# Invalid credentials after a new install **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [April 6, 2017, 2:25pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727 "2017-04-06T14:25:01Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![tadeuuuuu](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tadeuuuuu/32/246_2.png) [@tadeuuuuu](https://community.graylog.org/u/tadeuuuuu)\ **Post date:** [April 6, 2017, 2:25pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/1 "2017-04-06T14:25:01Z")
Hi Guys, i’m just finished a fresh installation of Graylog and i couldn’t log in in my web browse. I dont know what to do. Here are my environment: CentOS 7: -\> mongodb-org-3.2.12-1 -\> elasticsearch-2.4.4-1 -\> graylog-server-2.2.3-1 This is my /etc/graylog/server/server.conf: ```auto is_master = true node_id_file = /etc/graylog/server/node-id password_secret = RjHNwaMFYmrzFk1F1pAKs0ZOPYglbAPhlCoEk6B9Vaa4qLQF1YT8dJsMHRyb6oF1 root_username = admin root_password_sha2 = fc8252c8dc55839967c58b9ad755a59b61b67c13227ddae4bd3f78a38bf394f7 root_timezone = UTC plugin_dir = /usr/share/graylog-server/plugin rest_listen_uri = http://192.168.0.104:12900/api/ web_listen_uri = http://192.168.0.104:9000/ rotation_strategy = count elasticsearch_max_docs_per_index = 20000000 elasticsearch_max_number_of_indices = 20 retention_strategy = delete elasticsearch_shards = 4 elasticsearch_replicas = 0 elasticsearch_index_prefix = graylog allow_leading_wildcard_searches = false allow_highlighting = false elasticsearch_analyzer = standard output_batch_size = 500 output_flush_interval = 1 output_fault_count_threshold = 5 output_fault_penalty_seconds = 30 processbuffer_processors = 5 outputbuffer_processors = 3 processor_wait_strategy = blocking ring_size = 65536 inputbuffer_ring_size = 65536 inputbuffer_processors = 2 inputbuffer_wait_strategy = blocking message_journal_enabled = true message_journal_dir = /var/lib/graylog-server/journal lb_recognition_period_seconds = 3 mongodb_uri = mongodb://localhost/graylog mongodb_max_connections = 1000 mongodb_threads_allowed_to_block_multiplier = 5 content_packs_dir = /usr/share/graylog-server/contentpacks content_packs_auto_load = grok-patterns.json proxied_requests_thread_pool_size = 32 ``` When i try to log in i always get this message: ![](https://cdck-file-uploads-us1.s3.dualstack.us-west-2.amazonaws.com/flex016/uploads/graylog/original/1X/3563232160b8422d3dd291053c953411a8515cf4.png) And this is my /var/log/graylog-server/server.log: ```auto 2017-04-06T11:04:13.960-03:00 INFO [SessionsResource] Invalid username or password for user "admin" 2017-04-06T11:04:19.225-03:00 WARN [ModularRealmAuthenticator] Realm [org.graylog2.security.realm.RootAccountRealm@6e7ed8f2] threw an exception during a multi-realm authentication attempt: org.apache.shiro.authc.IncorrectCredentialsException: Submitted credentials for token [org.apache.shiro.authc.UsernamePasswordToken - admin, rememberMe=false] did not match the expected credentials. at org.apache.shiro.realm.AuthenticatingRealm.assertCredentialsMatch(AuthenticatingRealm.java:600) ~[graylog.jar:?] at org.apache.shiro.realm.AuthenticatingRealm.getAuthenticationInfo(AuthenticatingRealm.java:578) ~[graylog.jar:?] at org.apache.shiro.authc.pam.ModularRealmAuthenticator.doMultiRealmAuthentication(ModularRealmAuthenticator.java:219) [graylog.jar:?] at org.apache.shiro.authc.pam.ModularRealmAuthenticator.doAuthenticate(ModularRealmAuthenticator.java:269) [graylog.jar:?] at org.apache.shiro.authc.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:198) [graylog.jar:?] at org.apache.shiro.mgt.AuthenticatingSecurityManager.authenticate(AuthenticatingSecurityManager.java:106) [graylog.jar:?] at org.apache.shiro.mgt.DefaultSecurityManager.login(DefaultSecurityManager.java:270) [graylog.jar:?] at org.apache.shiro.subject.support.DelegatingSubject.login(DelegatingSubject.java:256) [graylog.jar:?] at org.graylog2.rest.resources.system.SessionsResource.newSession(SessionsResource.java:134) [graylog.jar:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_121] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_121] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_121] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_121] at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory$1.invoke(ResourceMethodInvocationHandlerFactory.java:81) [graylog.jar:?] at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:144) [graylog.jar:?] at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:161) [graylog.jar:?] at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$TypeOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:205) [graylog.jar:?] at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:99) [graylog.jar:?] at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:389) [graylog.jar:?] at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:347) [graylog.jar:?] at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:102) [graylog.jar:?] at