App/device password missing, probably after some upgrade

[blizzz]

I used to have a device password for my mobile. After going to todays daily it is missing on the list on the personal page and my phone asks me to update the account, i.e. the device password is apparently lost. On the internal instance. Name for the device password probably contained "jolla c", or at least "jolla", unknown case.

@LukasReschke

[MorrisJobke]

For me it's there on master. Could you checkout if this is also missing on master?

[blizzz]

@MorrisJobke can't, @LukasReschke will check whether the password is indeed gone from the DB later.

[MorrisJobke]

And on current daily I also see the entry :(

[blizzz]

It seems it is a bit more stange. I combed through the logs.

Upgrade from 9.1.1.5 to 11.0.0.2 was done this morning at 9.21.36 am, but at this point of time the issue was already present.

The first failed login was recoded at 21:17:03 yesterday.

What happened previously? A couple of updates, but one that was before this occurence.

{"reqId":"yAO4fDJIrmKne6smAHds","remoteAddr":"","app":"core","message":"starting upgrade from 9.1.1.5 to 9.1.1.5","level":0,"time":"2016-11-23T21:16:51+00:00","method"
:"--","url":"--","user":"--"}
…

However none of the recorded UPDATE database statements were related. No DELETE statement was recorded.

[LukasReschke]

What happened previously? A couple of updates, but one that was before this occurence.

Yesterday I updated the spreed app quite some time so that triggered some update routines to run. No server update was involved yesterday.

[blizzz]

I went down the log until <6pm yesterday, but could not spot anything suspicious.

[MorrisJobke]

Yesterday I updated the spreed app quite some time so that triggered some update routines to run. No server update was involved yesterday.

Maybe there is a malicious repair step? Is the entry dropped from the database for your app password?

[MorrisJobke]

This is then maybe related to #2299 (comment)

[blizzz]

Maybe there is a malicious repair step? Is the entry dropped from the database for your app password?

I assume so, but have no access to the DB.

[rullzer]

Maybe it is just related to #2431

[blizzz]

@rullzer yes, that might be it

[ChristophWurst]

@blizzz which user back end was used? Was it an external one like in #2431 (comment)?

[blizzz]

@ChristophWurst yes, LDAP

[nickvergessen]

Closing in favor of #2431 then