#2839 Login not possible w/ new webmin users on SLES10

1.340
closed
5
2007-06-06
2007-05-31
Anonymous
No

Webmin version: 1.340
OS: SuSE Linux Enterprise Server 10

After creating a new Webmin user I tried to login but got the error "Login failed. Please try again."

I did the exactly same procedure with the same version of Webmin but on a SLES9 machine - this one worked.

So I think something is wrong with the encryption of the /etc/webmin/miniserv.users file on SLES10.

Discussion

  • Jamie Cameron

    Jamie Cameron - 2007-06-01

    Logged In: YES
    user_id=129364
    Originator: NO

    This does sound like an encryption format issue..
    If you compare the /etc/webmin/miniserv.users file between SLES 9 and 10, is there a noticable difference in the password encryption format? The encrypted password is the second field after the username.

     
  • Nobody/Anonymous

    Logged In: NO

    Created a user "test" with password "test".

    SLES9: test:$1$80694706$AKd/vvEUDvmfCUpXKnxCN.:0::: -> login works
    SLES10: test:$1$80694805$pPRFHA0oVuwFbxMOKFOCs1:0::: -> login doesnt work

    Well the format seems to be the same...
    I'm not sure but I think it worked with Webmin 1.330 on SLES10 cause I already created a new webmin user (before upgrading) and the login with this account works. So could it be that there is a bug in the /acl/edit_user.cgi in version 1.340 ?

     
  • Jamie Cameron

    Jamie Cameron - 2007-06-01

    Logged In: YES
    user_id=129364
    Originator: NO

    Does it help if you go to the Webmin Configuration module, click on the Authentication icon, select the 'Use standard Unix crypt encryption for Webmin passwords' option, and then delete and re-create the Webmin user?

     
  • Nobody/Anonymous

    Logged In: NO

    No, unfortunately that didnt help...
    The encryption of the password was now made with crypt
    test:KJ1pKoiWjHC8Q:0:::
    but the login still fails.

     
  • Jamie Cameron

    Jamie Cameron - 2007-06-04

    Logged In: YES
    user_id=129364
    Originator: NO

    What is logged to /var/log/secure or /var/log/authlog or /var/webmin/miniserv.error when you try to login?

     
  • Napsty

    Napsty - 2007-06-05

    Logged In: YES
    user_id=1808484
    Originator: NO

    As sad as it sounds - nothing is being logged (at the moment of failed login) in either of these files. /var/log/secure and /var/log/authlog don't even exist.

    But I saw something weird in /var/webmin/miniserv.error:
    *************************************************************
    [05/Jun/2007:08:53:03 +0200] Reloading configuration
    [05/Jun/2007:08:53:04 +0200] [193.5.42.55] /acl/unauthenticated/style.css : File not found
    Failed to bind to port 10000 : Address already in use
    [05/Jun/2007:09:05:19 +0200] miniserv.pl started
    [05/Jun/2007:09:05:19 +0200] Perl module Authen::PAM needed for PAM is not installed : Can't locate Authen/PAM.pm in @INC (@INC contains: /usr/libex
    ec/webmin /usr/lib/perl5/5.8.8/i586-linux-thread-multi /usr/lib/perl5/5.8.8 /usr/lib/perl5/site_perl/5.8.8/i586-linux-thread-multi /usr/lib/perl5/si
    te_perl/5.8.8 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vend
    or_perl .) at (eval 2) line 1.
    BEGIN failed--compilation aborted at (eval 2) line 1.
    *************************************************************
    PAM is installed on the system.. although i couldnt find the file PAM.pm. Could that be it?

     
  • Jamie Cameron

    Jamie Cameron - 2007-06-05

    Logged In: YES
    user_id=129364
    Originator: NO

    Hmm, I wonder if Webmin isn't been restarted properly.
    Try manually killing all miniserv.pl processes, then running /etc/webmin/start to re-start it. Then re-try the login..

     
  • Napsty

    Napsty - 2007-06-06

    Logged In: YES
    user_id=1808484
    Originator: NO

    Well I could always login as root and as another user I created in webmin version 1.330. I only can't login with the users created in version 1.340.
    I killed all miniserver processes and restarted webmin - same effect.

     
  • Napsty

    Napsty - 2007-06-06

    Logged In: YES
    user_id=1808484
    Originator: NO

    OKAY - now that's really weird but I think I've found it.

    1. I downgraded Webmin to version 1.320
    2. I deleted the test-user -> error "Wrong PID" (this error never got shown in v 1.340)
    3. Killed every miniserv process and started webmin
    4. Added new test user
    5. Login works
    6. Upgrading to latest Webmin version (i just saw thats 1.350 meanwhile!)
    7. Login still works
    8. Added another new test user
    9. Login also works with the one created in v 1.350

    Summary: I think you were right about the processes. When I last time checked it, there weren't any processes shown though (from my comment at 2007-06-06 14:56).

     
  • Jamie Cameron

    Jamie Cameron - 2007-06-06
    • status: open --> closed
     
  • Jamie Cameron

    Jamie Cameron - 2007-06-06

    Logged In: YES
    user_id=129364
    Originator: NO

    What I think was happening was that Webmin was not being restarted properly when you added a user, causing it to not re-load the user list into memory. So you could never login with new users!

     

Log in to post a comment.