Bug #3848
Login not working in Webinterface
100%
Description
Yesterday I've updated tvheadend on my raspberry pi (installed from apt-repository) with the latest git-version.
https://tvheadend.org/boards/4/topics/21185
Now I'm running Build: 4.1-2114~g7b28d75 (2016-06-07T22:54:55+0200)
Since the update the login in webinterface does not work correctly.
If I login with the superuser the credentials are ask again and again.
After that I've tried a login configured in tvheadend.
After entering the credentials two times I was successfully logged in.
After logout I can login as superuser by entering the credentials two times.
History
Updated by Mark Clarkstone over 8 years ago
Al Bundy wrote:
Yesterday I've updated tvheadend on my raspberry pi (installed from apt-repository) with the latest git-version.
https://tvheadend.org/boards/4/topics/21185Now I'm running Build: 4.1-2114~g7b28d75 (2016-06-07T22:54:55+0200)
Since the update the login in webinterface does not work correctly.
If I login with the superuser the credentials are ask again and again.
After that I've tried a login configured in tvheadend.
After entering the credentials two times I was successfully logged in.After logout I can login as superuser by entering the credentials two times.
This is a known bug, you can workaround it for now by turning off "Use HTTP digest authentication" in Configuration -> General -> Base. Yes it's less secure, but as long as you're not leaving tvheadend open to the world it should be okay.
Updated by Al Bundy over 8 years ago
Perfect - I'll try this.
Disabling the option is not a problem because tvh is only reachable in my LAN.
I'm glad that this is a bug a not an issue because of my switch from repository to git.
Updated by J G Miller over 8 years ago
"This is a known bug"
Does it have a tracker reference number?
"turning off "Use HTTP digest authentication" in Configuration"
Until such time as the bug is fixed, surely this should NOT be activated by default?
In my case, with r.f027e3c built on 2016-05-17 and the latest r.f59669c built 2016-06-08, repeated attempts at trying to get a verified access login with a freshly passworded account have failed with 401 unauthorized.
At first I thought it was possibly a bug in the new startup wizard and then resorted to manual creation and also tried with/without allowed network filters, so overall a very frustrating experience.
Updated by Mark Clarkstone over 8 years ago
- Status changed from New to Accepted
J G Miller wrote:
"This is a known bug"
Does it have a tracker reference number?
I believe there is one somewhere, I can't find it right now though.
"turning off "Use HTTP digest authentication" in Configuration"
Until such time as the bug is fixed, surely this should NOT be activated by default?
I completely agree, I've opened a PR to correct it for now until a proper fix can be done.
In my case, with r.f027e3c built on 2016-05-17 and the latest r.f59669c built 2016-06-08, repeated attempts at trying to get a verified access login with a freshly passworded account have failed with 401 unauthorized.
At first I thought it was possibly a bug in the new startup wizard and then resorted to manual creation and also tried with/without allowed network filters, so overall a very frustrating experience.
Updated by Mark Clarkstone over 8 years ago
Al Bundy wrote:
Maybe #3709
perexg (Jaroslav) rejected the suggested fix there too but seeing as this is causing so much hassle for a lot of people (especially confusing for new users), this should be off by default until a proper fix can be found, otherwise more people are going to open tickets for it.
Updated by Jaroslav Kysela over 8 years ago
- Status changed from Accepted to Fixed
- % Done changed from 0 to 100
Applied in changeset commit:tvheadend|42ef859706ae283ba40d9d059b12b9209332fc8d.
Updated by Jaroslav Kysela over 8 years ago
The digest auth should be fixed in v4.1-2117-g42ef859 .