Submitted by RyanJohnson on Sun, 02/06/2011 - 17:02
I've changed the password for one of my servers and it doesn't appear to have worked.
I can't get in with the new password. The old password still still works even though "Show password" displays the new one.
Thanks, Ryan
Status:
Active
Comments
Submitted by JamieCameron on Sun, 02/06/2011 - 19:08 Comment #1
Does it help if you change the password to something else, then change it back again?
Submitted by RyanJohnson on Sun, 02/06/2011 - 19:12 Comment #2
Thanks Jamie,
I tried that and it still has not change the password
Submitted by JamieCameron on Sun, 02/06/2011 - 19:41 Comment #3
If you check the
/etc/shadow
file entry for the user, it is being updated?Submitted by RyanJohnson on Sun, 02/06/2011 - 19:47 Comment #4
The password string is encrypted, but I compare it before and after updating the password and they were different. So I'm guessing that's a yes??
Submitted by JamieCameron on Sun, 02/06/2011 - 23:06 Comment #5
Yes, that does normally indicate a change .. but could also just indicate re-hashing.
How are you making the change exactly?
Submitted by RyanJohnson on Sun, 02/06/2011 - 23:10 Comment #6
Using the Edit Virtual Server -> Configurable settings -> Administration password -> "Set to .." Radio button.
Then type the new password there
Submitted by JamieCameron on Mon, 02/07/2011 - 16:17 Comment #7
Wierd, I can't re-produce this .. on my test systems, the password change works fine.
If you validate the domain (at Limits and Validation -> Validate Virtual Server), does it report any errors?
Submitted by JamieCameron on Mon, 02/07/2011 - 16:18 Comment #8
Wierd, I can't re-produce this .. on my test systems, the password change works fine.
If you validate the domain (at Limits and Validation -> Validate Virtual Server), does it report any errors?
Submitted by RyanJohnson on Mon, 02/07/2011 - 19:59 Comment #9
The only error that comes up is : AWstats reporting : AWstats program /home/domain.com/public_html/cgi-bin/awstats.pl does not exist
Submitted by JamieCameron on Tue, 02/08/2011 - 11:57 Comment #10
OK, that looks fine too ..
If you change the password from the command line using the Virtualmin API, with a command like :
virtualmin modify-domain --domain whatever.com --pass something
does the password get updated OK? Make sure you use a completely new password, as if you change it to whatever Virtualmin thinks the domain's password already is, nothing will happen.
Submitted by RyanJohnson on Tue, 02/08/2011 - 17:40 Comment #11
Unfortunately that didn't work either. :(
So what I did was un-tick "Webmin login enabled?" from enabled features, saved. Then I ticked it again and the password now changed to the new one.
I verified that it all worked by changing the password again through the web interface and it all seems to be in sync now.
This has got me wondering if other v.servers have the same problem.
Submitted by JamieCameron on Tue, 02/08/2011 - 20:02 Comment #12
Ok, interesting .... one thing I forgot to ask before was how you were trying to login exactly? Via SSH, FTP or the web UI?
Submitted by RyanJohnson on Tue, 02/08/2011 - 20:10 Comment #13
I only tried the web UI. I just tried SSH and it seems ok. This is probably isolated to the webmin account.
Submitted by JamieCameron on Tue, 02/08/2011 - 23:14 Comment #14
I wonder, was the password for the Webmin login perhaps changed previously at Webmin -> Webmin Users?
Submitted by RyanJohnson on Thu, 02/10/2011 - 18:10 Comment #15
I'm not sure .. this is a very old site, it was orginially imported from cpanel in 2006 so it could have lost itself along the way.