I should’ve expected as much, really. Post a blog entry in the old blog-place saying I’ve migrated to other software and, the next day, the only other person who uses the site can’t login any more. What’s more, none — and I do mean none — of the password reset techniques works. Well, except one: upgrade to the latest development code.
The latest code allows the admin user to reset any user’s password without the need to know their existing password, which is stored as a one-way MD5 hash; something the previous versions couldn’t do, at least not so directly or easily. There was one trick in the old version that worked once before: use a “hidden” URL and a specially-crafted “old password”, and voila! Too bad it didn’t work this time.
I guess if the development code is good enough for the public TikiWiki site (tikiwiki.org…) it should do well enough for me.
Then again, maybe tomorrow the admin account won’t work any more…