[GH-ISSUE #25] Not able to login to the Web portal #20

Open
opened 2026-03-13 14:32:22 +03:00 by kerem · 2 comments
Owner

Originally created by @mariandanisek-sk on GitHub (Feb 13, 2026).
Original GitHub issue: https://github.com/abbas-gheydi/radotp/issues/25

Hello !
I'm not able to login to the web portal by using admin / admin

Log says :
2026/02/13 11:44:05 admin is logged in from: 10.x.x.x

Is this message from radius server or from web gui itself ?

Below is my radius conf.

-----------------

[radius]
ListenAddress = "0.0.0.0:1812"
Secret = "ChangeMeStrong" # must match your firewall RADIUS secret
Authentication_Mode = "only_otp" # safe while LDAP is not configured

[web]
ListenHTTP = "0.0.0.0:8080"
ListenHTTPS = "0.0.0.0:8081"
RedirectToHTTPS = false # avoid redirect loop while testing

Typo is intentional: upstream uses "Isuuer" in examples/code

Isuuer = "PHSK" # issuer text shown in authenticator apps
EnableRestApi = false
Apikey = "test"

[database]
server = "db"
port = "5432"
username = "postgres"
password = "dbpassword"
dbname = "postgres"
sslmode = "disable"
timezone = "UTC"
MaxOpenConns = 20
MaxIdleConns = 20
ConnMaxLifetimeInMiuntes = 5

[ldap]

Leave LDAP out until base web works; misconfig here can crash startup

ldapServers = ["127.0.0.1"]
basedn = ""
port = 389

Originally created by @mariandanisek-sk on GitHub (Feb 13, 2026). Original GitHub issue: https://github.com/abbas-gheydi/radotp/issues/25 Hello ! I'm not able to login to the web portal by using admin / admin Log says : 2026/02/13 11:44:05 admin is logged in from: 10.x.x.x Is this message from radius server or from web gui itself ? Below is my radius conf. # ----------------- [radius] ListenAddress = "0.0.0.0:1812" Secret = "ChangeMeStrong" # must match your firewall RADIUS secret Authentication_Mode = "only_otp" # safe while LDAP is not configured [web] ListenHTTP = "0.0.0.0:8080" ListenHTTPS = "0.0.0.0:8081" RedirectToHTTPS = false # avoid redirect loop while testing # Typo is intentional: upstream uses "Isuuer" in examples/code Isuuer = "PHSK" # issuer text shown in authenticator apps EnableRestApi = false Apikey = "test" [database] server = "db" port = "5432" username = "postgres" password = "dbpassword" dbname = "postgres" sslmode = "disable" timezone = "UTC" MaxOpenConns = 20 MaxIdleConns = 20 ConnMaxLifetimeInMiuntes = 5 [ldap] # Leave LDAP out until base web works; misconfig here can crash startup ldapServers = ["127.0.0.1"] basedn = "" port = 389
Author
Owner

@abbas-gheydi commented on GitHub (Feb 13, 2026):

Hi dear @mariandanisek-sk
The web interface only accepts cookies if your URL is secured with SSL.
This means it works with https://ip, but not with http://ip.

<!-- gh-comment-id:3896850822 --> @abbas-gheydi commented on GitHub (Feb 13, 2026): Hi dear @mariandanisek-sk The web interface only accepts cookies if your URL is secured with SSL. This means it works with https://ip, but not with http://ip.
Author
Owner

@mariandanisek-sk commented on GitHub (Feb 17, 2026):

I found what was issue. In my installation (Debian 12 - Azure VM image) folder /config was not writable so system can't create certificates and as the result could not start web on port 443. I had modified access rights for this folder.

<!-- gh-comment-id:3913277378 --> @mariandanisek-sk commented on GitHub (Feb 17, 2026): I found what was issue. In my installation (Debian 12 - Azure VM image) folder /config was not writable so system can't create certificates and as the result could not start web on port 443. I had modified access rights for this folder.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/radotp#20
No description provided.