Re: [webmin-l] Problem with Usermin and login

On 5/23/2017 10:54 AM, Nigel Aves wrote:
>
> John,
>
> Not an IPhone, so for once I cannot blame Apple! I have an Android LG 
> tablet, I tried using Chrome and Firefox with the same result (tried 
> on three different days).
>
> I'm using the self signed certificate that is supplied with webmin / 
> usermin, I don't think it was a connection issue as I did get to the 
> login screen all OK, that's where I had the "Login failed. Please try 
> again". Not had an issue in past. Just tried it using the "home 
> network" and it's all working ok. I didn't change location / network 
> on my trip, which was to the UK. I did also try using 4G (throttled to 
> 2G by TMobile in UK) and a straight wireless network connection.
>
> I'm the only person who has access to the server, so I know that 
> nothing changed there, which is why I feared I had been "hacked".
>
> I do run mod_evasive and mod_security, but if it had been one of those 
> interacting I would have expected a different message.
>
> Many thanks for your thoughts.
>
> Nigel.
>
You are welcome. Those ideas were a bit of a stab in the dark based on 
one of my customers hitting the iPhone upgrade issue with email while 
she traveled in Europe. The only other thing I can think of is that most 
mobile devices strongly cache pages to save your data usage. Maybe the 
login page was just a cached page and until you hit submit to login, 
there may have been no interaction with the server? What happened is 
very odd. Yet since it started working fine again when you got home, I'm 
still thinking it may have been a firewall issue on the remote networks. 
Just like many will not allow the use of port 25 except for that 
network's email. I'm not sure if this would generate the "Login failed. 
Please try again." error though. Being a road warrior can be difficult.

Sorry I didn't have a good answer. And I wasn't trying to bash Apple, 
although I do get a bit irritated with taking away a user's ability to 
make a decision about something.

John
>
> On 5/23/2017 7:29 AM, John Hinton wrote:
>> On 5/22/2017 3:14 PM, Nigel Aves wrote:
>>> Often when I am traveling I will allow Usermin to be accessed from the
>>> net so I can check emails.
>>>
>>> I was away for three weeks, did the above, allowed access to the port
>>> I use (not 10000), tested from home and all was good.
>>>
>>> For the first week everything worked well and I could access my email
>>> etc. But then I started getting the message that the password was not
>>> recognized. I tried it on different devices but the same message
>>> appeared.
>>>
>>> Yesterday on my return (and fearing someone had hijacked the server) I
>>> checked the server over, and nothing had changed. Password was as it
>>> was set, Thunderbird could access the server with no issues and
>>> download emails etc.
>>>
>>> I've used this method on about 5 trips with never an issue, can anyone
>>> think why this should have happened?
>>>
>> Is this an iPhone? Was there perhaps an OS upgrade pushed to it at about
>> the end of that first week? Are you using a legit cert or a self signed
>> cert for Usermin? Apple has gotten really finicky about this on their
>> mail program, removing the override option. I don't know this is the
>> problem you had, but I would think that would be a good place to start
>> looking.
>>
>> And lastly, does it work now that you are home? If so, maybe a firewall
>> issue on the network you were using while away? Did you change
>> locations/networks at that one week mark?
>>
>> John
>>
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org!http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list [email protected]
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
>>
>>
>
> -- 
>
> from the desk of Nigel
>
> http://soft-focus-imagining.com
> http://twin-peaks-video.com
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> -
> Forwarded by the Webmin mailing list at [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list