Locked out of Openemr

Did you end the command with ‘;’? Otherwise it would keep expecting additional characters before actually processing the input.

select username, pwd_expiration_date, active from users;

hi , it returns as====>

mysql> select username, pwd_expiration_date, active from users;
ERROR 1046 (3D000): No database selected

==========================================
but if we enter like this way: C:\xampp\mysql\bin>mysql.exe select username, pwd_expiration_date, active from users;

then we got these: ===>
mysql.exe Ver 14.14 Distrib 5.5.32, for Win32 (x86)
Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Usage: mysql.exe [OPTIONS] [database]
-?, --help Display this help and exit.
-I, --help Synonym for -?
–auto-rehash Enable automatic rehashing. One doesn’t need to use
‘rehash’ to get table and field completion, but startup
and reconnecting may take a longer time. Disable with
–disable-auto-rehash.
(Defaults to on; use --skip-auto-rehash to disable.)
-A, --no-auto-rehash
No automatic rehashing. One has to use ‘rehash’ to get
table and field completion. This gives a quicker start of
mysql and disables rehashing on reconnect.
–auto-vertical-output
Automatically switch to vertical output mode if the
result is wider than the terminal width.
-B, --batch Don’t use history file. Disable interactive behavior.
(Enables --silent.)
–character-sets-dir=name
Directory for character set files.
–column-type-info Display column type information.
-c, --comments Preserve comments. Send comments to the server. The
default is --skip-comments (discard comments), enable
with --comments.
-C, --compress Use compression in server/client protocol.
-#, --debug[=#] This is a non-debug version. Catch this and exit.
–debug-check Check memory and open file usage at exit.
-T, --debug-info Print some debug info at exit.
-D, --database=name Database to use.
–default-character-set=name
Set the default character set.
–delimiter=name Delimiter to be used.
–enable-cleartext-plugin
Enable/disable the clear text authentication plugin.
-e, --execute=name Execute command and quit. (Disables --force and history
file.)
-E, --vertical Print the output of a query (rows) vertically.
-f, --force Continue even if we get an SQL error.
-G, --named-commands
Enable named commands. Named commands mean this program’s
internal commands; see mysql> help . When enabled, the
named commands can be used from any line of the query,
otherwise only from the first line, before an enter.
Disable with --disable-named-commands. This option is
disabled by default.
-i, --ignore-spaces Ignore space after function names.
–init-command=name SQL Command to execute when connecting to MySQL server.
Will automatically be re-executed when reconnecting.
–local-infile Enable/disable LOAD DATA LOCAL INFILE.
-b, --no-beep Turn off beep on error.
-h, --host=name Connect to host.
-H, --html Produce HTML output.
-X, --xml Produce XML output.
–line-numbers Write line numbers for errors.
(Defaults to on; use --skip-line-numbers to disable.)
-L, --skip-line-numbers
Don’t write line number for errors.
-n, --unbuffered Flush buffer after each query.
–column-names Write column names in results.
(Defaults to on; use --skip-column-names to disable.)
-N, --skip-column-names
Don’t write column names in results.
–sigint-ignore Ignore SIGINT (CTRL-C).
-o, --one-database Ignore statements except those that occur while the
default database is the one named at the command line.
-p, --password[=name]
Password to use when connecting to server. If password is
not given it’s asked from the tty.
-W, --pipe Use named pipes to connect to server.
-P, --port=# Port number to use for connection or 0 for default to, in
order of preference, my.cnf, $MYSQL_TCP_PORT,
/etc/services, built-in default (3306).
–prompt=name Set the mysql prompt to this value.
–protocol=name The protocol to use for connection (tcp, socket, pipe,
memory).
-q, --quick Don’t cache result, print it row by row. This may slow
down the server if the output is suspended. Doesn’t use
history file.
-r, --raw Write fields without conversion. Used with --batch.
–reconnect Reconnect if the connection is lost. Disable with
–disable-reconnect. This option is enabled by default.
(Defaults to on; use --skip-reconnect to disable.)
-s, --silent Be more silent. Print results with a tab as separator,
each row on new line.
–shared-memory-base-name=name
Base name of shared memory.
-S, --socket=name The socket file to use for connection.
–ssl Enable SSL for connection (automatically enabled with
other flags).
–ssl-ca=name CA file in PEM format (check OpenSSL docs, implies
–ssl).
–ssl-capath=name CA directory (check OpenSSL docs, implies --ssl).
–ssl-cert=name X509 cert in PEM format (implies --ssl).
–ssl-cipher=name SSL cipher to use (implies --ssl).
–ssl-key=name X509 key in PEM format (implies --ssl).
–ssl-verify-server-cert
Verify server’s “Common Name” in its cert against
hostname used when connecting. This option is disabled by
default.
-t, --table Output in table format.
–tee=name Append everything into outfile. See interactive help (\h)
also. Does not work in batch mode. Disable with
–disable-tee. This option is disabled by default.
-u, --user=name User for login if not current user.
-U, --safe-updates Only allow UPDATE and DELETE that uses keys.
-U, --i-am-a-dummy Synonym for option --safe-updates, -U.
-v, --verbose Write more. (-v -v -v gives the table output format).
-V, --version Output version information and exit.
-w, --wait Wait and retry if connection is down.
–connect-timeout=# Number of seconds before connection timeout.
–max-allowed-packet=#
The maximum packet length to send to or receive from
server.
–net-buffer-length=#
The buffer size for TCP/IP and socket communication.
–select-limit=# Automatic limit for SELECT when using --safe-updates.
–max-join-size=# Automatic limit for rows in a join when using
–safe-updates.
–secure-auth Refuse client connecting to server if it uses old
(pre-4.1.1) protocol.
–server-arg=name Send embedded server this as a parameter.
–show-warnings Show warnings after every statement.
–plugin-dir=name Directory for client-side plugins.
–default-auth=name Default authentication client-side plugin to use.

