[mythtv-users] Can't change Web Frontend Password

[Bill Meek]

On 06/12/2017 11:40 AM, John Goerzen wrote:
> Hello,
> 
> I can properly log in to the Web front end using the default admin user
> and mythtv password.  When I try to change it, however, I get an error
> in the browser and this in the backend logs:
> 
> Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
> servicehost.cpp:152 (Invoke) MethodInfo::Invoke - An Exception Occurred:
> Incorrect Old Password supplied when trying to change password for 'admin'.
> Jun 12 11:38:00 mythtv mythbackend: mythbackend[1109]: E HttpServer60
> servicehost.cpp:451 (ProcessRequest) Incorrect Old Password supplied
> when trying to change password for 'admin'.
> 
> What's more, the API gave the same:
> 
> curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
> http://localhost:6544/Myth/ChangePassword
> curl --data UserName=admin\&OldPassword=mythtv\&NewPassword=asdfasdf
> http://localhost:6544/Myth/ChangePassword
> <?xml version="1.0"
> encoding="utf-8"?><detail><errorCode>501</errorCode><errorDescription>Incorrect
> Old Password supplied when trying to change password for
> 'admin'.</errorDescription></detail>
> 
> I have verified that ~/.mythtv is writable by the MythTV user (the
> backend has put a lot of other stuff there too).

No changes would be made there.

> How can I get this set so that it's not so insecure?  Is there a file I
> can edit somewhere?

No file, the Myth/ChangePassword endpoint changes a password stored in settings here:

curl yourBackend:6544/Myth/GetSetting?Key=HTTP/Protected/Password\&HostName=_GLOBAL_

<?xml version="1.0" encoding="UTF-8"?><String>8hDRxR1+E/n3/s3YUOhF+lUw7n4=</String>

assuming your old admin password is still: mythtv. If it's really asdfasdf, then it
would be: kkKdgqQekwSGxt5evalgLVXDmYY= . Just guessing that you'd changed it in the
past to some other password.

However, I don't understand where you're successfully logging in to WebFrontend. Is
it when you initially go to yourBackendAgain:6544? (I don't get prompted for a password
there, but I'm on version 29.pre but don't recall changes since 0.28.)

What's the output of this:

curl stillYourBackend:6544/Myth/GetSetting?Key=HTTP/Protected/URLs\&HostName=_GLOBAL_

I *think* you want to change something that doesn't have a GUI/API do it yet.

-- 
Bill