sipcapture / homer-api

HOMER 5: Back-End (API) DEPRICATED - use sipcapture/homer-app
http://sipcapture.org
27 stars 67 forks source link

Cannot login to Homer UI. (Could initially) Installed using script #137

Closed tslytsly closed 8 years ago

tslytsly commented 8 years ago

Hi,

I installed Homer using the quick start script onto a fresh CentOS 7 install.

At first I could login to the UI. I left the login details at the defaults for this test server.

However, now I cannot log in any more, the login screen gives this error: Email and password combination not recognised

I found some info here: https://github.com/sipcapture/homer-api/issues/39 But I don't think this applies. It seems to be out of date.

Here is the sipcapture.conf file:

<VirtualHost *:80>
  ServerName homer

  # SSLEngine on
  # SSLCertificateFile /etc/ssl/localcerts/apache.pem
  # SSLCertificateKeyFile /etc/ssl/localcerts/apache.key

  # Indexes + Directory Root.
  DirectoryIndex index.php index.html index.htm
  DocumentRoot /var/www/html

  <Directory />
    Options FollowSymLinks
    AllowOverride none
  </Directory>
  <Directory /var/www/html >
    Options Indexes FollowSymLinks MultiViews
    AllowOverride All
    Order allow,deny
    allow from all
  </Directory>

</VirtualHost>

Thanks

tslytsly commented 8 years ago

OK, I found the problem, it's exactly as described here: https://github.com/sipcapture/homer/issues/193#issuecomment-251407484 As he says

So solution is add to my.cnf config validate_password_policy=LOW or set more strong password while install Homer

I did this and then restarted mysql which fixed the issue.

You can check if this is the same for you, assuming you are trying to log in with the defaults user and pw: According to https://dev.mysql.com/doc/refman/5.7/en/validate-password-options-variables.html login to mysql and run this query SHOW VARIABLES LIKE 'validate_password%';

If you get this in the output: validate_password_policy | MEDIUM then using the above suggestion will work.

I strongly suggest that this be documented somewhere and/or something be added to force the admin password be changed.