Default options are read from the following files in the given order:
C:\WINDOWS\my.ini C:\WINDOWS\my.cnf C:\my.ini C:\my.cnf C:\xampp\mysql\my.ini C:\xampp\mysql\my.cnf
The following groups are read: mysql client
The following options may be given as the first argument:
–print-defaults Print the program argument list and exit.
–no-defaults Don’t read default options from any option file.
–defaults-file=# Only read default options from the given file #.
–defaults-extra-file=# Read this file after the global files are read.

Variables (–variable-name=value)
and boolean options {FALSE|TRUE} Value (after reading options)


auto-rehash TRUE
auto-vertical-output FALSE
character-sets-dir (No default value)
column-type-info FALSE
comments FALSE
compress FALSE
debug-check FALSE
debug-info FALSE
database (No default value)
default-character-set auto
delimiter ;
enable-cleartext-plugin FALSE
vertical FALSE
force FALSE
named-commands FALSE
ignore-spaces FALSE
init-command (No default value)
local-infile FALSE
no-beep FALSE
host (No default value)
html FALSE
xml FALSE
line-numbers TRUE
unbuffered FALSE
column-names TRUE
sigint-ignore FALSE
port 0
prompt mysql>
quick FALSE
raw FALSE
reconnect TRUE
shared-memory-base-name (No default value)
socket (No default value)
ssl FALSE
ssl-ca (No default value)
ssl-capath (No default value)
ssl-cert (No default value)
ssl-cipher (No default value)
ssl-key (No default value)
ssl-verify-server-cert FALSE
table FALSE
user (No default value)
safe-updates FALSE
i-am-a-dummy FALSE
connect-timeout 0
max-allowed-packet 16777216
net-buffer-length 16384
select-limit 1000
max-join-size 1000000
secure-auth FALSE
show-warnings FALSE
plugin-dir (No default value)
default-auth (No default value)

Maybe you left openemr part out last time or your database is not called openemr???
Anyway, you can specify the database as

use openemr;
select username, pwd_expiration_date, active from users;

or

select username, pwd_expiration_date, active from openemr.users;

HI;
we finally got these (are the main administrative we need to change password and both expired)
mysql> select username, pwd_expiration_date, active from openemr.users;
±----------------±--------------------±-------+
| username | pwd_expiration_date | active |
±----------------±--------------------±-------+
| admin | 2018-04-25 | 1 |
| nguyen | 2023-08-21 | 1 |

so far we are not able to change the admin password ; and i don’t know how to change the expiration date…please help or someone out there please…

update openemr.users set pwd_expiration_date=“9999-12-31” where username IN (“admin”, “nguyen”);

You can choose any other expiry date in format YYYY-MM-DD.

