Good morning or afternoon colleagues
Via web no access
Via SSH access without problems to the server.
I check the services and everything is correct.
Via web I put my credentials and it comes back to login, I change password via ssh and it is still the same, it does not take the passwords.
I checked that my ip is not blocked and it is not in the blocked list. I also test another colleague and he does not access either.
I restarted the server and lifted all the manual services and I can see the web, but I can’t access to the hestia panel.
I can guide me what happens, in the logs everything is normal, it tells me user access error x
I also created another user from the console thinking it was the user and not with the new user, I put your plan as required, it was created perfectly but not access a mortal user.
Hi @jgallardop ,
Do your server has free space?
df -h
How did you change the user password?
HI @sahsanu ,
root@vps:/var/log/hestia# df -h
Filesystem Size Used Avail Use% Mounted on
udev 3.9G 0 3.9G 0% /dev
tmpfs 795M 8.8M 786M 2% /run
/dev/sda3 194G 35G 150G 19% /
tmpfs 3.9G 0 3.9G 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 3.9G 0 3.9G 0% /sys/fs/cgroup
/dev/sda2 2.0G 149M 1.7G 8% /boot
tmpfs 795M 0 795M 0% /run/user/0
I have space
v-change-user-password admin passejemplo
jgallardop:
I have space
Ok.
Change again the password but enclose it with single quotes:
v-change-user-password admin 'YourPassword'
it does not allow me either, I have followed your indications.
Show the output of this command:
ls -la /usr/local/hestia/data/sessions/
root@vps:/var/log/hestia# ls -la /usr/local/hestia/data/sessions/
total 24
drwxrwx— 2 admin admin 20480 Apr 29 17:45 .
drwxr-xr-x 11 root root 4096 Jun 17 2022 …
-rw------- 1 admin admin 0 Apr 26 22:35 sess_0fcm0i75umd6776fcum3kgiggj
-rw------- 1 admin admin 0 Apr 24 03:05 sess_0k7orjjbgf7nonph64comucdah
-rw------- 1 admin admin 0 Apr 26 02:46 sess_13ahrtt5s2nemuoto76tqat0er
-rw------- 1 admin admin 0 Apr 26 19:00 sess_19ucif98lqgbukl5sokg6pa6p5
-rw------- 1 admin admin 0 Apr 26 20:43 sess_1gu5j4uteqstpl04j2la0r673b
-rw------- 1 admin admin 0 Apr 28 15:27 sess_1r38volbr8o6ikucdgpkrqlj4a
-rw------- 1 admin admin 0 Apr 27 14:32 sess_249d4m0vk6bhut7vmadatvlivt
-rw------- 1 admin admin 0 Apr 26 17:28 sess_266bvjk0ukv9ctabfdbul02j7p
-rw------- 1 admin admin 0 Apr 23 00:14 sess_3lsth8uru2482vi5jai19c1c3p
-rw------- 1 admin admin 0 Apr 23 19:33 sess_3ocsfqjuc6sobjbiro92jmi9g9
-rw------- 1 admin admin 0 Apr 24 05:49 sess_518dvc5317c2k4h2aq748gp0v4
-rw------- 1 admin admin 0 Apr 29 17:45 sess_55djl439ao7efmfjecngrb4kjg
-rw------- 1 admin admin 0 Apr 26 20:19 sess_5smqjpku0nogadqpbo26q7eg31
-rw------- 1 admin admin 0 Apr 28 01:50 sess_6c0m5iapjum6fuvj09337d684b
-rw------- 1 admin admin 0 Apr 27 16:56 sess_7561cn64toemda60l5gnfs3d0v
