modx Revo 2.2.1-pl
Linux/Apache
Mysql 5.1.56
PHP 5.3.10
I tried to login today, to wrap up the last bit of a current project, and my manager login said it couldn't find my user! After blowing through all the usual suspects, reset password links that didn't work, repairing the db, manual and scripted clearing of cache, increasing available memory, resetting apache, mysql, and ssh servers... (hours by now), I looked a little closer at the _users table. My salt, cachepwd and password hashes didn't look right! After a closer look (mind that I haven't manually changed anything in the db except to un-block myself once), the password patterns and length seemed to match what the salt SHOULD be, the cachepwd didn't look PBKDF2, and the salt looked closer to a PBKDF2 password hash... here's where it gets fun. Total and complete shot in the dark, I figured if my salt wasn't matching that would explain everything else not working, so swapped the password, and salt fields, and cleared the cachepwd field, clicked the forgot password link, and BAM! Back in business!
Before you get to thinking about it, let me reiterate, I've never manually changed anything in the db except the 'blocked' and 'blocked until' fields, and i don't miskey usernames and passwords. I use an application that auto fills my login from another hashed db field, and it still contains the same password it did yesterday, and since changing my password back to it, via the mgr, it works just fine. I'm completely stupified by how this could happen. I'm sure it's some strange combination of some unknown somethings either I or the host or some combination did that mixed things up, and nothing sinister or broken, but still... weird. Anyway, on the offchance that it is something that needs to be looked at I thought I'd share.
Anyone else experienced a manager lockout, and found this to be the answer?
