New password.txt for admin not working

dev support
#1

I have Lucee working with a basic test page, however I cannot get the admin page to accept the password.txt - nothing happens, so the admin is unusable and hence so is Lucee!

There are no errors in apache, tomcat or lucee logs (or javascript console).
I am using Tuckey urlrewriter which shows successful pass-through in catalina log

<rule>
   <name>RULE: ignore lucee/form.cfm</name>
    <from>^/lucee/form.cfm$</from>
    <to last="true">-</to>
</rule>

apache2 access.log
**** - - [20/Apr/2022:18:50:09 +0000] “POST /lucee/admin/server.cfm HTTP/1.1” 302 4199 “https://test2..com/lucee/admin/server.cfm?action=overview" “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.88 Safari/537.36”
**** - - [20/Apr/2022:18:50:09 +0000] “GET /lucee/admin/server.cfm?action=overview HTTP/1.1” 200 7121 "https://test2..com/lucee/admin/server.cfm?action=overview” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.88 Safari/537.36”
**** - - [20/Apr/2022:18:50:10 +0000] “GET /lucee/form.cfm HTTP/1.1” 200 21743 “https://test2.****.com/lucee/admin/server.cfm?action=overview” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.88 Safari/537.36”

catalina log

20-Apr-2022 18:26:45.124 INFO [ajp-nio-127.0.0.1-8009-exec-8] org.apache.catalina.core.ApplicationContext.log org.tuckey.web.filters.urlrewrite.UrlRewriter DEBUG: processing request for /lucee/form.cfm
20-Apr-2022 18:26:45.124 INFO [ajp-nio-127.0.0.1-8009-exec-8] org.apache.catalina.core.ApplicationContext.log org.tuckey.web.filters.urlrewrite.RuleBase DEBUG: RULE: ignore lucee/form.cfm (rule 0) run called with /lucee/form.cfm
20-Apr-2022 18:26:45.125 INFO [ajp-nio-127.0.0.1-8009-exec-8] org.apache.catalina.core.ApplicationContext.log org.tuckey.web.filters.urlrewrite.RuleBase DEBUG: matched “from”
20-Apr-2022 18:26:45.125 INFO [ajp-nio-127.0.0.1-8009-exec-8] org.apache.catalina.core.ApplicationContext.log org.tuckey.web.filters.urlrewrite.RuleBase DEBUG: ‘to’ is ‘-’, no substitution, passing through URL
20-Apr-2022 18:26:45.125 INFO [ajp-nio-127.0.0.1-8009-exec-8] org.apache.catalina.core.ApplicationContext.log org.tuckey.web.filters.urlrewrite.RuleExecutionOutput DEBUG: needs no substitution
20-Apr-2022 18:26:45.125 INFO [ajp-nio-127.0.0.1-8009-exec-8] org.apache.catalina.core.ApplicationContext.log org.tuckey.web.filters.urlrewrite.UrlRewriter DEBUG: rule is last

Don’t forget to tell us about your stack!

OS:Ubuntu 20.04 LTS
Java Version: openjdk version “11.0.14.1”
Tomcat Version: 9.0
Lucee Version: 5.3.8.206

#2

The password is set at install time.

How was Lucee installed and why are you using a FQDN, try localhost.localdomain
/lucee/admin/server.cfm?action=security.access

#3

I’m a little confused by what you mean here. Are you seeing the login page which tells you to create the password.txt file or are you not even able to see that? Where are you placing the file? When you say “nothing happens”, that’s in response to… what? Like, what specific URL are you hitting and what is a screen shot of that you see on that page? Are you clicking buttons? I’m just not following.

#4

I installed Lucee got a cfml test page working I then went to admin page says I need to put password.txt in /lucee-server/context/password.txt, did that and tried again.
I always use a FQDN and as I said before there are no errors in the logs.

#5

Did what? What exact specific folder did you place the password.txt file in?

Tried what again? Clicked a button? Loaded a page?

#6

The login page appears perfectly with the message that I need to install the password.txt.
If you look at the logs you will see that the page just redirects back to itself when the import button is clicked.
the url:
https://************.com/lucee/admin/server.cfm?action=overview

#7

/var/www/vhosts/*********/www/WEB-INF/lucee/context/password.txt

tried clicking button again, hard reload of page.

#8

Ok, I can tell what you’re doing wrong. Take a good hard look at the folder you placed the file in and compare that to the folder you were instructed to place the file in. See the difference? Also, including these details in the first message would have speeded this along :slight_smile:

#9

Sorry! as you suggested: /usr/local/tomcat/lucee-server/context/password.txt
Thank you for the prompt response.

2 Likes