-rw------- 1 admin admin 0 Apr 29 16:07 sess_7jdqe9hrs8m2enralodc18i8bg
-rw------- 1 admin admin 0 Apr 26 22:35 sess_7mqlj19em3psnv6e533ak7onqi
-rw------- 1 admin admin 0 Apr 28 15:27 sess_7ucts6uoqdj3am4u72k7dls23p
-rw------- 1 admin admin 0 Apr 24 00:51 sess_7vskcrkokr4hkrso9n14kgqg54
-rw------- 1 admin admin 0 Apr 29 17:52 sess_812qvlbjcbq7bcu7u87be46vgi
-rw------- 1 admin admin 0 Apr 25 08:46 sess_82jve2vlqn9vipf9kc2poplmbi
-rw------- 1 admin admin 0 Apr 23 19:33 sess_8d26jl1tcla7eg5p71gj7193mv
-rw------- 1 admin admin 0 Apr 29 15:18 sess_94nhs1jvbfc7g2rcq030k8vt77
-rw------- 1 admin admin 0 Apr 29 17:03 sess_af25k71fkobf32s1co1v5m7hnu
-rw------- 1 admin admin 0 Apr 24 15:45 sess_afqsdm1aartmoffs6vsttpfeju
-rw------- 1 admin admin 0 Apr 27 23:14 sess_an75jf6ej31i1om1j2s0g1jcu4
-rw------- 1 admin admin 0 Apr 26 02:21 sess_apop1ntug0e79m2s322n8pengr
-rw------- 1 admin admin 0 Apr 28 08:51 sess_bq7s0v1kq8lf3ttmrp8g6ium1l
-rw------- 1 admin admin 0 Apr 27 16:56 sess_bu6v9gjro7erjkjm1pq1hoc21v
-rw------- 1 admin admin 0 Apr 24 00:51 sess_cqge48nvujg93pbokjllrr402n
-rw------- 1 admin admin 0 Apr 22 18:36 sess_d689tf6lidltplv6sf42060aj0
-rw------- 1 admin admin 0 Apr 26 20:19 sess_fhj3t99g1702nb9b2cb70fdbfc
-rw------- 1 admin admin 0 Apr 28 01:50 sess_fvujmtar557vnr7rmp5n7a07dj
-rw------- 1 admin admin 0 Apr 23 11:02 sess_g0ugbmf5fc17lscs2joc375o6d
-rw------- 1 admin admin 0 Apr 29 10:14 sess_h2pjcdmdfcpo847489gi84j48h
-rw------- 1 admin admin 0 Apr 29 14:29 sess_h60fgnd2hpr5518hm4g5saar8p
-rw------- 1 admin admin 0 Apr 24 03:52 sess_hm1srgcb8edlnb32etjd4hsloa
-rw------- 1 admin admin 0 Apr 29 10:14 sess_i2lritccjn9fu4c50qkh0kguc1
-rw------- 1 admin admin 0 Apr 26 16:54 sess_i6ak74hk07sr72iqod963bsean
-rw------- 1 admin admin 0 Apr 29 15:18 sess_ipg4mrdpvj0d9dgp770nemcdji
-rw------- 1 admin admin 0 Apr 26 02:21 sess_ivgbgd0g7uq1pn4uop25kjepfs
-rw------- 1 admin admin 0 Apr 23 20:42 sess_j05lhm31a0m6thjg3mvacp9b8n
-rw------- 1 admin admin 0 Apr 28 21:05 sess_ju167bphnqub38lh5idldcm8m6
-rw------- 1 admin admin 0 Apr 23 18:32 sess_lm558ni16emd55oi5117iu3fe4
-rw------- 1 admin admin 0 Apr 24 15:45 sess_lods5i16fhepcqg16fmt0jeuic
-rw------- 1 admin admin 0 Apr 26 02:46 sess_lomjih7rf026gcuh0u81f3a45m
-rw------- 1 admin admin 0 Apr 23 20:41 sess_m7n6n4e80l1fpcr107r5497b0g
-rw------- 1 admin admin 0 Apr 23 12:37 sess_ma1nvvsrp4492v1rv3d8an6lbi
-rw------- 1 admin admin 0 Apr 22 18:36 sess_mi0mc4v9ukklmqkt1ch68vc9en
-rw------- 1 admin admin 0 Apr 28 08:51 sess_mn21i9ks0galkc8tge190t94og
-rw------- 1 admin admin 0 Apr 26 17:28 sess_mo2p1slf1r12idp5jled111suq
-rw------- 1 admin admin 0 Apr 27 23:14 sess_n4ipdhfvugs4eg2qank4e1q9v0
-rw------- 1 admin admin 0 Apr 25 08:46 sess_ncckv9ouhs4jvv0vh09rt487s5
