Can't access Hestia using Web Panel

Good morning or afternoon colleagues

  1. Via web no access
  2. Via SSH access without problems to the server.
  3. I check the services and everything is correct.
  4. Via web I put my credentials and it comes back to login, I change password via ssh and it is still the same, it does not take the passwords.
  5. I checked that my ip is not blocked and it is not in the blocked list. I also test another colleague and he does not access either.
  6. I restarted the server and lifted all the manual services and I can see the web, but I can’t access to the hestia panel.
    I can guide me what happens, in the logs everything is normal, it tells me user access error x

I also created another user from the console thinking it was the user and not with the new user, I put your plan as required, it was created perfectly but not access a mortal user.

Hi @jgallardop,

Do your server has free space?

df -h

How did you change the user password?

HI @sahsanu ,
root@vps:/var/log/hestia# df -h
Filesystem Size Used Avail Use% Mounted on
udev 3.9G 0 3.9G 0% /dev
tmpfs 795M 8.8M 786M 2% /run
/dev/sda3 194G 35G 150G 19% /
tmpfs 3.9G 0 3.9G 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup
/dev/sda2 2.0G 149M 1.7G 8% /boot
tmpfs 795M 0 795M 0% /run/user/0

I have space

v-change-user-password admin passejemplo

Ok.

Change again the password but enclose it with single quotes:

v-change-user-password admin 'YourPassword'

it does not allow me either, I have followed your indications.

Show the output of this command:

ls -la /usr/local/hestia/data/sessions/

root@vps:/var/log/hestia# ls -la /usr/local/hestia/data/sessions/
total 24
drwxrwx— 2 admin admin 20480 Apr 29 17:45 .
drwxr-xr-x 11 root root 4096 Jun 17 2022 …
-rw------- 1 admin admin 0 Apr 26 22:35 sess_0fcm0i75umd6776fcum3kgiggj
-rw------- 1 admin admin 0 Apr 24 03:05 sess_0k7orjjbgf7nonph64comucdah
-rw------- 1 admin admin 0 Apr 26 02:46 sess_13ahrtt5s2nemuoto76tqat0er
-rw------- 1 admin admin 0 Apr 26 19:00 sess_19ucif98lqgbukl5sokg6pa6p5
-rw------- 1 admin admin 0 Apr 26 20:43 sess_1gu5j4uteqstpl04j2la0r673b
-rw------- 1 admin admin 0 Apr 28 15:27 sess_1r38volbr8o6ikucdgpkrqlj4a
-rw------- 1 admin admin 0 Apr 27 14:32 sess_249d4m0vk6bhut7vmadatvlivt
-rw------- 1 admin admin 0 Apr 26 17:28 sess_266bvjk0ukv9ctabfdbul02j7p
-rw------- 1 admin admin 0 Apr 23 00:14 sess_3lsth8uru2482vi5jai19c1c3p
-rw------- 1 admin admin 0 Apr 23 19:33 sess_3ocsfqjuc6sobjbiro92jmi9g9
-rw------- 1 admin admin 0 Apr 24 05:49 sess_518dvc5317c2k4h2aq748gp0v4
-rw------- 1 admin admin 0 Apr 29 17:45 sess_55djl439ao7efmfjecngrb4kjg
-rw------- 1 admin admin 0 Apr 26 20:19 sess_5smqjpku0nogadqpbo26q7eg31
-rw------- 1 admin admin 0 Apr 28 01:50 sess_6c0m5iapjum6fuvj09337d684b
-rw------- 1 admin admin 0 Apr 27 16:56 sess_7561cn64toemda60l5gnfs3d0v
-rw------- 1 admin admin 0 Apr 29 16:07 sess_7jdqe9hrs8m2enralodc18i8bg
-rw------- 1 admin admin 0 Apr 26 22:35 sess_7mqlj19em3psnv6e533ak7onqi
-rw------- 1 admin admin 0 Apr 28 15:27 sess_7ucts6uoqdj3am4u72k7dls23p
-rw------- 1 admin admin 0 Apr 24 00:51 sess_7vskcrkokr4hkrso9n14kgqg54
-rw------- 1 admin admin 0 Apr 29 17:52 sess_812qvlbjcbq7bcu7u87be46vgi
-rw------- 1 admin admin 0 Apr 25 08:46 sess_82jve2vlqn9vipf9kc2poplmbi
-rw------- 1 admin admin 0 Apr 23 19:33 sess_8d26jl1tcla7eg5p71gj7193mv
-rw------- 1 admin admin 0 Apr 29 15:18 sess_94nhs1jvbfc7g2rcq030k8vt77
-rw------- 1 admin admin 0 Apr 29 17:03 sess_af25k71fkobf32s1co1v5m7hnu
-rw------- 1 admin admin 0 Apr 24 15:45 sess_afqsdm1aartmoffs6vsttpfeju
-rw------- 1 admin admin 0 Apr 27 23:14 sess_an75jf6ej31i1om1j2s0g1jcu4
-rw------- 1 admin admin 0 Apr 26 02:21 sess_apop1ntug0e79m2s322n8pengr
-rw------- 1 admin admin 0 Apr 28 08:51 sess_bq7s0v1kq8lf3ttmrp8g6ium1l
-rw------- 1 admin admin 0 Apr 27 16:56 sess_bu6v9gjro7erjkjm1pq1hoc21v
-rw------- 1 admin admin 0 Apr 24 00:51 sess_cqge48nvujg93pbokjllrr402n
-rw------- 1 admin admin 0 Apr 22 18:36 sess_d689tf6lidltplv6sf42060aj0
-rw------- 1 admin admin 0 Apr 26 20:19 sess_fhj3t99g1702nb9b2cb70fdbfc
-rw------- 1 admin admin 0 Apr 28 01:50 sess_fvujmtar557vnr7rmp5n7a07dj
-rw------- 1 admin admin 0 Apr 23 11:02 sess_g0ugbmf5fc17lscs2joc375o6d
-rw------- 1 admin admin 0 Apr 29 10:14 sess_h2pjcdmdfcpo847489gi84j48h
-rw------- 1 admin admin 0 Apr 29 14:29 sess_h60fgnd2hpr5518hm4g5saar8p
-rw------- 1 admin admin 0 Apr 24 03:52 sess_hm1srgcb8edlnb32etjd4hsloa
-rw------- 1 admin admin 0 Apr 29 10:14 sess_i2lritccjn9fu4c50qkh0kguc1
-rw------- 1 admin admin 0 Apr 26 16:54 sess_i6ak74hk07sr72iqod963bsean
-rw------- 1 admin admin 0 Apr 29 15:18 sess_ipg4mrdpvj0d9dgp770nemcdji
-rw------- 1 admin admin 0 Apr 26 02:21 sess_ivgbgd0g7uq1pn4uop25kjepfs
-rw------- 1 admin admin 0 Apr 23 20:42 sess_j05lhm31a0m6thjg3mvacp9b8n
-rw------- 1 admin admin 0 Apr 28 21:05 sess_ju167bphnqub38lh5idldcm8m6
-rw------- 1 admin admin 0 Apr 23 18:32 sess_lm558ni16emd55oi5117iu3fe4
-rw------- 1 admin admin 0 Apr 24 15:45 sess_lods5i16fhepcqg16fmt0jeuic
-rw------- 1 admin admin 0 Apr 26 02:46 sess_lomjih7rf026gcuh0u81f3a45m
-rw------- 1 admin admin 0 Apr 23 20:41 sess_m7n6n4e80l1fpcr107r5497b0g
-rw------- 1 admin admin 0 Apr 23 12:37 sess_ma1nvvsrp4492v1rv3d8an6lbi
-rw------- 1 admin admin 0 Apr 22 18:36 sess_mi0mc4v9ukklmqkt1ch68vc9en
-rw------- 1 admin admin 0 Apr 28 08:51 sess_mn21i9ks0galkc8tge190t94og
-rw------- 1 admin admin 0 Apr 26 17:28 sess_mo2p1slf1r12idp5jled111suq
-rw------- 1 admin admin 0 Apr 27 23:14 sess_n4ipdhfvugs4eg2qank4e1q9v0
-rw------- 1 admin admin 0 Apr 25 08:46 sess_ncckv9ouhs4jvv0vh09rt487s5
-rw------- 1 admin admin 0 Apr 26 06:11 sess_nefv961d076ek35mcrfkd3ee91
-rw------- 1 admin admin 0 Apr 28 21:05 sess_oma1enqf5rgcpsuno5snmks3ue
-rw------- 1 admin admin 0 Apr 26 06:11 sess_ooolspt1qjnnate55tt7c7ks8g
-rw------- 1 admin admin 0 Apr 29 19:24 sess_opkqd34lo095keru7bb1pf3s1j
-rw------- 1 admin admin 0 Apr 24 03:52 sess_oskf6jvcop92jpn15e6hcfnldi
-rw------- 1 admin admin 0 Apr 24 05:49 sess_p82nfej1j4hrtciaugp8jhmn36
-rw------- 1 admin admin 0 Apr 29 17:32 sess_pmssi5k8921257dmerr2ln2258
-rw------- 1 admin admin 0 Apr 27 14:32 sess_ps4vgq75ddu8ouohshp40cvc1p
-rw------- 1 admin admin 0 Apr 26 16:54 sess_qnmo79qd07391qd5b9hff9vrvn
-rw------- 1 admin admin 0 Apr 28 11:27 sess_r0gf1n2786mc4chqma2rd1k7rm
-rw------- 1 admin admin 0 Apr 29 10:35 sess_r434npva89rgf63dj5gn8qkuv6
-rw------- 1 admin admin 0 Apr 29 10:36 sess_rv8o60ho65i1eq3ngolig1d4dt
-rw------- 1 admin admin 0 Apr 25 05:59 sess_smbpqhlbdh238paer73i6l1ama
-rw------- 1 admin admin 0 Apr 24 03:05 sess_th4odtj7aofpb7k7b7ru85drvb
-rw------- 1 admin admin 0 Apr 26 10:54 sess_tkjfaaj5ibbcmr6pfq67h42pqo
-rw------- 1 admin admin 0 Apr 25 05:59 sess_ubgk2fvmdjnu9vorpqvgkho0ck
-rw------- 1 admin admin 0 Apr 23 11:02 sess_vmc5cj66ir6ncv3mtu6lq5u2tr