1 Like

Thank you so much

we got it
mysql> select username, pwd_expiration_date, active from openemr.users;
±----------------±--------------------±-------+
| username | pwd_expiration_date | active |
±----------------±--------------------±-------+
| admin | 9999-12-31 | 1 |
| nguyen | 9999-12-31 | 1 |

now we still haven’t able to change the admin password to pass
====>we tried with (as recommended by Stephen Waite

UPDATE users secure SET password = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2Oz61S26s5E80Yd60lKdX4Wy3PBdEufNu’, salt = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2b$’ WHERE username = ‘admin’;

update keeps getting:

ERROR 1046 (3D000): No database selected

You are still not using the use openemr; command from earlier post. In that case you specify the database before table name in the command as -

update openemr.users_secure set password = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2Oz61S26s5E80Yd60lKdX4Wy3PBdEufNu’ , salt = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2b$’ where username = ‘admin’;

1 Like

nice support @mdsupport, if you use the preformatted text helper it will display the quotes that you intend

1 Like

thank you…we finally got it:

mysql> UPDATE openemr.users_secure SET password = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2Oz61S26s5E80Yd60lKdX4Wy3PBdEufNu’ , salt = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2b$’ where username = ‘admin’;
Query OK, 1 row affected (0.01 sec)
Rows matched: 1 Changed: 1 Warnings: 0

mysql>

=============
but still can not log into the emr with the admin and pass combo then we found :

strange situation here==> that user admin in inactive???

mysql> select username, pwd_expiration_date, active from openemr.users;
±----------------±--------------------±-------+
| username | pwd_expiration_date | active |
±----------------±--------------------±-------+
| admin | 9999-12-31 | 0 |
| nguyen | 9999-12-31 | 1 |

so how do i active the admin user again, & the next administrative user is also locked out, please help

very strange i just noticed; so i rename the admin password to pass er instruction, then right to log in after i tested the user log-name above and noted that admin became 0(zero) or inactive…then i tested the user nguyen …follow similar way of changing the password to pass and tried to log into our emr==>unable to get in; then i check the user log name again and noted that all administrative users are not all inactive…what had happened??

here is:
mysql> select username, pwd_expiration_date, active from openemr.users;
±----------------±--------------------±-------+
| username | pwd_expiration_date | active |
±----------------±--------------------±-------+
| admin | 9999-12-31 | 0 |
| nguyen | 9999-12-31 | 0 |

the following seems to confirm my concerns

mysql> select id from openemr.users where username = ‘admin’;
±—+
| id |
±—+
| 1 |
±—+
1 row in set (0.00 sec)

mysql> update openemr.users_secure set password = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2Oz61S26s5E80Yd60lKdX4Wy3PBdEufNu’ , salt = ‘$2a$05$MKtnxYsfFPlb2mOW7Qzq2b$’ where id = 1;
Query OK, 0 rows affected (0.00 sec)
Rows matched: 1 Changed: 0 Warnings: 0

UPDATE openemr.globals SET gl_value = '0' WHERE gl_name = 'password_expiration_days';

Thank you==>with that
mysql> UPDATE openemr.globals SET gl_value = ‘0’ WHERE gl_name = ‘password_expiration_days’;
Query OK, 1 row affected (0.00 sec)
Rows matched: 1 Changed: 1 Warnings: 0

i then check and found that active for the 2 main administrative users: (still carry active zero = thus are inactive??)

mysql> select username, pwd_expiration_date, active from openemr.users;
±----------------±--------------------±-------+
| username | pwd_expiration_date | active |
±----------------±--------------------±-------+
| admin | 9999-12-31 ___________ | 0 |
| nguyen | 9999-12-31 ____________ | 0 |

so how can the users become active again? Thanks

update openemr.users set active = 1 where username IN ("admin", "nguyen");

Thank you so much Stephen…You are a vast and a tremendous help for many of us in this Forum…Thank you again sir

glad you’re all set, was a great team effort!

Thank you to everyone whom had spent their valuable time over the course of 1 week in this quest to solve another admin password endeavor. Sincerely.

Greetings,
has anyone encountered the same issue with version 7.01.
Somehow, the admin credentials stopped working less than 3 months after the install.
Only one user’s credential is working (with physician access).
We tried updating the admin password in the users_secure table for the admin by setting it to the same value as the working user…but still no luck

Any help will be grately appreciated

Hi Bernard Kendabkenda,
Welcome To Openemr Community :handshake: i shared My users,users_secure table. try those table instead of yours. Keep backup your table.
users_secure (1).sql (2.6 KB)

users (1).sql (6.9 KB)
globals (1).sql (18.0 KB)

Thanks,
Param,
help@capminds.com