Hestiacp installing bug

when installing with bad password. hestiacp doesnt info the real password at the end.
for example using parameter:
bash hst-install.sh -p badpassword

Now installing Hestia Control Panel and all required dependencies.
NOTE: This process may take 10 to 15 minutes to complete, please wait... 
-
(*) Configuring system settings...
(*) Configuring Hestia Control Panel...
(*) Generating default self-signed SSL certificate...
(*) Adding SSL certificate to Hestia Control Panel...
(*) Configuring NGINX...
(*) Configuring Apache Web Server...
(*) Configuring PHP...
(*) Configuring MariaDB database server...
(*) Installing phpMyAdmin version v5.0.1...
(*) Configuring fail2ban access monitor...
BAD PASSWORD: it does not contain enough DIFFERENT characters
BAD PASSWORD: it does not contain enough DIFFERENT characters
BAD PASSWORD: it does not contain enough DIFFERENT characters
chpasswd: (user admin) pam_chauthtok() failed, error:
Have exhausted maximum number of retries for service
chpasswd: (line 1, user admin) password not changed

after finished installed, it show the bad password. So I cant login:

Congratulations!

You have successfully installed Hestia Control Panel on your server.

Ready to get started? Log in using the following credentials:

    Admin URL:  https://999.888.777.666:8083
    Username:   admin
    Password:   badpassword

if the password is bad, at least let the user know the password so the user can login and change the password

Login via ssh

/usr/local/hestia/bin/v-change-password-user admin yournewpassword

https://docs.hestiacp.com/cli_commands/panel_configuration_commands.html#v-change-user-password

Maybe we should consider to add a validation check but please create a feature request about it and we consider it.

1 Like