Debian3.1 apt-get upgrade WARNING - ZM login disabled

[Lager Monster]

I have been running zoneminder 1.22.1 on Debian3.1 for over a year with no problems.
Yesterday I ran apt-get upgrade and can no longer log in - it will not take my name and password.
ZM is running and capturing according to the logs.

APT-GET also broke. but I fixed that by adding

Code: Select all

APT::Cache-Limit "20971520";

to
/etc/apt/apt.conf.d/70debconf and cleaned my source.list

This may have been due to a messy source.list which was

Code: Select all

#deb file:///cdrom/ sarge main

#deb cdrom:[Debian GNU/Linux 3.1 r0 _Sarge_ - i386 Binary - APC DVD]/ unstable contrib main

deb http://security.debian.org/ testing/updates main contrib
deb http://dotdeb.pimpmylinux.org/ stable all
deb-src http://dotdeb.pimpmylinux.org/ stable all
deb http://ftp.belnet.be/debian/ stable main contrib non-free
deb http://packages.dotdeb.org stable all
deb-src http://packages.dotdeb.org stable all
deb http://ftp2.de.debian.org/debian/ stable main
deb-src http://ftp2.de.debian.org/debian/ stable main
deb http://security.debian.org/ stable/updates main

# Unstable
deb ftp://ftp.debian.org/debian/ unstable main non-free contrib

# Multimedia
deb http://www.debian-multimedia.org sarge main
deb http://www.geexbox.org/debian/ unstable main
deb http://download.videolan.org/pub/videolan/debian sid main
deb-src http://download.videolan.org/pub/videolan/debian sid main

#deb ftp://ftp.nerim.net/debian-marillat/ testing main
#deb http://www.spic.net/zoneminder/debian ./

# SystemImager
deb http://download.systemimager.org/debian stable main

#deb http://www.bunkus.org/debian/unstable/ ./
#deb-src http://www.bunkus.org/debian/unstable/ ./

Another cause may be due to a mySQL upgrade.

Anybody know a quick fix to the login problem?

[cordel]

The best thing you can do is start with your logs and see what errors are being presented.
Also check your apt-get logs to see what your previous versions of packages were and what you have upgraded to, most specifically of course mysql.

[Lager Monster]

I have managed to stop the user authentication option by changing the mysql value ZM_OPT_USE_AUTH text field from 1 to 0.

This gives me access to Zoneminder again and the options page (direct, no user login prompting).

I have experimented with the ZM_AUTH_RELAY value, changing it to plain and none values to no avail. I also dont see any users settings here any more, I guess that is only available once ZM_OPT_USE_AUTH is on (?)

At the end of the day it was easier for me to install and configure SSL and .htaccess basic security just to keep the server locked down.

What debugging options would you recommend I enable to dig deeper?
Are there any SQL DB authentication/error checking utils I could use?

Regards, LM

[PeterHoward]

A quick question - how was zoneminder originally installed? Manually? From the old SPIC debian package?

Are you sure you haven't suddenly picked up my package from unstable? I recently reworked the (broken) authentication in that package; the timing is "interesting".

[Lager Monster]

Hi Pete,
The original installation was manual using the tar ball. Dependencies were knocked on the head as they arose.

ZM was compiled on 4.06.06 (d.mm.yy) and was version 1.22.2
It still reports itself as 1.22.2

All *.php files in the zm directory have the date 4.06.06 so it seems nothing has been updated.

--
There are now Debian updates available since my last upgrade.
5 updates with nothing but stable entries in the sources.list
Adding deb ftp://ftp.debian.org/debian/ unstable main non-free contrib to the sources.list gives me 54 upgrades.
Not about to run any updates until I have time to fix anything else that may break. That will be maybe next year (tomorrow) depending on how I scrub up after tonights festivities
Happy new year to yers all.