ODK Aggregate on App Engine password recovery and/or reset

Moving this thread (below) into the public forum. Background: Pushed ODK
Aggregate (don't know the version) to App Engine circa March 2014 and it
has been working flawlessly ever since. Promptly forgot the admin
password. Trying to get back in without destroying the existing database
and the config that pushes to Fusion Table (which is then read by another
App Engine app with a Google Earth Engine backend).

Last questions to Yaw:

There's only one entry in opendatakit._registered_users and it's me. Am I
correctly interpreting this entry to mean that the username (what I would
specify in the "Sign In with Aggregate Password" dialog) is
nicholas.clinton@gmail.com? Am I correct that between (failed) attempts I
need to close the browser? How do I discover the version?

Also happy to add you as an administrator to this instance, if by some
magic you can help me get back in. Screenshot of the only entry in
_registered_users attached.

[image: Inline image 1]

··· On Tue, Mar 7, 2017 at 12:41 PM, Yaw Anokwa wrote:

Ah, you are on GAE. You can query the data store and you'll get a hash
of the password, never the password itself because security.

If your Aggregate install is >1.4.4, then you can generally walk over
the install with the same version of Aggregate and it'll reset the
password of the ODK Aggregate username you set in the installer to
'aggregate'. Your data should be safe, but it's a good idea to have
backups.

If your version of Aggregate is <1.4.4, then it's more complicated.
You should be able to progressively upgrade each version one at a time
to get to 1.4.4.

On Tue, Mar 7, 2017 at 3:34 PM, Nicholas Clinton nicholas.clinton@gmail.com wrote:

Thanks for the support. So updating the app by pushing a new instance to
app engine will blow away all the data/configuration that's in there? No
way to query the datastore in some way to get out that password? I see
that
superUserEmail is me. Can I use that as username and test various
passwords?

On Tue, Mar 7, 2017 at 10:54 AM, Yaw Anokwa yanokwa@nafundi.com wrote:

Hi Nick,

If you can shut down the entire VM, upload it Dropbox/Drive, and send
me a link, I can likely get you the data. I cannot get you the
password.

Yaw

Hi Nick,

You should figure out what version you have:
https://github.com/opendatakit/opendatakit/wiki/Aggregate-Release-Notes#determining-your-odk-aggregate-version.
Once you do that, you'll know what steps you'll need to upgrade.

Before you upgrade, a warning...

None of those upgrades should delete your data, but it's best if you had a
backup. Also, it's entirely possible that the upgrades will break your
Fusion Table integration because a lot of those libraries have changed.
Mitch would know more, so it'd be prudent to wait for his response.

Assuming you want to proceed, you'll need to go incrementally from the
version you have to v1.4.4.

might help

v1.4.4 will let you set a new admin username, and that username will have a
default password of "aggregate". At that point, you'll be able to log into
your instance.

If you have greater than v1.4.4, then just re-install that same version to
minimize any potential disruption and once you are into the system, make a
backup with ODK Briefcase and then upgrade further.

Hope that helps,

Yaw

··· On Tue, Mar 7, 2017 at 4:21 PM, Nicholas Clinton <nicholas.clinton@gmail.com wrote:

Moving this thread (below) into the public forum. Background: Pushed ODK
Aggregate (don't know the version) to App Engine circa March 2014 and it
has been working flawlessly ever since. Promptly forgot the admin
password. Trying to get back in without destroying the existing database
and the config that pushes to Fusion Table (which is then read by another
App Engine app with a Google Earth Engine backend).

Last questions to Yaw:

There's only one entry in opendatakit._registered_users and it's me. Am I
correctly interpreting this entry to mean that the username (what I would
specify in the "Sign In with Aggregate Password" dialog) is
nicholas.clinton@gmail.com? Am I correct that between (failed) attempts
I need to close the browser? How do I discover the version?

Also happy to add you as an administrator to this instance, if by some
magic you can help me get back in. Screenshot of the only entry in
_registered_users attached.

[image: Inline image 1]

On Tue, Mar 7, 2017 at 12:41 PM, Yaw Anokwa yanokwa@nafundi.com wrote:

Ah, you are on GAE. You can query the data store and you'll get a hash
of the password, never the password itself because security.