-rw------- 1 admin admin 0 Apr 26 06:11 sess_nefv961d076ek35mcrfkd3ee91
-rw------- 1 admin admin 0 Apr 28 21:05 sess_oma1enqf5rgcpsuno5snmks3ue
-rw------- 1 admin admin 0 Apr 26 06:11 sess_ooolspt1qjnnate55tt7c7ks8g
-rw------- 1 admin admin 0 Apr 29 19:24 sess_opkqd34lo095keru7bb1pf3s1j
-rw------- 1 admin admin 0 Apr 24 03:52 sess_oskf6jvcop92jpn15e6hcfnldi
-rw------- 1 admin admin 0 Apr 24 05:49 sess_p82nfej1j4hrtciaugp8jhmn36
-rw------- 1 admin admin 0 Apr 29 17:32 sess_pmssi5k8921257dmerr2ln2258
-rw------- 1 admin admin 0 Apr 27 14:32 sess_ps4vgq75ddu8ouohshp40cvc1p
-rw------- 1 admin admin 0 Apr 26 16:54 sess_qnmo79qd07391qd5b9hff9vrvn
-rw------- 1 admin admin 0 Apr 28 11:27 sess_r0gf1n2786mc4chqma2rd1k7rm
-rw------- 1 admin admin 0 Apr 29 10:35 sess_r434npva89rgf63dj5gn8qkuv6
-rw------- 1 admin admin 0 Apr 29 10:36 sess_rv8o60ho65i1eq3ngolig1d4dt
-rw------- 1 admin admin 0 Apr 25 05:59 sess_smbpqhlbdh238paer73i6l1ama
-rw------- 1 admin admin 0 Apr 24 03:05 sess_th4odtj7aofpb7k7b7ru85drvb
-rw------- 1 admin admin 0 Apr 26 10:54 sess_tkjfaaj5ibbcmr6pfq67h42pqo
-rw------- 1 admin admin 0 Apr 25 05:59 sess_ubgk2fvmdjnu9vorpqvgkho0ck
-rw------- 1 admin admin 0 Apr 23 11:02 sess_vmc5cj66ir6ncv3mtu6lq5u2tr
root@vps:/var/log/hestia# tail -n 50 error.log
2024-04-29 15:10:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:15:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:20:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:25:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:30:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:35:04 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:40:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:45:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:50:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 15:55:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 16:00:03 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 16:05:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
2024-04-29 16:10:02 v-update-sys-rrd-mysql ‘daily’ [Error 15]
root@vps:/var/log/hestia# tail -n 10 auth.log
2024-04-02 19:37:42 admin 87.21.60.173 successfully logged in
2024-04-05 10:44:09 admin 87.10.129.237 successfully logged in
2024-04-05 10:48:49 frambertech 200.8.122.244 successfully logged in
2024-04-06 15:03:02 Fer77nando 31.4.142.28 failed to login
2024-04-06 15:03:22 fer77nando 31.4.142.28 failed to login
2024-04-18 05:14:14 Silvina 79.117.212.159 successfully logged in
2024-04-18 15:24:48 admin 79.51.126.131 successfully logged in
2024-04-20 00:05:18 frambertech 200.8.122.244 successfully logged in
2024-04-20 03:02:38 admin 79.21.84.96 successfully logged in
Can you share your server hostname? If you don’t want to do it publicly, send me a private message.
https://vps.conjuntacontinua.es:8083
user: helo2 password.
