Bug 35898

Summary:	Database update for encrypting vendor_edi_account passwords can be run twice
Product:	Koha	Reporter:	Liz Rea <wizzyrea>
Component:	Database	Assignee:	Bugs List <koha-bugs>
Status:	NEW ---	QA Contact:	Testopia <testopia>
Severity:	enhancement
Priority:	P5 - low	CC:	wizzyrea
Version:	Main
Hardware:	All
OS:	All
Change sponsored?:	---	Patch complexity:	---
Documentation contact:		Documentation submission:
Text to go in the release notes:		Version(s) released in:
Circulation function:

Description Liz Rea 2024-01-24 17:23:36 UTC

Bug 30649 introduced encrypted edi vendor account passwords, and was backported into 22.11.07. If a library upgraded through 22.11.07 (i.e. got the database update), and eventually upgraded through to 23.05.07, it is very possible this database update will be run twice, re-encrypting the already encrypted passwords.

These were the affected db revisions:

 installer/data/mysql/db_revs/221106001.pl => installer/data/mysql/db_revs/221200041.pl


This bug is meant to document this phenomenon.

Comment 1 Liz Rea 2024-01-25 14:52:37 UTC

There are two solutions:

Procure the original passwords from the EDI vendor
Restore the passwords from a recent backup - don't try to replace them, update the passwords with update statements. You'll want the encrypted string from the password field in the vendors_edi_accounts table.