org.glassfish.jersey.server.ServerRuntime$2.run(ServerRuntime.java:326) [graylog.jar:?] at org.glassfish.jersey.internal.Errors$1.call(Errors.java:271) [graylog.jar:?] at org.glassfish.jersey.internal.Errors$1.call(Errors.java:267) [graylog.jar:?] at org.glassfish.jersey.internal.Errors.process(Errors.java:315) [graylog.jar:?] at org.glassfish.jersey.internal.Errors.process(Errors.java:297) [graylog.jar:?] at org.glassfish.jersey.internal.Errors.process(Errors.java:267) [graylog.jar:?] at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:317) [graylog.jar:?] at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:305) [graylog.jar:?] at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:1154) [graylog.jar:?] at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:384) [graylog.jar:?] at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:224) [graylog.jar:?] at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:176) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_121] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_121] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_121] 2017-04-06T11:04:19.227-03:00 INFO [SessionsResource] Invalid username or password for user "admin" ``` Any help will be appreciate! Thanks in advance!! ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [April 6, 2017, 3:52pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/2 "2017-04-06T15:52:21Z")
You’ve been using the wrong SHA-256 hash for `root_password_sha2`. I guess you’ve been trying to use the password “admin”, but actually you’ve been using the SHA-256 hash of “admin\n” (with trailing newline). ```auto # "admin" without newline $ echo -n admin | sha256sum 8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918 - # "admin" with newline $ echo admin | sha256sum fc8252c8dc55839967c58b9ad755a59b61b67c13227ddae4bd3f78a38bf394f7 - ``` ---
**Author:** ![tadeuuuuu](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tadeuuuuu/32/246_2.png) [@tadeuuuuu](https://community.graylog.org/u/tadeuuuuu)\ **Post date:** [April 6, 2017, 4:08pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/3 "2017-04-06T16:08:11Z")
It worked! =) Thanks a lot man, but i couldn’t understand why i was not able to put ‘admin’ as a password. I did this: [root@notebook graylog-server]# echo -n 123456 | shasum -a 256 8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92 and it worked. At the configuration file it says: “# Create one by using for example: echo -n yourpassword | shasum -a 256” But thanks anyway! Saved my day!! ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [April 6, 2017, 5:00pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/4 "2017-04-06T17:00:06Z")
> [@tadeuuuuu](#): > > Thanks a lot man, but i couldn’t understand why i was not able to put ‘admin’ as a password. You seem to have missed the `-n` parameter for the `echo` command. ---
**Author:** ![Strix](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@Strix](https://community.graylog.org/u/Strix)\ **Post date:** [February 20, 2019, 3:18pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/5 "2019-02-20T15:18:31Z")
> [@jochen](#): > > echo admin | sha256sum Thanks Jochen, solved my problem ---
**Author:** ![niu2x](https://avatars.discourse-cdn.com/v4/letter/n/9dc877/32.png) [@niu2x](https://community.graylog.org/u/niu2x)\ **Post date:** [July 30, 2021, 7:42pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/6 "2021-07-30T19:42:34Z")
i solved same problem by remove ". change GRAYLOG\_ROOT\_PASSWORD\_SHA2=“XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX” to GRAYLOG\_ROOT\_PASSWORD\_SHA2=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ---
**Author:** ![edwardmarrufo](https://avatars.discourse-cdn.com/v4/letter/e/35a633/32.png) [@edwardmarrufo](https://community.graylog.org/u/edwardmarrufo)\ **Post date:** [July 30, 2021, 8:04pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/7 "2021-07-30T20:04:14Z")
Closed on July 30, 2021, 8:04pm UTC ---
**Author:** ![edwardmarrufo](https://avatars.discourse-cdn.com/v4/letter/e/35a633/32.png) [@edwardmarrufo](https://community.graylog.org/u/edwardmarrufo)\ **Post date:** [July 30, 2021, 8:04pm UTC](https://community.graylog.org/t/invalid-credentials-after-a-new-install/727/8 "2021-07-30T20:04:17Z")
Archived on July 30, 2021, 8:04pm UTC