Cant use admin logon after preflight

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident: Can’t logon after preflight using admin account.

2. Describe your environment:

  • OS Information: Ubuntu 24

  • Package Version: 7

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem? Verified hash was correct and not mixed up with secret. I was able to change root user to mike, reboot and then it worked. I did not see a restriction on that user; the config file says admin is default.

4. How can the community help? and ideas?

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Hey @mikemaragos ,

Does it mean that the graylog login form doesn’t accept the admin/password combination? The admin is indeed the default username.

Anything suspicious in the server logs?

Thanks,
Tomas

3

I didn’t see anything suspicious in the logs but I believe that I can replicate the issue. I did try to reset and was able to trigger preflight using admin but once’s it goes live, I had to change user. Also noteworthy, I did not touch the password. I have overridden the root user in server configuration and previously flipped back and forth with admin and Mike. I am able to switch and zip the logs if your curious.

4

Hi @mikemaragos ,

Just to clarify, there are two different passwords used, both working together with the admin user, both in a different context:

  • Autogenerated password required for basic auth to enter the preflight setup. This is the password you see in your server.log after the initial startup. This works only for the preflight and nowhere else
  • The root_password_sha2 configuration in graylog.conf, which is a password hash for the root_username user (by default admin). This hash is something you have to compute and set in the configuration. With this user/password combination, you will be able to log in into the graylog UI once you finish the initial preflight setup.

Is it possible that there is some mismatch here? Or maybe your browser autofilling the preflight password in the admin UI form?

Can you possibly check the web browser console if there is any error? And maybe take a screenshot of the failed login form? Just so we can narrow down what’s happening.

Thank you,Tomas

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.