Unable To Login To Management Console From One Machine But Fine From Another

[Alan Figgins]

Hi All,

I have a really weird situation with a test install (so no real implications, but still....)

If I try to login from Win10Pro using FireFox, I get rejected, with 'Incorrect Username or Password'

If I try to login from Ubuntu using FireFox, with the same credentials, I can login fine.

Just to be 100% sure, I opened a backup, went into the xml file, and retrieved the username / password from there - they are exactly the same as I was using, and even if I copy paste from there, into the login, it still fails from the Win10 machine.

I have copied and pasted the username and password into a txt doc in both directions (Win10 to Ubuntu and Ubuntu to Win10), and used that as source to copy / paste into the 3CX web management interface, and it makes no difference - same result, with Ubuntu working fine, and Win10 rejected.

There are no blacklisted IPs, and both Win10 and Ubuntu are on the same subnet.

This is an install on bare metal, using the 3CX Debian ISO. I have rebooted the server, but that does not fix the issue.


I am flummoxed, and just a little concerned that it might happen to a client.

Alan.

 

[Alphabetic]

Have you enabled console restrictions under Security > Security Settings > Console Restrictions? If so, is your IP in the allowed list?

 

[Alan Figgins]

Hi kieferschild,

Security > Security Settings > Console Restrictions = Allow Access from everywhere

Both of the machines (Ubuntu and Win10) are in the same subnet, and that whole subnet has explicit 'allow' settings:

192.168.0.0/16

I don't recall entering it as a /16 - I would have thought I'd enter it as 192.168.1.0/24, but regardless both of the machines are in that subnet.

From Dashboard > PBX Status > Blacklisted IPs there are none blacklisted, and I have an explicit allow for

192.168.1.0/24


Since this is all just local and there is nobody else using the system yet, I'm going to take down the entire network (router, 3CX, both machines, even the printer and switch), let it sit for a few mins, then restart it all, to see if it makes any difference.

Thanks,

Alan.

 

[Alphabetic]

What happens if you clear browser cache or even identify private browsing?

Have you got more than one test install? Does dns ping to correct IP?

Can you try with chrome? Does it happen on another win10 pc?

 

[Alan Figgins]

Hi kieferschild,

I should have mentioned that I tried clearing the browser cache, and also tried via a 'private browsing' window (I figured it might be a cookie issue), but neither of those helped.

I have only one test install right now, but I am having no issues, from either Ubuntu or Win10, logging into any of my clients' live systems - it seems to be only this one. I have not tested a ping from Win10, but I am pretty certain addressing is not an issue, since the login screen comes up, but rejects the credentials.

I am extremely reluctant to install Chrome on my primary Win10 machine, just to do a test - I'd wipe the test install of 3CX and Debian before going there!

Good question about another Win10 machine. I can try that when I get back.

Thanks,

Alan.

 

[AWS2P]

Hi Alan,
if you are unsure about subnet to be /16 or /24 did you tried with no explicit alow rules and see if access is granted or not?

 

[florink]

Can you confirm that when you ping your FQDN you get the same IP on both machines?

Try changing the credentials from the Ubuntu machine since you can login and then retest again on Windows.

 

[Alan Figgins]

Hi,

I suspect that the subnet in Security > Security Settings > Console Restrictions was created automatically, whereas I always manually enter the LAN subnet as an explicit allow.

I changed the credentials from Ubuntu, and now Win10 can login!

Very odd, and a bit scary, but it seems to be resolved now.

Not sure where to go from here, and whether to trust this install, or just wipe it and start from scatch...


Alan.

 

[florink]

I don't believe that it's the installation the problem. Are you using any password manager/plugin on the Win10 machine? If yes then it might have been automatically submitting a stored password (which might have been something totally different).

 

[Alan Figgins]

Hi - Yes, I have LastPass on both machines, but I checked the credentials in there, and they are correct.

More specifically, if I had LastPass complete the credentials on Ubuntu it still worked, so I am very sure that LastPass was never the issue. Also, refer my previous notes above copy / pasting from a txt document in both directions.

Thanks,

Alan.