System user/password change strangeness

[jtara]

I made the mistake of paying attention to AiProtection Network Protection, which suggested that I change my default router login username and password.

Actually, I already had a very secure password, but was still using "admin". I *guess* it was complaining because of "admin".

Should have left it alone, as I don't enable over WAN, and I don't have any open wireless.

Nevertheless, I changed both the username and password and applied. I generated a secure password with LastPass, saved my old user name and password in notes in LastPass (just in case!) and changed the LastPass username and password.

I also switched to https:, it gave me a port number, and I added that to the LastPass entry as well.

After applying, to my horror, I was not I aable to login with the new user name/password. I got locked-out for 5 minutes, retried, etc. After fiddling around, I discovered that the OLD username/password still work! And it's NOT on https or using the new port number.

Here's the strange thing: under Administration/System/router Login Name it shows the NEW router login name! NOT admin. And it also shows HTTPS LAN port with the new port # and authentication method HTTPS. But I can only login with "admin" and the OLD pasword with HTTP!

As well, I am CERTAIN that I DID try the original username/password several times, in my initial panic and it DIDN'T work. But after a while, then it did...

What the heck is going on?

Does it revert if you don't login successfully within x minutes? That's the only thing that could explain this.

I am using firmware version 382.1.2 on an RT-AC88U.

P.S. I got a popup saying "use this new password on your next login".

I am going to try it again. (pressing my luck...)

OK, tried it again. SAME THING. I have to login with the OLD user id/password.

I even tried a reboot. Same thing. I have to use old username/password/http yet System tab shows new login name/https/new port.

See my other post about bouncing radios. Maybe this is somehow preventing the change?

 

[jtara]

I made the mistake of paying attention to AiProtection Network Protection, which suggested that I change my default router login username and password.

Actually, I already had a very secure password, but was still using "admin". I *guess* it was complaining because of "admin".

Should have left it alone, as I don't enable over WAN, and I don't have any open wireless.

Nevertheless, I changed both the username and password and applied. I generated a secure password with LastPass, saved my old user name and password in notes in LastPass (just in case!) and changed the LastPass username and password.

I also switched to https:, it gave me a port number, and I added that to the LastPass entry as well.

After applying, to my horror, I was not I aable to login with the new user name/password. I got locked-out for 5 minutes, retried, etc. After fiddling around, I discovered that the OLD username/password still work! And it's NOT on https or using the new port number.

Here's the strange thing: under Administration/System/router Login Name it shows the NEW router login name! NOT admin. And it also shows HTTPS LAN port with the new port # and authentication method HTTPS. But I can only login with "admin" and the OLD pasword with HTTP!

As well, I am CERTAIN that I DID try the original username/password several times, in my initial panic and it DIDN'T work. But after a while, then it did...

What the heck is going on?

Does it revert if you don't login successfully within x minutes? That's the only thing that could explain this.

I am using firmware version 382.1.2 on an RT-AC88U.

P.S. I got a popup saying "use this new password on your next login".

I am going to try it again. (pressing my luck...)

OK, tried it again. SAME THING. I have to login with the OLD user id/password.

I even tried a reboot. Same thing. I have to use old username/password/http yet System tab shows new login name/https/new port.

See my other post about bouncing radios. Maybe this is somehow preventing the change?

OK, I finally was able to have the username/https/port changes take effect. I had to power down and back up. Neither logout/login nor reboot from the web interface did the trick. It had to be a power down.

Is this a bug?

 

[KevTech]

I made the mistake of paying attention to AiProtection Network Protection, which suggested that I change my default router login username and password.

You could have just changed admin to Admin without changing password and ai protection would have been happy .