root@vps:/var/log/hestia# tail -n 50 error.log
2024-04-29 15:10:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:15:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:20:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:25:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:30:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:35:04 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:40:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:45:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:50:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:55:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 16:00:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 16:05:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 16:10:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]


root@vps:/var/log/hestia# tail -n 10 auth.log
2024-04-02 19:37:42 admin 87.21.60.173 successfully logged in
2024-04-05 10:44:09 admin 87.10.129.237 successfully logged in
2024-04-05 10:48:49 frambertech 200.8.122.244 successfully logged in
2024-04-06 15:03:02 Fer77nando 31.4.142.28 failed to login
2024-04-06 15:03:22 fer77nando 31.4.142.28 failed to login
2024-04-18 05:14:14 Silvina 79.117.212.159 successfully logged in
2024-04-18 15:24:48 admin 79.51.126.131 successfully logged in
2024-04-20 00:05:18 frambertech 200.8.122.244 successfully logged in
2024-04-20 03:02:38 admin 79.21.84.96 successfully logged in

Can you share your server hostname? If you don’t want to do it publicly, send me a private message.

https://vps.conjuntacontinua.es:8083
user: helo2 password.
You can try these credentials.

there is something wrong, css doesnt load properly:

ok, the last thing I did was to update HestiaCP manually. it asked me to install some dependencies and I did it, but before updating those dependencies I already had a problem with the access. I will be able to check that css


it kind of has a loop where you enter username and password and it returns you to login. n number of times.

