Mailing List Archive

Can't change Web Frontend Password
Hello,

I can properly log in to the Web front end using the default admin user
and mythtv password. When I try to change it, however, I get an error
in the browser and this in the backend logs:

Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
servicehost.cpp:152 (Invoke) MethodInfo::Invoke - An Exception Occurred:
Incorrect Old Password supplied when trying to change password for 'admin'.
Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
servicehost.cpp:451 (ProcessRequest) Incorrect Old Password supplied
when trying to change password for 'admin'.

What's more, the API gave the same:

curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
http://localhost:6544/Myth/ChangePassword
curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
http://localhost:6544/Myth/ChangePassword
<?xml version="1.0"
encoding="utf-8"?><detail><errorCode>501</errorCode><errorDescription>Incorrect
Old Password supplied when trying to change password for
&apos;admin&apos;.</errorDescription></detail>

I have verified that ~/.mythtv is writable by the MythTV user (the
backend has put a lot of other stuff there too).

How can I get this set so that it's not so insecure? Is there a file I
can edit somewhere?

John
_______________________________________________
mythtv-users mailing list
mythtv-users@mythtv.org
http://lists.mythtv.org/mailman/listinfo/mythtv-users
http://wiki.mythtv.org/Mailing_List_etiquette
MythTV Forums: https://forum.mythtv.org
Re: Can't change Web Frontend Password [ In reply to ]
Forgot to add -- this is 0.28 on Debian.

John

On 06/12/2017 11:40 AM, John Goerzen wrote:
> Hello,
>
> I can properly log in to the Web front end using the default admin user
> and mythtv password. When I try to change it, however, I get an error
> in the browser and this in the backend logs:
>
> Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
> servicehost.cpp:152 (Invoke) MethodInfo::Invoke - An Exception Occurred:
> Incorrect Old Password supplied when trying to change password for 'admin'.
> Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
> servicehost.cpp:451 (ProcessRequest) Incorrect Old Password supplied
> when trying to change password for 'admin'.
>
> What's more, the API gave the same:
>
> curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
> http://localhost:6544/Myth/ChangePassword
> curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
> http://localhost:6544/Myth/ChangePassword
> <?xml version="1.0"
> encoding="utf-8"?><detail><errorCode>501</errorCode><errorDescription>Incorrect
> Old Password supplied when trying to change password for
> &apos;admin&apos;.</errorDescription></detail>
>
> I have verified that ~/.mythtv is writable by the MythTV user (the
> backend has put a lot of other stuff there too).
>
> How can I get this set so that it's not so insecure? Is there a file I
> can edit somewhere?
>
> John

_______________________________________________
mythtv-users mailing list
mythtv-users@mythtv.org
http://lists.mythtv.org/mailman/listinfo/mythtv-users
http://wiki.mythtv.org/Mailing_List_etiquette
MythTV Forums: https://forum.mythtv.org
Re: Can't change Web Frontend Password [ In reply to ]
On 06/12/2017 11:40 AM, John Goerzen wrote:
> Hello,
>
> I can properly log in to the Web front end using the default admin user
> and mythtv password. When I try to change it, however, I get an error
> in the browser and this in the backend logs:
>
> Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
> servicehost.cpp:152 (Invoke) MethodInfo::Invoke - An Exception Occurred:
> Incorrect Old Password supplied when trying to change password for 'admin'.
> Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
> servicehost.cpp:451 (ProcessRequest) Incorrect Old Password supplied
> when trying to change password for 'admin'.
>
> What's more, the API gave the same:
>
> curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
> http://localhost:6544/Myth/ChangePassword
> curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
> http://localhost:6544/Myth/ChangePassword
> <?xml version="1.0"
> encoding="utf-8"?><detail><errorCode>501</errorCode><errorDescription>Incorrect
> Old Password supplied when trying to change password for
> &apos;admin&apos;.</errorDescription></detail>
>
> I have verified that ~/.mythtv is writable by the MythTV user (the
> backend has put a lot of other stuff there too).

No changes would be made there.

> How can I get this set so that it's not so insecure? Is there a file I
> can edit somewhere?

No file, the Myth/ChangePassword endpoint changes a password stored in settings here:

curl yourBackend:6544/Myth/GetSetting?Key=HTTP/Protected/Password\&HostName=_GLOBAL_

<?xml version="1.0" encoding="UTF-8"?><String>8hDRxR1+E/n3/s3YUOhF+lUw7n4=</String>

assuming your old admin password is still: mythtv. If it's really asdfasdf, then it
would be: kkKdgqQekwSGxt5evalgLVXDmYY= . Just guessing that you'd changed it in the
past to some other password.

However, I don't understand where you're successfully logging in to WebFrontend. Is
it when you initially go to yourBackendAgain:6544? (I don't get prompted for a password
there, but I'm on version 29.pre but don't recall changes since 0.28.)

What's the output of this:

curl stillYourBackend:6544/Myth/GetSetting?Key=HTTP/Protected/URLs\&HostName=_GLOBAL_

I *think* you want to change something that doesn't have a GUI/API do it yet.

--
Bill
_______________________________________________
mythtv-users mailing list
mythtv-users@mythtv.org
http://lists.mythtv.org/mailman/listinfo/mythtv-users
http://wiki.mythtv.org/Mailing_List_etiquette
MythTV Forums: https://forum.mythtv.org