You can try these credentials.
there is something wrong, css doesnt load properly:
ok, the last thing I did was to update HestiaCP manually. it asked me to install some dependencies and I did it, but before updating those dependencies I already had a problem with the access. I will be able to check that css
it kind of has a loop where you enter username and password and it returns you to login. n number of times.
Could you please show the output of these commands?
namei -mo /usr/local/hestia/web/css/themes/default.min.css
namei -mo /usr/local/hestia/web/js/dist/main.min.js
ls -la /usr/local/hestia/web/
tail -n63 /usr/local/hestia/nginx/conf/nginx.conf
namei -mo /usr/local/hestia/web/css/themes/default.min.css
f: /usr/local/hestia/web/css/themes/default.min.css
drwxr-xr-x root root /
drwxr-xr-x root root usr
drwxr-xr-x root root local
drwxr-xr-x root root hestia
drwxr-xr-x root root web
drwxr-xr-x root root css
themes - No such file or directory
namei -mo /usr/local/hestia/web/js/dist/main.min.js
f: /usr/local/hestia/web/js/dist/main.min.js
drwxr-xr-x root root /
drwxr-xr-x root root usr
drwxr-xr-x root root local
drwxr-xr-x root root hestia
drwxr-xr-x root root web
drwxr-xr-x root root js
dist - No such file or directory
ls -la /usr/local/hestia/web/
total 156
drwxr-xr-x 34 root root 4096 Apr 29 18:42 .
drwxr-xr-x 11 root root 4096 Apr 29 19:04 ..
drwxr-xr-x 14 root root 4096 Jun 17 2022 add
drwxr-xr-x 2 root root 4096 Apr 29 18:42 api
drwxr-xr-x 15 root root 4096 Aug 1 2023 bulk
drwxr-xr-x 3 root root 4096 Jun 5 2022 copy
drwxr-xr-x 3 root root 4096 Apr 29 18:42 css
drwxr-xr-x 16 root root 4096 Jun 17 2022 delete
drwxr-xr-x 5 root root 4096 Jul 12 2023 download
drwxr-xr-x 13 root root 4096 Jun 5 2022 edit
drwxr-xr-x 2 root root 4096 Apr 29 18:42 error
-rw-r--r-- 1 root root 1150 Apr 29 18:39 favicon.ico
drwxr-xr-x 8 root root 4096 Oct 25 2023 fm
drwxr-xr-x 3 root root 4096 Jun 5 2022 generate
drwxr-xr-x 2 root root 4096 Apr 29 18:42 images
drwxr-xr-x 4 root root 4096 Apr 29 19:01 inc
-rw-r--r-- 1 root root 105 Apr 29 18:39 index.php
drwxr-xr-x 4 root root 4096 Apr 29 18:42 js
drwxr-xr-x 21 root root 4096 Apr 29 18:42 list
drwxr-xr-x 42 root root 4096 Apr 29 18:42 locale
drwxr-xr-x 2 root root 4096 Apr 29 18:42 login
drwxr-xr-x 2 root root 4096 Apr 29 18:42 logout
drwxr-xr-x 3 root root 4096 Apr 29 18:42 reset
drwxr-xr-x 2 root root 4096 Apr 29 18:42 reset2fa
drwxr-xr-x 4 root root 4096 Jun 5 2022 restart
-rw-r--r-- 1 root root 25 Apr 29 18:39 robots.txt
drwxr-xr-x 10 root root 4096 Jun 5 2022 rrd
drwxr-xr-x 4 root root 4096 Jun 5 2022 schedule
drwxr-xr-x 2 root root 4096 Apr 29 18:42 search
drwxr-xr-x 4 root root 4096 Apr 29 18:42 src
drwxr-xr-x 3 root root 4096 Jun 5 2022 start
drwxr-xr-x 3 root root 4096 Jun 5 2022 stop
drwxr-xr-x 9 root root 4096 Jun 5 2022 suspend
drwxr-xr-x 4 root root 4096 Apr 29 18:42 templates
drwxr-xr-x 9 root root 4096 Jun 5 2022 unsuspend
drwxr-xr-x 3 root root 4096 Jun 5 2022 update
drwxr-xr-x 2 root root 12288 Apr 29 18:42 webfonts
tail -n63 /usr/local/hestia/nginx/conf/nginx.conf
# Vhost
server {
listen 8083 ssl;
server_name _;
root /usr/local/hestia/web;