Could you please show the output of these commands?

namei -mo /usr/local/hestia/web/css/themes/default.min.css
namei -mo /usr/local/hestia/web/js/dist/main.min.js
ls -la /usr/local/hestia/web/
tail -n63 /usr/local/hestia/nginx/conf/nginx.conf
namei -mo /usr/local/hestia/web/css/themes/default.min.css
f: /usr/local/hestia/web/css/themes/default.min.css
 drwxr-xr-x root root /
 drwxr-xr-x root root usr
 drwxr-xr-x root root local
 drwxr-xr-x root root hestia
 drwxr-xr-x root root web
 drwxr-xr-x root root css
                      themes - No such file or directory

namei -mo /usr/local/hestia/web/js/dist/main.min.js
f: /usr/local/hestia/web/js/dist/main.min.js
 drwxr-xr-x root root /
 drwxr-xr-x root root usr
 drwxr-xr-x root root local
 drwxr-xr-x root root hestia
 drwxr-xr-x root root web
 drwxr-xr-x root root js
                      dist - No such file or directory
ls -la /usr/local/hestia/web/

total 156
drwxr-xr-x 34 root root  4096 Apr 29 18:42 .
drwxr-xr-x 11 root root  4096 Apr 29 19:04 ..
drwxr-xr-x 14 root root  4096 Jun 17  2022 add
drwxr-xr-x  2 root root  4096 Apr 29 18:42 api
drwxr-xr-x 15 root root  4096 Aug  1  2023 bulk
drwxr-xr-x  3 root root  4096 Jun  5  2022 copy
drwxr-xr-x  3 root root  4096 Apr 29 18:42 css
drwxr-xr-x 16 root root  4096 Jun 17  2022 delete
drwxr-xr-x  5 root root  4096 Jul 12  2023 download
drwxr-xr-x 13 root root  4096 Jun  5  2022 edit
drwxr-xr-x  2 root root  4096 Apr 29 18:42 error
-rw-r--r--  1 root root  1150 Apr 29 18:39 favicon.ico
drwxr-xr-x  8 root root  4096 Oct 25  2023 fm
drwxr-xr-x  3 root root  4096 Jun  5  2022 generate
drwxr-xr-x  2 root root  4096 Apr 29 18:42 images
drwxr-xr-x  4 root root  4096 Apr 29 19:01 inc
-rw-r--r--  1 root root   105 Apr 29 18:39 index.php
drwxr-xr-x  4 root root  4096 Apr 29 18:42 js
drwxr-xr-x 21 root root  4096 Apr 29 18:42 list
drwxr-xr-x 42 root root  4096 Apr 29 18:42 locale
drwxr-xr-x  2 root root  4096 Apr 29 18:42 login
drwxr-xr-x  2 root root  4096 Apr 29 18:42 logout
drwxr-xr-x  3 root root  4096 Apr 29 18:42 reset
drwxr-xr-x  2 root root  4096 Apr 29 18:42 reset2fa
drwxr-xr-x  4 root root  4096 Jun  5  2022 restart
-rw-r--r--  1 root root    25 Apr 29 18:39 robots.txt
drwxr-xr-x 10 root root  4096 Jun  5  2022 rrd
drwxr-xr-x  4 root root  4096 Jun  5  2022 schedule
drwxr-xr-x  2 root root  4096 Apr 29 18:42 search
drwxr-xr-x  4 root root  4096 Apr 29 18:42 src
drwxr-xr-x  3 root root  4096 Jun  5  2022 start
drwxr-xr-x  3 root root  4096 Jun  5  2022 stop
drwxr-xr-x  9 root root  4096 Jun  5  2022 suspend
drwxr-xr-x  4 root root  4096 Apr 29 18:42 templates
drwxr-xr-x  9 root root  4096 Jun  5  2022 unsuspend
drwxr-xr-x  3 root root  4096 Jun  5  2022 update
drwxr-xr-x  2 root root 12288 Apr 29 18:42 webfonts
tail -n63 /usr/local/hestia/nginx/conf/nginx.conf
        # Vhost
        server {
                listen              8083 ssl;
                server_name         _;
                root                /usr/local/hestia/web;
                # Fix error "The plain HTTP request was sent to HTTPS port"
                error_page          497 https://$host:$server_port$request_uri;
                error_page          403 /error/404.html;
                error_page          404 /error/404.html;
                error_page          410 /error/410.html;
                error_page          500 501 502 503 504 505 /error/50x.html;

