DietPi-Docs icon indicating copy to clipboard operation
DietPi-Docs copied to clipboard

Webmin password is incorrect

Open grumble0 opened this issue 9 months ago • 1 comments

The docs currently state Webmin's default password is <your software password> but from testing it does not work. It is actually the root user's password.

The lines are here: https://github.com/MichaIng/DietPi-Docs/blob/1d3925bbaf69b6b8b9fd3f5e6f9ccf71e860f3b4/docs/software/system_stats.md?plain=1#L365-L371

The password was previously described as "root password at time of installation". See previous change: https://github.com/MichaIng/DietPi-Docs/commit/23d85de6ec6bb99ea7dbae62067408f4a0d52d83#diff-523fef2129fb9bb56abae2ab515498e0f28b68aa6b78b385494278d49ca81c2dL232

grumble0 avatar Apr 02 '25 14:04 grumble0

indeed, strange this docs change has been performed 4 years back 🤔 looks like other user existing on the system are working as well. At least I'm able to login using dietpi user.

Joulinar avatar Apr 02 '25 16:04 Joulinar

I was about to fix this. The fact that I can also login as dietpi made me curious, and this is due to the fact that dietpi has sudo permissions:

Image

So there is only one "webmin user" root by default. But every UNIX user with sudo permissions or root itself can login with their UNIX password.

After unticking the checkbox at the bottom, I cannot login as dietpi anymore, but root can still login as root. Also when switching to "listed below" and adding only dietpi to login as root, the root UNIX user can still login. So I guess that one can always login, if it has a password at all (on UNIX level), and all other settings restrict which other users can login with which condition. Since I do not see a Webmin user password input, it seems to be always the UNIX user's passwords.

TL;DR: root or any UNIX user with full sudo permissions cam login with their UNIX password by default and will have full Webmin control, until those settings are hardened.

MichaIng avatar Sep 11 '25 21:09 MichaIng

Fixed, will be published latest with next DietPi update scheduled for September 20th.

MichaIng avatar Sep 11 '25 21:09 MichaIng