# Fix error "The plain HTTP request was sent to HTTPS port"
error_page 497 https://$host:$server_port$request_uri;
error_page 403 /error/404.html;
error_page 404 /error/404.html;
error_page 410 /error/410.html;
error_page 500 501 502 503 504 505 /error/50x.html;
ssl_certificate /usr/local/hestia/ssl/certificate.crt;
ssl_certificate_key /usr/local/hestia/ssl/certificate.key;
# TLS 1.3 0-RTT anti-replay
if ($anti_replay = 307) { return 307 https://$host:$server_port$request_uri; }
if ($anti_replay = 425) { return 425; }
location / {
expires off;
index index.php;
}
location /error/ {
expires off;
internal;
}
location /rrd/ {
expires off;
internal;
}
location /backup/ {
root /;
internal;
}
location /fm/ {
alias /usr/local/hestia/web/fm/dist/;
index index.php;
location ~ /([^/]+\.php)$ {
try_files /$1 =404;
include fastcgi_params;
fastcgi_param HTTP_EARLY_DATA $rfc_early_data if_not_empty;
fastcgi_param SCRIPT_FILENAME /usr/local/hestia/web/fm/dist/index.php;
fastcgi_pass unix:/run/hestia-php.sock;
fastcgi_index index.php;
}
}
location ~ \.php$ {
include fastcgi_params;
fastcgi_param HTTP_EARLY_DATA $rfc_early_data if_not_empty;
fastcgi_param SCRIPT_FILENAME /usr/local/hestia/web/$fastcgi_script_name;
fastcgi_pass unix:/run/hestia-php.sock;
fastcgi_intercept_errors on;
break;
}
}
}
Well, you don’t have all the files Hestia needs, I don’t know what you did or what happened but the web installation is not completed.
I did a manual update of the HestiaCP, but the server has been working fine for about 2 years. it was from yesterday to today that it is like this without being able to access, after the manual update it was left without the CSS. I checked all the services and they are fine. it is the login that does not allow me.
Ok, give me a few minutes and I’ll post a few commands to try to recover the web installation.
eris
April 29, 2024, 9:13pm
17
v-update-sys-hestia-git hestiacp main
Execute these commands as root:
First, backup your current web dir:
tar zcf /root/backup_hestia_web_2024-04-29.tar.gz /usr/local/hestia/web
Maybe the binutils package is already installed but just in case:
apt install binutils
You will need the ar
utility provided by binutils to unpack the Hestia’s deb file.
Now, we will create a temp dir, will download and extract hestia deb package and will overwrite the web installation with the original one.
mkdir /tmp/recover_web/
chmod 777 /tmp/recover_web/
cd /tmp/recover_web/
apt download hestia
ar x hestia_1.8.11_amd64.deb
tar xf data.tar.xz
cp -rf usr/local/hestia/web /usr/local/hestia/
systemctl restart hestia
And now try to login again.
v-update-sys-hestia-git hestiacp main
NodeJS not found. Install now to proceed? [Y/n]
When I ran the manual update I got that I should install NodeJS, I installed it and then remove it, and I think that’s why I ran out of CSS, Okey I proceed to install NodeJS again, I’ll tell you in a moment.
dpkg-deb: construyendo el paquete hestia' en
/tmp/hestiacp-src/deb//hestia_1.9.0~alpha_amd64.deb’.
!!!
WARNING - Development builds should not be installed on
systems with live production data without understanding
the potential risks that are involved!
!!!
Do you wish to proceed with the installation? [y/n]
https://vps.conjuntacontinua.es:8083/login/