Login | ERROR: Wrong key or corrupt data in AAAPASSWORD table
Wrong key or corrupt data issue:
User is facing issues in local authentication or failing in AD user import or receiving an internal error while editing or deleting the user profile from UI. First, go to the logs and check if the below error traces are present.
java.sql.SQLException: ERROR: Wrong key or corrupt data|
com.adventnet.persistence.DataAccessException: java.sql.SQLException: ERROR: Wrong key or corrupt data
at com.adventnet.persistence.internal.GetUtil.get(GetUtil.java:142)
at com.adventnet.persistence.internal.GetUtil.get(GetUtil.java:81)
at com.adventnet.persistence.DataAccess.get(DataAccess.java:1914)
at com.adventnet.persistence.DataAccess.get(DataAccess.java:1905)
1. If the error traces are present, run the following query, this query will return user logins that have SALT values of incorrect length in AAAPassword table. (versions greater than SDP 10.5 and AE 6.5)
select sdlogin.* from aaalogin sdlogin left join aaaaccount sdaccount on sdaccount.login_id = sdlogin.login_id left join aaaaccpassword sdaccpwd on sdaccpwd.account_id = sdaccount.account_id left join aaapassword sdpwd on sdpwd.password_id = sdaccpwd.password_id where length(sdpwd.salt) != 94 and length(sdpwd.salt) !=78;
2. If the query returns results, copy login Id from the query result and use it in the below update query. This update query will reset the password with correct SALT length. This query will reset the password as admin.
update AaaPassword set password='$2a$12$fZUC9IK8E/AwtCxMKnCfiu830qUyYB/JRhWpi2k1vgWLC6iLFAgxa', SALT=pgp_sym_encrypt('$2a$12$fZUC9IK8E/AwtCxMKnCfiu','SChar@123Mas!er','s2k-mode=1, cipher-algo=aes256'), algorithm='bcrypt' where password_id in (select ap.password_id from aaaaccpassword ap left join aaaaccount ac on ac.account_id=ap.account_id left join aaalogin al on al.login_id=ac.login_id where al.login_id in (<Login_ID>));
3. After executing the query, check whether the user is able to login and is getting successfully imported in AD import and able to edit the user profile from UI.
New to ADSelfService Plus?
Related Articles
SAML | Skip login page | Login directly with SAML | Query to enable AD or Local Auth during SAML issues
Issue: When users have AD and/or local authentication enabled along with SAML, the login page is shown when a link from an email is clicked and users need to click "Login with SAML" again. Workaround 1: You can bookmark, <sdp_url>/SamlRequestServlet ...CSRF login Issue
Issue: CSRF token mismatch during login. Trace: [07:01:21:901]|[10-05-2021]|[com.adventnet.servicedesk.authentication.internal.LoginUtil]|[INFO]|[69]: Invalid login CSRF token provided ::: sessionToken : null; cookieToken : ...SAML | ADFS troubleshooting and tips (Auto Login with ADFS in Intranet, mobile app user agent fix, etc.)
Tips: Steps to enable Auto-logon: Step 1: In the AD FS server, under Authentication Methods, make sure that Windows Authentication is selected. Step 2: Run the below powershell query to check if "Chrome" is present in the supported WIA agents: ...Query to Pull out Login and LogOut History and to Find User Status
Purpose To generate the report which contains Login and LogOut History of the users and to find out the user status currently. Query 1 Below query provides the users login and logout history of the users. SELECT au.first_name as ...What is Data Archiving ?
Data Archiving is a process where requests will be moved to the archived state (archived requests) and will be removed from the active requests list. In the database perspective, It will be just moved from workorder table to arc_workorder table in ...