Login via http error 500

Printers, HDDs, USB/eSATA drives, 3rd-party programs
Post Reply
marxis.rene
New here
Posts: 2
Joined: Thu Oct 30, 2014 5:37 am

Login via http error 500

Post by marxis.rene » Sat Nov 21, 2020 6:17 am

Hi out there.

I have some realy strange problem with my qnap 870. The authentication via web interface does not work any more.
I am able to connect to the nas via ssh and i am also able to open the login page via browser (http, hot https) but when i try to log in, i get an error 500 on authLogin.cgi. No further information what did not work.
I had this problem on a windows pc and thought it would be related to a virus scanner (send user and password unencrypted). Now i tried linux and i was able to login 2 times. After activating https i tried to log in and that was successful. Then i restarted the nas and now no login is possible any more. I disabled "force ssl login" from terminal, rebooted, and even now, login via http is not possible any more.
What bugs me is, that now i get another login screen. It is only blue background, whereas before (as the login worked) there was a background image.

Somehow the QNAP "enviroment" is realy realy borken on this. I had this problem for year now and then and it seems to be reccuring.

The NAS itself is on the newest software version (was able to update as the login worked).

Any hints (at least if this could be related to my host or more the nas itself)?

I'm realy mad about this, because if i can't get this working reliable, i have to switch to synology or any other alternative...

marxis.rene
New here
Posts: 2
Joined: Thu Oct 30, 2014 5:37 am

Re: Login via http error 500

Post by marxis.rene » Sun Nov 22, 2020 5:59 pm

Just in case someone else also has this problem.
After days of trying i figured out, that deleting /home/httpd/cgi-bin/authLogin.cgi
and then reacreating the link with
ln -s authLogin.cgi /home/httpd/cgi-bin/login.cgi

solves the problem. i can then login againe via browser (http and https) till i do the next reboot...

Mousetick
Easy as a breeze
Posts: 410
Joined: Thu Aug 24, 2017 10:28 pm

Re: Login via http error 500

Post by Mousetick » Sun Nov 22, 2020 7:58 pm

In the absence of any other change on the NAS, contemporaneous or prior, the login breakage without apparent reason could be a sign that the NAS is infected by malware. Hacking the QTS login page is a way to intercept usernames and passwords.

The files stored under /home/httpd are part of the "firmware". They are burned to flash memory at the factory or when the QTS system is updated, and restored from flash memory every time the system boots. There is no reason for them to become suddenly corrupted.

I don't know what version of QTS you're using, but on my NAS with 4.5.x, /home/httpd/cgi-bin/authLogin.cgi is not a symbolic link, it's a real file (187560 bytes). And there is no /home/httpd/cgi-bin/login.cgi.

Post Reply

Return to “Hardware & Software Compatibility”