VERSION.txt = "18.49-8" in usermin and webmin but diff -r shows differences & "Recover password" button doesn't work

Submitted by jabowery on Sat, 06/10/2017 - 16:13 Pro Licensee

I've been trying to get the "Password recovery" button to appear on the Usermin login form. It appears on the Webmin login form. That's how I discovered that the authentic theme under /usr/share/webmin/authentic-theme/VERSION.txt and /usr/share/usermin/authentic-theme/VERSION.txt are the same (18.49-8), but this pastebin shows the output of # diff -r /usr/share/usermin/authentic-theme/ /usr/share/webmin/authentic-theme/ which is quite substantial.

A couple of points of interest:

  • I was able to get the "Password recovery" button to appear on the Usermin login form by creating /etc/usermin/custom-lang by copying /etc/webmin/custom-lang -- however neither button actually works. The Webmin recovery takes me to the configuration form for the password recovery virtualmin module, which states:

    "This module is not designed to be used by regular Webmin users. Instead, Virtualmin server owners who have forgotten their passwords can go to..."

    Yet I've seen it mentioned several places that Usermin supports the "Password recovery" button as well as Virtualmin.

    The Usermin button, activated by supplying the missing file (custom-lang) just pops out a window with the login again.

  • I installed webmin-virtualmin-password-recovery_1.5_all.deb and installed to Usermin the latest version of Authentic Theme from webmin.com which shows a last updated date that is quite recent: Authentic Theme 18.49
    Description Authentic is Webmin/Usermin/Virtualmin/Cloudmin theme based on Bootstrap and Font Awesome that is made with love. It uses CodeMirror to highlight config files and DataTables to add controls to modules' tables. Support for ConfigServer Security & Firewall
    Download authentic-theme-18.49.wbt.gz
    Website http://twitter.com/authentic_theme
    Author Ilia Rostovtsev
    Last updated 2017-05-21 18:30:23

    • Status: 
    Active

    Comments

    Ilia's picture
    Submitted by Ilia on Sat, 06/10/2017 - 16:18

    Hi,

    Do you see the recovery button in old Virtualmin Framed Theme?

    Submitted by jabowery on Sat, 06/10/2017 - 23:04 Pro Licensee

    I think this is probably due to my running the GPL Virtualmin on the host in question. There is something different about the implementation of Usermin in the GPL vs Pro version.

    Operating system Debian Linux 8
    Webmin version 1.844
    Usermin version 1.711
    Virtualmin version 5.99
    Theme version Authentic Theme 18.49-8

    Ilia's picture
    Submitted by Ilia on Sun, 06/11/2017 - 02:07

    Could you please rephrase your question, I can't understand what's your issue.

    Joe's picture
    Submitted by Joe on Sun, 06/11/2017 - 20:53 Pro Licensee

    The version of the virtualmin-password-recovery module might be the problem here.

    Do you have a newer version than 1.5 in the Pro system?

    Usermin support was added relatively recently...like in the last couple years. I dunno which version that would be, but it hasn't had a lot of releases, so 1.5 could have been pre-Usermin support.

    I'll try to figure out what the newer version isn't showing up (I may have simply failed to roll it into the GPL repo correctly).

    Joe's picture
    Submitted by Joe on Sun, 06/11/2017 - 20:58 Pro Licensee

    OK, yep. It got clobbered in the purge of broken links that went on when something changed about the way the Debian repo generation tools work...making symbolic links not work anymore. So, we killed all the symbolic links, but an actual copy of that module didn't get added to the repos.

    Fixed now. Can you upgrade that module to 1.7 and see if the problem persists?

    Submitted by jabowery on Mon, 06/12/2017 - 13:50 Pro Licensee

    Indeed, Virtualmin notified me that 1.5 was eligible for upgrade to 1.7 and the upgrade worked as expected with the following issues remaining:

    Submitted by JamieCameron on Mon, 06/12/2017 - 16:19

    The second and third bugs will be fixed in the next release of the password recovery plugin. However, the first one is trickier because there is no way to create a URL link that preserves the existing domain name but changes the port.

    Submitted by jabowery on Mon, 06/12/2017 - 18:56 Pro Licensee

    <a id="trans">Recover password</a>
    <script>
          document.getElementById('trans').href='https://'+window.location.origin+':10000....etc....';
    </script>

    Submitted by jabowery on Mon, 06/12/2017 - 22:19 Pro Licensee

    Project: Authentic Theme » Usermin Core

    Submitted by JamieCameron on Mon, 06/12/2017 - 23:16

    Ok, I figured out a solution that worked with Webmin - it will be in the next release of the password recovery plugin. Basically, /etc/usermin/custom-lang needs to contain :

    session_postfix=<center><a href=/virtualmin-password-recovery/usermin.cgi onclick='javascript:event.target.port=10000'>Forgot your Usermin password?</a></center>

    Submitted by jabowery on Mon, 09/03/2018 - 17:29 Pro Licensee

    My /etc/usermin/custom-lang still contains:

    session_postfix=<center><a href=https://debian:10000/virtualmin-password-recovery/usermin.cgi>Forgot your Usermin password?</a></center> System hostname debian (127.0.1.1) Operating system Debian Linux 9
    Webmin version 1.892  Usermin version 1.741
    Virtualmin version 6.03 Pro  Theme version Authentic Theme 19.20-beta2

    This could be related to the bug I just reported and the fact that, for some reason, my system didn't (any longer?) have the recover password package installed. It's unclear when this package was uninstalled or if, indeed, it ever was installed the way I installed it today (via apt).