If your Aggregate install is >1.4.4, then you can generally walk over
the install with the same version of Aggregate and it'll reset the
password of the ODK Aggregate username you set in the installer to
'aggregate'. Your data should be safe, but it's a good idea to have
backups.

If your version of Aggregate is <1.4.4, then it's more complicated.
You should be able to progressively upgrade each version one at a time
to get to 1.4.4.

On Tue, Mar 7, 2017 at 3:34 PM, Nicholas Clinton nicholas.clinton@gmail.com wrote:

Thanks for the support. So updating the app by pushing a new instance
to
app engine will blow away all the data/configuration that's in there?
No
way to query the datastore in some way to get out that password? I see
that
superUserEmail is me. Can I use that as username and test various
passwords?

On Tue, Mar 7, 2017 at 10:54 AM, Yaw Anokwa yanokwa@nafundi.com wrote:

Hi Nick,

If you can shut down the entire VM, upload it Dropbox/Drive, and send
me a link, I can likely get you the data. I cannot get you the
password.

Yaw

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Agreed

··· On Wed, Mar 8, 2017 at 5:00 PM, Yaw Anokwa wrote:

Hi Nick,

You should figure out what version you have: https://github.com/
opendatakit/opendatakit/wiki/Aggregate-Release-Notes#determining-your-odk-
aggregate-version. Once you do that, you'll know what steps you'll need
to upgrade.

Before you upgrade, a warning...

None of those upgrades should delete your data, but it's best if you had a
backup. Also, it's entirely possible that the upgrades will break your
Fusion Table integration because a lot of those libraries have changed.
Mitch would know more, so it'd be prudent to wait for his response.

Assuming you want to proceed, you'll need to go incrementally from the
version you have to v1.4.4. https://github.com/
opendatakit/opendatakit/wiki/Aggregate-Release-Notes#installing-older-odk-
aggregate-pre-148-releases might help

v1.4.4 will let you set a new admin username, and that username will have
a default password of "aggregate". At that point, you'll be able to log
into your instance.

If you have greater than v1.4.4, then just re-install that same version to
minimize any potential disruption and once you are into the system, make a
backup with ODK Briefcase and then upgrade further.

Hope that helps,

Yaw

On Tue, Mar 7, 2017 at 4:21 PM, Nicholas Clinton < nicholas.clinton@gmail.com> wrote:

Moving this thread (below) into the public forum. Background: Pushed ODK
Aggregate (don't know the version) to App Engine circa March 2014 and it
has been working flawlessly ever since. Promptly forgot the admin
password. Trying to get back in without destroying the existing database
and the config that pushes to Fusion Table (which is then read by another
App Engine app with a Google Earth Engine backend).

Last questions to Yaw:

There's only one entry in opendatakit._registered_users and it's me. Am
I correctly interpreting this entry to mean that the username (what I would
specify in the "Sign In with Aggregate Password" dialog) is
nicholas.clinton@gmail.com? Am I correct that between (failed) attempts
I need to close the browser? How do I discover the version?

Also happy to add you as an administrator to this instance, if by some
magic you can help me get back in. Screenshot of the only entry in
_registered_users attached.

[image: Inline image 1]

On Tue, Mar 7, 2017 at 12:41 PM, Yaw Anokwa yanokwa@nafundi.com wrote:

Ah, you are on GAE. You can query the data store and you'll get a hash
of the password, never the password itself because security.

If your Aggregate install is >1.4.4, then you can generally walk over
the install with the same version of Aggregate and it'll reset the
password of the ODK Aggregate username you set in the installer to
'aggregate'. Your data should be safe, but it's a good idea to have
backups.

If your version of Aggregate is <1.4.4, then it's more complicated.
You should be able to progressively upgrade each version one at a time
to get to 1.4.4.

On Tue, Mar 7, 2017 at 3:34 PM, Nicholas Clinton nicholas.clinton@gmail.com wrote:

Thanks for the support. So updating the app by pushing a new instance
to
app engine will blow away all the data/configuration that's in there?
No
way to query the datastore in some way to get out that password? I
see that
superUserEmail is me. Can I use that as username and test various
passwords?

On Tue, Mar 7, 2017 at 10:54 AM, Yaw Anokwa yanokwa@nafundi.com wrote:

Hi Nick,

If you can shut down the entire VM, upload it Dropbox/Drive, and send
me a link, I can likely get you the data. I cannot get you the
password.

Yaw

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com