Bug or installation screwup on my part?

[cstackpole]

Hello,
I just installed Zabbix 1.5.3 rev 5841 (download link: http://www.zabbix.com/developers.php ) and just did the install the way I normally do. It is the same way I always install Zabbix on Debian via Source.

The installation went smooth, but when I tried to log in as Admin (no Password) I get "ERROR: Login name or password is incorrect". At first I thought it was my browser (Firefox 3), so I tried Ephiphany...then Opera...then over to a Windows box and tried IE. Then I thought it was my install. So I created a virtual machine, and using the guide (http://www.zabbix.com/wiki/doku.php?...ch_from_source ) on the wiki I tried again (which is almost exactly how I do it, just a few steps moved around).

Same thing. I can not log in via Admin. I have tried no password, I have tried admin and Admin as the login and the password (all combinations). Nothing works. I can log in as guest, but I have no permissions to anything at all. No pages show.

Since the guest logs in, and Admin doesn't I thought the password was something it shouldn't be. I thought "I will just reset it then!" So I logged into mysql.

mysql> select * from users;
+--------+-------+---------+---------------+----------------------------------+-----+-----------+------------+-------+---------+------+--------------+----------------+-------------+---------------+
| userid | alias | name    | surname       | passwd                           | url | autologin | autologout | lang  | refresh | type | theme        | attempt_failed | attempt_ip  | attempt_clock |
+--------+-------+---------+---------------+----------------------------------+-----+-----------+------------+-------+---------+------+--------------+----------------+-------------+---------------+
|      1 | Admin | Zabbix  | Administrator | 5fce1b3e34b520afeffb37ce08c7cd66 |     |         0 |        900 | en_gb |      30 |    3 | deafault.css |              3 | 192.168.5.215 |    1217327098 | 
|      2 | guest | Default | User          | d41d8cd98f00b204e9800998ecf8427e |     |         0 |        900 | en_gb |      30 |    1 | default.css  |              0 |             |             0 | 
+--------+-------+---------+---------------+----------------------------------+-----+-----------+------------+-------+---------+------+--------------+----------------+-------------+---------------+
2 rows in set (0.00 sec)

mysql> update users set passwd="d41d8cd98f00b204e9800998ecf8427e" where alias='Admin';
Query OK, 1 row affected (0.01 sec)
Rows matched: 1  Changed: 1  Warnings: 0

mysql> select * from users;
+--------+-------+---------+---------------+----------------------------------+-----+-----------+------------+-------+---------+------+--------------+----------------+-------------+---------------+
| userid | alias | name    | surname       | passwd                           | url | autologin | autologout | lang  | refresh | type | theme        | attempt_failed | attempt_ip  | attempt_clock |
+--------+-------+---------+---------------+----------------------------------+-----+-----------+------------+-------+---------+------+--------------+----------------+-------------+---------------+
|      1 | Admin | Zabbix  | Administrator | d41d8cd98f00b204e9800998ecf8427e |     |         0 |        900 | en_gb |      30 |    3 | deafault.css |              3 | 192.168.5.215 |    1217327098 | 
|      2 | guest | Default | User          | d41d8cd98f00b204e9800998ecf8427e |     |         0 |        900 | en_gb |      30 |    1 | default.css  |              0 |             |             0 | 
+--------+-------+---------+---------------+----------------------------------+-----+-----------+------------+-------+---------+------+--------------+----------------+-------------+---------------+
2 rows in set (0.00 sec)

I reset mysql, apache, and I even restarted the system. Nothing. I still can't log in.

After searching the forums and Google I have found a number of posts similar to mine, but they all seem to be for old versions and most have a posting date of 2007 or earlier. I didn't find a bug report similar to this problem for anything 1.5. I also did an update with 1.5.2 svn a few weeks ago, and did not have this problem.

2 systems (one being a fresh virtual machine build) and I am unable to get this version to log in. Anyone having the same problem? Is it a bug that I have some how missed in my search? Anyone see anything I may have done to screw it up?

Thanks!

[cstackpole]

Just noticed something else. In the mysql table for Admin, theme=deafault.css. Guest is listed as default.css (which, as a file, exists).

That can't be good....

mysql> update users set theme="default.css" where alias='Admin';

and then I tried again. Still the same problem. Can't log in, but this is probably a bug too.

[cstackpole]

Fix it...kinda...

First I flushed out the database

mysql> Drop database zabbix;

Then, just as the guide has it, I added the database, user, mysql.sql, data.sql, images_mysql.sql.
I tried to log in again. Same problem.

I logged in to my 1.4.4 Zabbix server and found it's password hash

mysql> select * from users;

and then reinserted into the 1.5.3 database*

mysql> update users set passwd="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" where alias='Admin';

I also updated the theme

mysql> update users set theme="default.css" where alias='Admin';

.

Then I tried again with my known password and TaDa! It worked!

That makes it 0 for 3 on the initial login of Admin with blank password. Replacing the password with a known password works.

Well that was a fun hour and a half...now that I am logged in, I am off to see if I can find anything else that causes issues.

*Do note that aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not a real password and that I did replace it with a known mysql hash password. Just thought I would clarify...

[Aly]

Nice one
Starting vers. 1.5.3 blank passwords are restricted (except guest), default pswd for Admin is "zabbix"

[cstackpole]

Ah.
Well.
That explains it. I missed that bit of information all together. Thanks!

[NOB]

Ah.
Well.
That explains it. I missed that bit of information all together. Thanks!

I downloaded the R5900 version and in the docs (ZABBIX manual)
the empty passwd is still mentioned !

Without Internet connection to search in the forum and find this
post, it took me a few minutes to figure that one out, though

A look at login.php helped identifying the real problem.

I simply did set the password to a MD5 of my favorite one.
In addition, there is a new "BLOCK_TIME" defined after a certain
amount of failed login attempts now !

If you use, e.g. md5sum to create the MD5-hash of the password without
the help of MySQL, be careful to omit the newline character, i.e.

echo -n "myfavoritepassword" | md5sum

It worked for me, but YEMV (your echo might vary)

Regards

Norbert.

[rolandsym]

Documentation still not updated

This one got me too.... :-(

Rolandsym

[Tenzer]

https://support.zabbix.com/browse/ZBX-427