Password still not working after 6.10.1 upgrade

[Spiritreader]

Hey everyone,

 

all the way back when RC-1 came out, I tried upgrading, but it was stopped in its tracks because I was unable to log in with my correct credentials.

 

I rolled back to 6.9.2 and everything worked fine again.

 

Now that 6.10 is released as stable, I tried again, and I still cannot log in with the WebGUI.

I tried downgrading to 6.9.2, setting the password to only letters, upgrading again, it still doesn't work.

 

I tried removing/renaming the shadow file, which prompts me to set a new password.

I set the password, press "logout", and I can not log back in again.

 

The shadow file is written to, there's a new hash in there, so this seems to have worked.

But it just won't let me access the WebUI?

SSH works fine.

 

The flash drive is fine, permissions are fine, there don't seem to be any corrupted files.

I have no idea how to proceed here.

 

This is the only thing that shows up in the log (I stay logged in after resetting the password until I log out again)

May 26 04:47:09 UMS webGUI: Unsuccessful login user root from 192.168.178.84

 

Edited May 26, 2022 by Spiritreader

[Spiritreader]

I figured it out. 

 

There seems to be an issue with how the WebGUI matches usernames.

I have a user called "rootshare" which exposes all shares via a custom smb config.

When this user account exists, unraid's WebUI attempts to match the password for "rootshare" instead of "root".

Using the password for the "rootshare" user then works for the "root" user.

 

Seems like an oversight? (username.startsWith() / username.Contains() or something?)

Edited May 26, 2022 by Spiritreader
clarification

[JonathanM]

Please submit a bug report. @limetech will want to investigate.

[AndrewZ]

I submitted a bug report internally for this a couple of hours ago.  

[AndrewZ]

Should be fixed on the next release.  Thanks for finding  

[mgrinspan]

If it helps at all, I have this same issue. I also have a second user containing root in its name ("root-smb"). Using the password for smb-root with the actual root user allows me to log in.

 

Thanks for the workaround @JonathanM!!