Fog WebUI Password Successfully Reset But Still Can't Login

[Tom Elliott]

@lmioperations The test was just to ensure that when you ‘reset’ to the password you could actually see a “change”

[Tom Elliott]

Do you have more than one FOG Server hosting a DB? Maybe the one you’re changing it for is not the same as the one the GUI is trying to work from?

[lmioperations]

@tom-elliott I appreciate that you’re covering all the bases. The server that I have a WebUI page open for has an IP that matches the server that I’m SSH’d into right now.

[Tom Elliott]

@lmioperations THen is it possible there’s two databases? One that’s the “fog” database as expected, but another fog database with a different name? (So your server is looking at database fog_new where you’re resetting the gui password for database fog)?

Just trying to think of everything. I know the update statement works, I just tested it. So either the change simply isn’t taking.

[lmioperations]

@tom-elliott I just did a show databases; and this is the results:

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| fog                |
| mysql              |
| performance_schema |
| sys                |
+--------------------+
5 rows in set (0.00 sec)

[Tom Elliott]

Can you try:

UPDATE `users` SET `uPass` = MD5('password') WHERE `uName` = 'fog';

I know you’re using 1.3 or higher, but the MD5 mechanism should work as well.

[lmioperations]

@tom-elliott Let me know if I did this correctly (it looks like I did):

mysql> UPDATE `users` SET `uPass` = MD5('$2y$11$g0Hu8OaOStuPk7WWYGh6Wu4PLlZDZGOkzMwEEAk.rZMrI9IdDwno.') WHERE `uName` = 'fog';
Query OK, 1 row affected (0.00 sec)
Rows matched: 1  Changed: 1  Warnings: 0

Was I supposed to use the ( and ) in that command?

I just tested my login again (“fog” as the username and “password” as the password), and got the same results (the login screen clears and there’s no message or error).

BTW, the “Changed: 1” is because I hadn’t changed/updated it since running the “test” earlier.

[Sebastian Roth]

@lmioperations No what Tom meant was to actually run the command exactly as he posted because the MD5() is a mysql function that does generate a hash from that string. So try:

UPDATE `users` SET `uPass` = MD5('password') WHERE `uName` = 'fog';

And see if login works using password

[lmioperations]

@sebastian-roth Sebastian… I’m confused… I posted the exact command that I typed, and it DOES include “MD5()” with the password hash inside it. I did it correctly already, right?

[lmioperations]

I think I may have found the problem! I’m kinda surprised nobody thought to try this! I just ran:

mysql> select user from mysql.user;
+------------------+
| user             |
+------------------+
| fogstorage       |
| debian-sys-maint |
| mysql.session    |
| mysql.sys        |
| root             |
+------------------+
5 rows in set (0.00 sec)

Notice there’s no “fog” user! This is especially confusing to me since I followed these instructions to a tee!:
https://wiki.fogproject.org/wiki/index.php?title=Restoring_FOG_from_Backup

[Tom Elliott]

No, copy my command exactly. Not changing 'password' at all. Of course using the MD5 you could use any plain text.

Right now, your password is set literally to:
$2y$11$g0Hu8OaOStuPk7WWYGh6Wu4PLlZDZGOkzMwEEAk.rZMrI9IdDwno.

[lmioperations]

@tom-elliott Ah, I get what you’re saying now, sorry 'bout that; my bad.

OK, so I copied and pasted this (exactly) and here are the results:

UPDATE `users` SET `uPass` = MD5('password') WHERE `uName` = 'fog';

I just tried logging in with “fog” and “password”, but it still fails.

Did you notice my post earlier where I said that I don’t see a “fog” user in the mySQL db?

[Tom Elliott]

@lmioperations You’re not changing the fog user password for mysql. You’re changing the user that sits in fog.users

[lmioperations]

@tom-elliott Dang, this is getting more confusing :D.

[Tom Elliott]

Are you sure caps-lock isn’t set and all. I know it seems stupid, but this doesn’t make sense.

What if you copy the word password and use the copy paste to the password field.

[lmioperations]

@tom-elliott Capslock is definitely not on. You saw exactly what I pasted into the shell prompt (what you see in my previous post is what I copied straight out of my shell prompt from the server) :-X…

[Tom Elliott]

In chat requested @lmioperations edit /opt/fog/.fogsettings and remove the packages line. Then re-run the installer. All things seemed to point that mcrypt packages weren’t installed or enabled.

After rerunning the installer @lmioperations is able to login to the GUI using the password as set.

[lmioperations]

@tom-elliott You rock Tom! Thanks for the help man! : )