Bug 35898 - Database update for encrypting vendor_edi_account passwords can be run twice
Summary: Database update for encrypting vendor_edi_account passwords can be run twice
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Database (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-01-24 17:23 UTC by Liz Rea
Modified: 2024-01-25 14:52 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Liz Rea 2024-01-24 17:23:36 UTC 
Bug 30649 introduced encrypted edi vendor account passwords, and was backported into 22.11.07. If a library upgraded through 22.11.07 (i.e. got the database update), and eventually upgraded through to 23.05.07, it is very possible this database update will be run twice, re-encrypting the already encrypted passwords.

These were the affected db revisions:

 installer/data/mysql/db_revs/221106001.pl => installer/data/mysql/db_revs/221200041.pl


This bug is meant to document this phenomenon.





Comment 1 Liz Rea 2024-01-25 14:52:37 UTC 
There are two solutions:

Procure the original passwords from the EDI vendor
Restore the passwords from a recent backup - don't try to replace them, update the passwords with update statements. You'll want the encrypted string from the password field in the vendors_edi_accounts table.