Github user pdion891 commented on the issue:
https://github.com/apache/cloudstack/pull/1684
@abhinandanprateek I did replace the following 4 settings by the original
values. But after restarting jetty I'm unable to login, but this time the
behavior is a bit different, it look like it doesn't try to login, no log or
message in the UI.
```
update configuration set value=null where
name='user.password.encoders.exclude';
update configuration set value='SHA256SALT,MD5,LDAP,PLAINTEXT' where
name='user.authenticators.order';
update configuration set value=null where
name='user.authenticators.exclude';
update configuration set value='SHA256SALT,MD5,LDAP,PLAINTEXT' where
name='user.password.encoders.order';
```
Could it be possible the authentication order is not followed at the
login? if the password does not meet ``PBKDF2`` requirement, which is the first
in the order list of 4.9.0, shouldn't try with the next encoder in the list and
so on?
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---