Regression #16728: Changing the password from the default in the GUI from the default requires a logout and login to continue - pfSense - pfSense bugtracker

Actions

Copy link

Regression #16728

closed

Changing the password from the default in the GUI from the default requires a logout and login to continue

Added by Christopher Cope about 1 month ago. Updated about 1 month ago.

Status:

Resolved

Priority:

Normal

Assignee:

Christian McDonald

Category:

Authentication

Target version:

2.9.0

Start date:

Due date:

% Done:

100%

Estimated time:

Plus Target Version:

26.03

Release Notes:

Force Exclusion

Affected Version:

2.9.0

Affected Architecture:

Description

Tested on

26.07-DEVELOPMENT (amd64)
built on Fri Feb 27 6:00:00 UTC 2026
FreeBSD 16.0-CURRENT

During the first login it requests to change the password from the default. After doing that, any attempts to navigate just redirect back to the same page /system_usermanager_passwordmg.php asking to change the password.

Changing the password from the console before logging in doesn't cause any issues, but if I login and then change it from the console I end up in the same loop.

I have to logout and back in to get it to recognize that the password has been changed. It seems it only recognizes if the password is default or not at login and stays in that state.

I thought it might have been due to https://redmine.pfsense.org/issues/16720, but reverting those changes doesn't appear to change it.

Actions

Copy link

Updated by Danilo Zrenjanin about 1 month ago

Status changed from New to Confirmed

I was able to reproduce the same behavior on the same software version.

Steps to Reproduce:

Reset the device to factory defaults.
Log in for the first time.
Skip the initial setup wizard.
Navigate directly to System > User Password Manager > Change Password.
Enter and apply a new password.

After changing the password, navigation to any other page is no longer possible. The GUI continuously redirects back to the Change Password page, preventing access to the rest of the interface.

Actions

Copy link