[BUG] Unable to login on Opensearch Dashboard after changing the default admin password

[noginahalchetan]

What is the bug?
Changed the default admin password in OPENSEARCH_INITIAL_ADMIN_PASSWORD in opensearch. However, I am unable to login into Opensearch Dashboard with the new password. It throws error as invalid username or password

How can one reproduce the bug?
Steps to reproduce the behavior:

• Have a cluster with the admin password set to non default at the time of deployment
• Login into opensearch dashboard with the non default password

What is the expected behavior?
Should be able to login into opensearch dashboard with the new password

What is your host/environment?

• OS: Kubernetes Cluster
• Version 2.18.0

Do you have any screenshots?

Do you have any additional context?
Add any other context about the problem.

[cwperks]

[Triage] @noginahalchetan How are you running OpenSearch? Is this a fresh cluster or one with pre-existing data? This env variable must be setting prior to running the install_demo_configuration.sh script which overwrites the hash value in internal_users.yml. If any changes are made to the yaml files, they must be sourced using the securityadmin tool

[noginahalchetan]

I tried on both fresh installation and a preexisting installation. It doesn't work in either of the case.

[derek-ho]

@noginahalchetan I suspect that it has something to do with running securityadmin tool for the preexisting installation case (which may still have the old password on some of the nodes). Not sure about the fresh installation, which was tested before rolling out the feature. Can you provide some more information on the steps run in both of these situations so we can reproduce it?

[cwperks]

@noginahalchetan Please provide steps to reproduce. Without the config files and more info about how OpenSearch is deployed this issue is not actionable.

I am closing the issue for now. Please open this back up if you suspect a bug or leave an additional comment if you need further support. I also encourage you to check out the opensearch forum where you can find additional support from the opensearch community: https://forum.opensearch.org/