                ssl_certificate     /usr/local/hestia/ssl/certificate.crt;
                ssl_certificate_key /usr/local/hestia/ssl/certificate.key;

                # TLS 1.3 0-RTT anti-replay
                if ($anti_replay = 307) { return 307 https://$host:$server_port$request_uri; }
                if ($anti_replay = 425) { return 425; }

                location / {
                        expires off;
                        index index.php;
                }

                location /error/ {
                        expires off;
                        internal;
                }

                location /rrd/ {
                        expires off;
                        internal;
                }

                location /backup/ {
                        root /;
                        internal;
                }

                location /fm/ {
                        alias /usr/local/hestia/web/fm/dist/;
                        index index.php;

                        location ~ /([^/]+\.php)$ {
                                try_files     /$1 =404;
                                include       fastcgi_params;
                                fastcgi_param HTTP_EARLY_DATA $rfc_early_data if_not_empty;
                                fastcgi_param SCRIPT_FILENAME /usr/local/hestia/web/fm/dist/index.php;
                                fastcgi_pass  unix:/run/hestia-php.sock;
                                fastcgi_index index.php;
                        }
                }

                location ~ \.php$ {
                        include                  fastcgi_params;
                        fastcgi_param            HTTP_EARLY_DATA $rfc_early_data if_not_empty;
                        fastcgi_param            SCRIPT_FILENAME /usr/local/hestia/web/$fastcgi_script_name;
                        fastcgi_pass             unix:/run/hestia-php.sock;
                        fastcgi_intercept_errors on;
                        break;
                }
        }
}

Well, you don’t have all the files Hestia needs, I don’t know what you did or what happened but the web installation is not completed.

I did a manual update of the HestiaCP, but the server has been working fine for about 2 years. it was from yesterday to today that it is like this without being able to access, after the manual update it was left without the CSS. I checked all the services and they are fine. it is the login that does not allow me.

Ok, give me a few minutes and I’ll post a few commands to try to recover the web installation.

v-update-sys-hestia-git hestiacp main

Execute these commands as root:

First, backup your current web dir:

tar zcf /root/backup_hestia_web_2024-04-29.tar.gz /usr/local/hestia/web

Maybe the binutils package is already installed but just in case:

apt install binutils

You will need the ar utility provided by binutils to unpack the Hestia’s deb file.

Now, we will create a temp dir, will download and extract hestia deb package and will overwrite the web installation with the original one.

mkdir /tmp/recover_web/
chmod 777 /tmp/recover_web/
cd /tmp/recover_web/
apt download hestia
ar x hestia_1.8.11_amd64.deb
tar xf data.tar.xz
cp -rf usr/local/hestia/web /usr/local/hestia/
systemctl restart hestia

And now try to login again.

v-update-sys-hestia-git hestiacp main


NodeJS not found. Install now to proceed? [Y/n]
When I ran the manual update I got that I should install NodeJS, I installed it and then remove it, and I think that’s why I ran out of CSS, Okey I proceed to install NodeJS again, I’ll tell you in a moment.

dpkg-deb: construyendo el paquete hestia' en /tmp/hestiacp-src/deb//hestia_1.9.0~alpha_amd64.deb’.

!!!
WARNING - Development builds should not be installed on
systems with live production data without understanding
the potential risks that are involved!
!!!

Do you wish to proceed with the installation? [y/n]

https://vps.conjuntacontinua.es:8083/login/

image