tbenyon

Hi @ygleby,

I don’t believe it currently does. I’m not familiar with this one.

If you can give me some example PHP to show me how to verify your hash I may be able to integrate it into the plugin.

How is the salt stored for your passwords?

Thanks,

Tom

Hi @matrixmedia,

Apologies for the long delay in getting back to you.

This is a great question. The plugin does not support password recovery at the moment but I can definitely add this to my list of requested features for the future. Won’t be added any time soon I’m afraid though.

I would welcome you to add this feature to the plugin?
The hook that would be used is here:
https://developer.wordpress.org/reference/hooks/password_reset/

The new password would be saved with a DB query to the external database at this point.

If you did want to add this feature to the plugin you could make a pull request here:
https://github.com/tbenyon/wordpress_external_login_plugin

Thanks,

Tom

Hey @pmartinezc,

Really sorry for the delayed reply.

I’ve just attempted to replicate this bug for you.
I used the following passwords for testing:
Starting password:
– Plain text (password1)
– Hash ($P$BJkC.Isz7DOxteQmKpKYfr26Qds.sT/)

Modified password:
– Plain text (passwordnew)
– Hash ($1$zo2d0s91$HQ5fN81Sbb36RoY97e2zx.)

Steps I went through:

1. deactivate migration mode and set both my external db password and WordPress password for my user to password1’s hash
2. change password on wordpress database to passwordnew hash
3. try to login with new password
4. login fails
5. login with password1
6. login success
7. observe wordpress password has changed back to password1 hash
8. activate migration mode
9. change wordpress password to passwordnew hash in database
10. try logging in with old password
11. login failed
12. try logging in with new password
13. login succeeds

If you go through this process which step does it fail on?

Hey @pmartinezc,

Apologies for the delay again. Life’s busy at the moment 😛

It sounds like you’ve got all the right boxes ticked. However I have not made the plugin compatible with multi-site (nor have I ever used a multi-site WordPress setup before 😬).

I’m adding this feature to the top of my list of to dos and I will leave this conversation open so that I can update you when progress is made. Unfortunately this is not something I’m going to have time to look at for 6 weeks or so.

In the meantime, you’re welcome to look into the plugin and see if you can build compatibility yourself. There is a git repo for the plugin and I welcome pull requests. 😊

Sorry I can’t help you sooner but I just don’t have the capacity to do it at the moment.

Tom

Hey @pmartinezc,

Sorry for being so slow to reply. I’m putting a new kitchen in at home which is consuming a lot of time at the moment 😛

If I turn Migrate Mode On –> I can log in with my local Admin user and external users from a SQL Server database can log in too. But if an external user changes his password it´s not updated in the local WordPress database, resulting in login errors (because it’s checking the local user first and the stored password is the old one).

This sounds right. This is the designed behaviour as the idea of the migration was that users are no longer using the old database and are only being migrated over to the new site that you’re using. It essentially makes the new WordPress database the center of truth but if the user does not currently exist it will try and retrieve the data from the database you’re trying to migrate from. Hope that makes sense 😛

If I turn Migrate Mode off –> External users can log in and if they happen to change their password it´s successfully updated in the local WordPress database (I guess it might update any other field such as name or email). But the problem here is: my local Admin user can´t log in, so I lose entirely the website´s control. It seems like only the external database was checked and the local database was ignored.

This does not sound like the expected behaviour. Unless you have ticked the ‘Disable Local Login’ box.
“Tick this box if you want to disable the login attempt with the WordPress Database if the external login fails. This will only take effect if External Login is enabled.”

Can you check this and if this is not the issue I’ll see if I can replicate the problem locally.

Thanks @pmartinezc, and apologies again for the delay in getting back to you!

Tom

Thanks for taking the time to write a review @raider1967,

Much appreciated 🙂

Good luck with your project!

Tom 🙂

One more thing @raider1967,

Looks like this is a pretty generic errors and going to be hard to work with. Can you get access to your PHP error logs and see if there is anything relevant in there?

Thanks,

Tom