In case that could help, here is the content of the localconfig file :

<?php

### INSTALL SCRIPT START ###
$GLOBALS['TL_CONFIG']['licenseAccepted'] = true;
$GLOBALS['TL_CONFIG']['websitePath'] = '';
$GLOBALS['TL_CONFIG']['installPassword'] = **deleted**;
$GLOBALS['TL_CONFIG']['encryptionKey'] = 'b4f10634a200c9ed3dd79681245bcfc6';
$GLOBALS['TL_CONFIG']['dbDriver'] = 'MySQL';
$GLOBALS['TL_CONFIG']['dbHost'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbUser'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbPass'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbDatabase'] = **deleted**;
$GLOBALS['TL_CONFIG']['dbPconnect'] = false;
$GLOBALS['TL_CONFIG']['dbCharset'] = 'UTF8';
$GLOBALS['TL_CONFIG']['dbPort'] = 3306;
$GLOBALS['TL_CONFIG']['installCount'] = 0;
$GLOBALS['TL_CONFIG']['adminEmail'] = **deleted**;
$GLOBALS['TL_CONFIG']['cron_monthly'] = 201211;
$GLOBALS['TL_CONFIG']['latestVersion'] = '2.11.6';
$GLOBALS['TL_CONFIG']['websiteTitle'] = 'Image Fixe';
$GLOBALS['TL_CONFIG']['rewriteURL'] = false;
$GLOBALS['TL_CONFIG']['inactiveModules'] = 'a:2:{i:0;s:9:"cfs_forum";i:1;s:14:"cfs_jquery_gui";}';
$GLOBALS['TL_CONFIG']['defaultUser'] = 1;
$GLOBALS['TL_CONFIG']['dateFormat'] = 'd-m-Y';
$GLOBALS['TL_CONFIG']['datimFormat'] = 'd-m-Y H:i';
$GLOBALS['TL_CONFIG']['uploadPath'] = 'tl_files';
$GLOBALS['TL_CONFIG']['checkFileTree'] = false;
### INSTALL SCRIPT STOP ###

It seems to me that the upgrade has not completely succeeded, but I have no idea how to solve that problem.
I tried to restore the previous version, and done the upgrade a second time, but the result is the same.
Any help on the matter would be very appreciated.

[tosca]

The issue seems to be related to the login procedure, that would change the password in the database!

In PhpMyAdmin, I can see that the content of the password field is modified when I login, so its value is not the right one the next time I try to login; if I change the password "normally" via the backend, I do get the message that the password has been changed, but I cannot login the next time.

I tried to create another admin, but he gets the same "illness": his password is never recognized unless I force it via PhpMyAdmin to a special recover value... and it is lost again the first time I login.

Doesn't this thing ring a bell for someone? Encryption issue, caching, sesssion... whatever?

[tosca]

In this page I read:

Improved password security thanks to a better hash algorithm

and this:

Changed
Contao now uses crypt() to generate stronger password hashes (see #3225).

in that one.

And this thread that seems to speak about possible incompatibilities, especially when upgrading, moving site, or depending on PHP version.

Could this be related?

[tosca]

I eventually solved the issue by following the procedure I've explained in that post.

[Rian]

I run into the same problem after upgrading to version V3, but was able to reset the password through phpmyadmin following the procedure from the FAQ page: https://contao.org/en/faq/i-have-lost-m ... sword.html

Worked like a dream, password was immediately reset.

[jimmy2]

was it sha1 before v3 then?

[xchs]

Yes, a salted SHA1 hash.