Fog WebUI Password Successfully Reset But Still Can't Login

[lmioperations]

Server

• FOG Version: 1.4.4
• OS: Ubuntu 16.04.2

Client

• Service Version:
• OS:

Description

I’m working through a restore on a test server that I built, and I followed all the instructions from here:
https://wiki.fogproject.org/wiki/index.php?title=Restoring_FOG_from_Backup

Everything worked fine, and I rebooted the server just to be safe.

When I tried logging in to the WebUI, the login screen reset and there was no error message.

I followed the instructions here and successfully reset the password (and I verified that I had the hash typed exactly as it is in the document):
https://wiki.fogproject.org/wiki/index.php?title=Password_Central

I restarted mysql just in case and then tried logging in to the WebUI again, but the same thing happens; the username and password boxes clear and I’m not logged in (and there’s no message or anything indicating if my username and/or password were wrong).

At this point, I have no idea why this isn’t working because I’ve successfully done this on our production server when I needed to reset the password several weeks ago.

[lmioperations]

@tom-elliott You rock Tom! Thanks for the help man! : )

[Tom Elliott]

In chat requested @lmioperations edit /opt/fog/.fogsettings and remove the packages line. Then re-run the installer. All things seemed to point that mcrypt packages weren’t installed or enabled.

After rerunning the installer @lmioperations is able to login to the GUI using the password as set.

[lmioperations]

@tom-elliott Capslock is definitely not on. You saw exactly what I pasted into the shell prompt (what you see in my previous post is what I copied straight out of my shell prompt from the server) :-X…

[Tom Elliott]

Are you sure caps-lock isn’t set and all. I know it seems stupid, but this doesn’t make sense.

What if you copy the word password and use the copy paste to the password field.

[lmioperations]

@tom-elliott Dang, this is getting more confusing :D.

[Tom Elliott]

@lmioperations You’re not changing the fog user password for mysql. You’re changing the user that sits in fog.users

[lmioperations]

@tom-elliott Ah, I get what you’re saying now, sorry 'bout that; my bad.

OK, so I copied and pasted this (exactly) and here are the results:

UPDATE `users` SET `uPass` = MD5('password') WHERE `uName` = 'fog';

I just tried logging in with “fog” and “password”, but it still fails.

Did you notice my post earlier where I said that I don’t see a “fog” user in the mySQL db?

[Tom Elliott]

No, copy my command exactly. Not changing 'password' at all. Of course using the MD5 you could use any plain text.

Right now, your password is set literally to:
$2y$11$g0Hu8OaOStuPk7WWYGh6Wu4PLlZDZGOkzMwEEAk.rZMrI9IdDwno.

[lmioperations]

I think I may have found the problem! I’m kinda surprised nobody thought to try this! I just ran:

mysql> select user from mysql.user;
+------------------+
| user             |
+------------------+
| fogstorage       |
| debian-sys-maint |
| mysql.session    |
| mysql.sys        |
| root             |
+------------------+
5 rows in set (0.00 sec)

Notice there’s no “fog” user! This is especially confusing to me since I followed these instructions to a tee!:
https://wiki.fogproject.org/wiki/index.php?title=Restoring_FOG_from_Backup

[lmioperations]

@sebastian-roth Sebastian… I’m confused… I posted the exact command that I typed, and it DOES include “MD5()” with the password hash inside it. I did it correctly already, right?

[Sebastian Roth]

@lmioperations No what Tom meant was to actually run the command exactly as he posted because the MD5() is a mysql function that does generate a hash from that string. So try:

UPDATE `users` SET `uPass` = MD5('password') WHERE `uName` = 'fog';

And see if login works using password

[lmioperations]

@tom-elliott Let me know if I did this correctly (it looks like I did):

mysql> UPDATE `users` SET `uPass` = MD5('$2y$11$g0Hu8OaOStuPk7WWYGh6Wu4PLlZDZGOkzMwEEAk.rZMrI9IdDwno.') WHERE `uName` = 'fog';
Query OK, 1 row affected (0.00 sec)
Rows matched: 1  Changed: 1  Warnings: 0

Was I supposed to use the ( and ) in that command?

I just tested my login again (“fog” as the username and “password” as the password), and got the same results :( (the login screen clears and there’s no message or error).

BTW, the “Changed: 1” is because I hadn’t changed/updated it since running the “test” earlier.

[Tom Elliott]

Can you try:

UPDATE `users` SET `uPass` = MD5('password') WHERE `uName` = 'fog';

I know you’re using 1.3 or higher, but the MD5 mechanism should work as well.

[lmioperations]

@tom-elliott I just did a show databases; and this is the results:

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| fog                |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
5 rows in set (0.00 sec)

[Tom Elliott]

@lmioperations THen is it possible there’s two databases? One that’s the “fog” database as expected, but another fog database with a different name? (So your server is looking at database fog_new where you’re resetting the gui password for database fog)?

Just trying to think of everything. I know the update statement works, I just tested it. So either the change simply isn’t taking.

[lmioperations]

@tom-elliott I appreciate that you’re covering all the bases. The server that I have a WebUI page open for has an IP that matches the server that I’m SSH’d into right now.

[Tom Elliott]

Do you have more than one FOG Server hosting a DB? Maybe the one you’re changing it for is not the same as the one the GUI is trying to work from?

[Tom Elliott]

@lmioperations The test was just to ensure that when you ‘reset’ to the password you could actually see a “change”

[lmioperations]

@tom-elliott I’m using “password”. As I said earlier, I’ve successfully done this in the past on our production server; that’s why I’m extra confused that it’s not working this time :-X…