Problems with login in to ODK-X Server web-ui. Incorrect username or password

feisung · July 14, 2018, 10:50am

Quick update, upon inspecting the logs for sync-web-ui I see the issue seems to with:

2018-07-14 10:10:30.462 INFO 5 — [nio-8080-exec-8] bServiceDelegatingAuthenticationProvider : Logging in with http://sync:8080/odktables/{appId}/privilegesInfo
2018-07-14 10:10:30.506 INFO 5 — [nio-8080-exec-8] bServiceDelegatingAuthenticationProvider : Received an exception when getting granted roles
2018-07-14 10:10:30.506 INFO 5 — [nio-8080-exec-8] bServiceDelegatingAuthenticationProvider : Received 404
2018-07-14 10:10:30.507 INFO 5 — [nio-8080-exec-8] bServiceDelegatingAuthenticationProvider : Received

feisung · July 14, 2018, 11:09am

I think the issue was related to having some other container with nginx configuration, which was conflicting with the settings required by odk/sync-web-ui and the logs seems to have pointed me to the right direction.
So, here’s how I managed to get logged in:

Stopped all containers with the command docker stop $(docker ps -aq)
Re-run steps 2 - 10 as described in ODK-X Sync Endpoint — ODK-X Docs
Accessed /web-ui/
entered credentials
Login success.

Hope it helps anyone else having the same issue.

Simeon_Taskaris · October 23, 2018, 9:04am

Hi, I have the same problem…

I have installed ODK 2.0 Server on a VirtualBox running Ubuntu Server 18.04. I have access in php LDAP admin from host machine. I have created a user as decripted at ODK-X Sync Endpoint — ODK-X Docs

But, I cannot login in web-ui …

Is there any specific configuration that I miss?
(I have test all the above.)

Thanks!

linl33 · October 28, 2018, 7:35pm

Try to visit /odktables/default/tables under the same hostname as the web-ui, and using the same credential. If you’re able to get a valid response back, then the web-ui wasn’t configured properly.

ghare · January 26, 2019, 11:16pm

@feisung, where did you find the sync-web-ui logs. I am having exactly the same problem as you but still can’t login.

All good, found them in the Docker container. I get exactly the same error message and have tried the steps you suggested but I still can’t login to the Web-UI

linl33 · January 29, 2019, 12:57am

Try to visit odktables/default/tables. See if you can login from there.

The logs are stored in Docker. Use docker logs to get the logs, see link for detail.

ghare · February 1, 2019, 4:30am

@linl33 I get ‘Access Denied’ You do not have permission for this operation.

ghare · February 6, 2019, 3:42am

Simeon,
Did you solve this? I am having exactly the same problem with a clean installation of ODK2 on a clean Ubuntu 18.04 machine.

Thanks

ghare · February 6, 2019, 3:46am

Solved it! I needed to go into the 500 group and add my username to it by adding the attribute which wasn’t displayed.

Thanks.

I still can’t get logged on to the web-ui. I have tried re-installing everything. This is a clean install of ODK2 on a clean ubuntu 18.04 machine.

I really need to get this up and running for a demonstration.

web-ui logs:

2019-02-06 03:48:11.049 INFO 6 — [nio-8080-exec-3] bServiceDelegatingAuthenticationProvider : Logging in with http://sync:8080/odktables/{appId}/privilegesInfo
2019-02-06 03:48:11.099 INFO 6 — [nio-8080-exec-3] bServiceDelegatingAuthenticationProvider : Received an exception when getting granted roles

openldap logs:

5c5a58fb conn=1033 fd=12 ACCEPT from IP=10.0.2.4:47468 (IP=0.0.0.0:389)
5c5a58fb conn=1033 op=0 BIND dn=“uid=ghare,ou=people,dc=example,dc=org” method=128
5c5a58fb conn=1033 op=0 BIND dn=“uid=ghare,ou=people,dc=example,dc=org” mech=SIMPLE ssf=0
5c5a58fb conn=1033 op=0 RESULT tag=97 err=0 text=
5c5a58fb conn=1033 op=1 SRCH base=“uid=ghare,ou=people,dc=example,dc=org” scope=0 deref=3 filter=“(objectClass=*)”
5c5a58fb conn=1033 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
5c5a58fb conn=1033 op=2 UNBIND
5c5a58fb conn=1033 fd=12 closed
5c5a58fb conn=1034 fd=12 ACCEPT from IP=10.0.2.4:47470 (IP=0.0.0.0:389)
5c5a58fb conn=1034 op=0 BIND dn=“cn=readonly,dc=example,dc=org” method=128
5c5a58fb conn=1034 op=0 BIND dn=“cn=readonly,dc=example,dc=org” mech=SIMPLE ssf=0
5c5a58fb conn=1034 op=0 RESULT tag=97 err=0 text=
5c5a58fb conn=1034 op=1 SRCH base=“ou=default_prefix,ou=groups,dc=example,dc=org” scope=2 deref=3 filter=“(memberUid=ghare)”
5c5a58fb conn=1034 op=1 SRCH attr=cn objectClass javaSerializedData javaClassName javaFactory javaCodeBase javaReferenceAddress javaClassNames javaRemoteLocation
5c5a58fb <= mdb_equality_candidates: (memberUid) not indexed
5c5a58fb conn=1034 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
5c5a58fb conn=1034 op=2 UNBIND
5c5a58fb conn=1034 fd=12 closed
5c5a58fb connection_read(12): no connection!

