Upgrade 9.5.11 to 10.3.1 Users Can't Login

Did you migrate or upgrade? The title says one thing and the description says the other.

I migrated using composer. I've done 4 or 5 other sites with no issue. Password Policy is enabled. I updated the password via admin drush uli and still can't log in. Odd.

Did you migrate or upgrade? I am unfamiliar with migrating using Composer.

https://www.drupal.org/docs/upgrading-drupal/upgrading-from-drupal-8-or-... →

OK, so it's an upgrade. Do any passwords show updated hashes → ? I assume "no" because no one has logged-in—that's the only moment a hash can update.

What attributes of this website are different from the ones that worked? Absent applying a debugger that's the next step in a support request.

So you have the phpass module, provided by core, enabled?

It was installed automatically with the upgrade to D10. As far as debugging, the site just says username or password unrecognized. No error. I'm assuming the hashed passwords are incompatible. No attributes are different other than upgrading all the modules to be D10 compatible.

drush sql:query "SELECT uid, name, mail FROM users_field_data WHERE pass IS NOT NULL AND pass NOT LIKE '$2y$%'"

No user has an updated hash. I created a user on the D 9.5.11 site before migrating to test. There is nothing I can do to log in.

Requesting new password will log a user in, but the new password will not have the correct hash. I login with "drush uli" and change a user's password and that doesn't work. Nothing I can do after the upgrade will correctly store a hashed password. They are using Password Policy but I disabled that and nothing changed.

Is it possible that exporting the DB to test on local can mess with the hashes?

Even users created after the migration can't log in.

Is it possible that exporting the DB to test on local can mess with the hashes?

If you're doing a manual database export/import then no.

If you're using drush sql:sanitize, that resets all passwords on the database (either to something random, or to a password you give it on the cli for easier testing).

However you should also check that $settings['hash_salt'] in your local settings.php matches the value on the production website. This is what ensures that hashes on different websites are unique, even with the same password, and if you change that, when Drupal calculates the hash on login, it won't match the one stored in the database.

Even users created after the migration can't log in.

Is this on your local install, or on production, or both?

Hello, I've migrated from 10.2.7 to 10.3.1
Impossible to connect thru the login page.
I've use the initialize password page and i was able to connect after having updateed the password.
But after, when i disconnect from the site i'm not able to reconnected using the last paswsord i've update
The query
SELECT uid, name, mail FROM users_field_data WHERE pass IS NOT NULL AND pass NOT LIKE '$2y$% return 0 records
I've uninstalle the passord policy module.
I've try to clear cache.
Nothing works.
This is both on my local dev site and on my production site

Did you migrate or upgrade?

Anyone experiencing this - do you have https://www.drupal.org/project/mail_login → or any similar modules that alter the login process installed? I'm wondering if this is somehow related to 🐛 BC break in login auth changes from #3444978 Active .

Hello, I've used :
composer require drupal/core-recommended:10.3.1 drupal/core-composer-scaffold:10.3.1 drupal/core-project-message:10.3.1 --update-with-all-dependencies

dpalicepeio@drupbuilder.org: That is an update, according to Drupal technical terminology. A migration uses Drupal’s migration system to move and modify data between Drupal sites.

@dpalicepeio@drupbuilder.org can you confirm you actually ran database updates (via drush or update.php) after the composer update? You can check for issues in the status report page.

yes i confirm

I soluced this issue desinstalling module email_registration module
Allows users to register with an email address as their username.
Nom système : email_registration
Version : 2.0.0-rc5

Looks like there will be email_registration 2.0.0-rc6 soon which should solve the problem: 🐛 [2.x] Login fails with Drupal 10.3 Needs review

I am also having login issues with Drupal 10.3.2 after upgrading.

Please suggest a solution if you have one.

@Hetal.Solanki see #3463582-13: Upgrade 9.5.11 to 10.3.1 Users Can't Login → - we need more information to have any chance of helping.

@catch

i have upgrade drupal 9.5.11 to drupal 10.2.7. where in drupal 10.2.7 i am able to login with existing user name and password. After that when i upgrade drupal 10 latest vetsion 10.3.2 i am facing user login issue.

@Hetal.Solanki that's not the information we need, as per #13 which I linked, do you have any contributed modules installed that customise the login process?

@catch
No we have not install any contrib module to customize login process.

@Hetal.Solanki OK thanks. Can you confirm that you have the phpass module installed on the 10.3 site?

Also what happens if you reset your password via a one time login link and then try to log in with a new password?