Added SSL Cert, now unauthenticated and can't log in to https://mail2.oklahoma-isp.net:10000

Submitted by rbraver@oklahom... on Sat, 09/05/2009 - 17:06 Pro Licensee

I configured the system to use a new SSL cert for webmin, which apparently works, as I can get to the site via SSL with no browser warnings, but all I get on the left-hand column menu is System Information and Switch User. On the top/center screen, all I have is a System window which shows basic server information (e.g. Webmin v. 1.480). Clicking on Switch User just returns the same screen.

This happened immediately upon configuring the certificate. It is from GoDaddy (Starfield Tech) and is a chained cert. Right after I applied the changes I saw some kind of message about authentication and then I was out and unable to get back in.

I searched for this issue - my apologies if it's a quick fix that I missed.

Status: 
Active

Comments

Submitted by rbraver@oklahom... on Sat, 09/05/2009 - 17:14 Pro Licensee

from miniserv.log:

72.198.121.201 - - [05/Sep/2009:17:02:18 -0500] "GET / HTTP/1.0" 200 434 72.198.121.201 - - [05/Sep/2009:17:02:18 -0500] "GET /left.cgi HTTP/1.0" 200 1329 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /unauthenticated/virtual-server-style.css HTTP/1.0" 200 3775 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /unauthenticated/reset-fonts-grids-base.css HTTP/1.0" 200 6125 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /right.cgi?open=system&auto=status&open=updates&open=common&open=owner&open=reseller HTTP/1.0" 200 5075 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /unauthenticated/toggleview.js HTTP/1.0" 200 392 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /unauthenticated/sorttable.js HTTP/1.0" 200 8556 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /images/open.gif HTTP/1.0" 200 465 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /images/gohome.png HTTP/1.0" 200 806 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /images/blue.gif HTTP/1.0" 200 168 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /images/red.gif HTTP/1.0" 200 159 72.198.121.201 - - [05/Sep/2009:17:02:19 -0500] "GET /images/stock_quit.png HTTP/1.0" 200 911

Submitted by andreychek on Sat, 09/05/2009 - 20:44

Hmm, that's an interesting one!

It also doesn't seem to be asking for a password to get that information.

Would it be possible to log into your system? I may need to take a look at the config there to figure out what's going wrong.

If that's okay, the easiest way to proceed would probably be for you to send an email to eric@virtualmin.com with your root login details -- and include a link to this Support Issue in the message body.

I'll take a look at your Webmin/Virtualmin config and get that working properly again.

Thanks!

Submitted by rbraver@oklahom... on Sat, 09/05/2009 - 20:50 Pro Licensee

Thanks for looking at this on a Saturday night. Email sent.

I can add /session_login.cgi to the URL,which does give me a login screen - but putting in the correct ( or any) credentials simply returns to the login screen.

Also note I turned on debug loggin in the miniserv.conf.

Submitted by andreychek on Sat, 09/05/2009 - 21:32

Howdy -- well, I'm not too sure how this happened at the moment, but it appears that this line was missing from the /etc/webmin/miniserv.conf file:

userfile=/etc/webmin/miniserv.users

Without that, it seemed to be using a generic user with a limited featureset, rather than asking you to log in as this or that user as you would normally expect.

I added that line back in, restarted Webmin, and it looks good!

Outside of that, your SSL certificate looks correct, so I think you're in good shape now.

Let us know if that seems to do the trick for you!

Submitted by rbraver@oklahom... on Sat, 09/05/2009 - 21:40 Pro Licensee

Yes, that did the trick - thanks!

I wondered if there was something wrong/missing from the miniserv.conf file, but I couldn't find a config reference or example. Does such a thing exist?

I did manually edit the file as to the SSL stuff a couple times earlier, but ended up making the final change through the web interface. I'm 99% sure I did not remove any other lines, but I can't rule it out.

Perhaps I can try to retrace my steps (with an extra backup of the conf file) and see if it happens again.

Thanks again, and I hope you have a great holiday weekend.

Submitted by andreychek on Sat, 09/05/2009 - 21:43

Well, I plan on mentioning that you ran into this to Jamie, so he can keep an eye on it moving forward in case it is a Virtualmin bug.

However, if you do happen to manage to reproduce it, that'd be super! He'd have it fixed up in no time :-)

Thanks though, and I hope you enjoy your weekend as well. Have a good one!

Submitted by JamieCameron on Sun, 09/06/2009 - 01:40

That's certainly an interesting one .. the userfile line should never be missing, and I don't think there is any code in Virtualmin that ever removes it. Instead, it is added just once at install time.

Let us know if you can re-create this ..