The web-ui seems to connect to openldap and searches for the uid. openldap doesn’t appear to return any errors and only a single entry, which I would expect?

Thanks

NedBalzer · August 29, 2019, 6:13pm

OK, I’m having the same problem still. I go to https://l2odk2.vmhost.psu.edu/web-ui/login, and enter my newly created admin username and password. I immediately get this:
August 29, 2019 6:03:16 PM UTC
There was an unexpected error (type=Internal Server Error, status=500).
500
Please contact the operator with the above information.

I tried getting the docker logs for the nginx container: The last lines are:
10.255.0.2 - - [29/Aug/2019:18:03:05 +0000] “GET /web-ui/login HTTP/2.0” 200 2641 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0” “-”
10.255.0.2 - - [29/Aug/2019:18:03:05 +0000] “GET /web-ui/css/sitewide.css HTTP/2.0” 200 62 “https://l2odk2.vmhost.psu.edu/web-ui/login” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0” “-”
10.255.0.2 - - [29/Aug/2019:18:03:16 +0000] “POST /web-ui/login HTTP/2.0” 500 389 “https://l2odk2.vmhost.psu.edu/web-ui/login” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0” “-”

This really doesn’t give me any more info than that there is a 500 error, which I knew already.

I tried linl33’s suggestion to go to odktables/default/tables, and am prompted by a webserver generated username challenge (in a popup window) and when I authenticate there I just get:

falsefalse

I am not authenticated because if I go back to the root of the site I get the /web-ui/login screen again.

I believe web-ui isn’t configured correctly, but have no clue as to what the actual problem is!
Thanks for any help from anyone.

PS: I have verified that my username, odk2_admin is in ldap and is a member of default_prefix site_admins (gid 500)

Talha_Qasim · February 24, 2021, 10:36am

Hi,

I’m stuck at this step and trying to follow your instructions but they are sort of unclear, can you please help with this?

elmps2018 · February 24, 2021, 6:12pm

Hi @Talha_Qasim i @! As you are new to the community, when you get a chance, please introduce yourself here.

Could you please explain a bit more about what you are trying to do and what problems/questions you are having?

Talha_Qasim · February 25, 2021, 10:00am

Hi, I’m having the same issue as the OP, as I’m also unable to login to the webui after creating the user in OpenLDAP, I’ve also added the user to the correct group (500), but somehow no luck.

I’m also seeing this in the webui logs.

2019-02-06 03:48:11.049 INFO 6 — [nio-8080-exec-3] bServiceDelegatingAuthenticationProvider : Logging in with http://sync:8080/odktables/{appId}/privilegesInfo

ODK2.0 is running on Ubuntu 18.04 and using certbot.

Any help in this regard would be deeply appreciated.

Talha_Qasim · February 26, 2021, 9:29am

A fresh setup with only http works fine, but this no login issue arises as soon as i apply the https.

Prashant · April 8, 2021, 9:22am

Hi,
I’m recently trying manual server installation on my local system. i’m using windows 10 where Docker is installed and Swarm Mode is enabled. All required docker images has been pulled after running “mvn clean install” in the appropriate directory. But, Incorrect username and password is coming at http://127.0.0.1.

Although, i’m able to create user along with group assignment at https://127.0.0.1:40000.

Any help will be appreciated.

W_Brunette · April 8, 2021, 6:27pm

Three possible issues:

I am not sure the cn can have spaces, you can see the uid it removes the space.
You need to add the user to a group. Make sure you do step 5 Setup ODK-X Sync Endpoint with Cloud Services — ODK-X Docs
There needs to be at least one user in group 503.

Prashant · April 9, 2021, 4:21am

Hi @W_Brunette ,

I’m not using cloud-based setup but manual-server setup in my local system and as per your suggestion, i’ve updated the uid and added one user in group 503. But, still i’m not able to login at http://127.0.0.1/web-ui/login with same error as Incorrect username or password.

The screenshot attached below is depicting all 3 users i’ve added.

Prashant · April 9, 2021, 5:15am

Hi,
The following is the error after running the command docker logs sync-web-ui ID

2021-04-08 23:33:56.355  INFO 7 --- [nio-8080-exec-2] bServiceDelegatingAuthenticationProvider : Received an exception when getting granted roles

2021-04-08 23:33:56.355 INFO 7 — [nio-8080-exec-2] bServiceDelegatingAuthenticationProvider : Received 404
2021-04-08 23:33:56.355 INFO 7 — [nio-8080-exec-2] bServiceDelegatingAuthenticationProvider : Received <!doctype html>HTTP Status 404 – Not Foundbody {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}

HTTP Status 404 – Not Found

Type Status Report

Description The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.

Apache Tomcat/8.5.65

W_Brunette · April 9, 2021, 5:14pm

It looks like LDAP does not like how something is setup. Try logging in through a phone or mobile device and check the logs in sync-endpoint docker container. The sync-endpoint often gives better messages about the problems.

Prashant · April 12, 2021, 11:07am

Hi @W_Brunette ,

I’ve cleaned my docker by deleting all the earlier images. Again started from mvn clean install then pulling all the fresh images. Even then, i’m facing the same issue of incorrect name or password at http://127.0.0.1/web-ui

Also i’m attaching the docker logs result of sync-endpoint container. docker logs of sync-endpoint container.txt (12.8 KB)

Here, i’ve followed the documentation (Manual ODK-X Server setup) step-by-step and not able to understand the reason behind this.