Basic Login "Authentication endpoint error"

Hello,

Metabase is working great for our existing users, however, I'm having issues with new users logging into their accounts. New users are unable to login and receive the "Password did not match stored password" error. Resetting the password results in the same issue on subsequent login attempts.

New accounts that I create have all lowercase email addresses, no special characters, and I am unable to login into the accounts on both Chrome and Safari. Existing accounts are able to authenticate without issue.

Metabase version: 0.41.2

Any ideas?
Thank you

2022-02-16T15:54:09-08:00 DEBUG metabase.server.middleware.log GET /api/user/current 401 90.9 µs (0 DB calls)
"Unauthenticated"

2022-02-16T15:54:09-08:00 DEBUG metabase.server.middleware.log GET /api/session/properties 200 1.2 ms (0 DB calls) App DB connections: 0/15 Jetty threads: 5/50 (3 idle, 0 queued) (195 total active threads) Queries in flight: 0 (0 queued)
2022-02-16T15:54:19-08:00 ERROR metabase.api.session Authentication endpoint error
clojure.lang.ExceptionInfo: Password did not match stored password. {:status-code 401, :errors {:password "did not match stored password"}}
at metabase.api.session$do_http_401_on_error.invokeStatic(session.clj:152)
at metabase.api.session$do_http_401_on_error.invoke(session.clj:148)
at metabase.api.session$fn__78954.invokeStatic(session.clj:172)
at metabase.api.session$fn__78954.invoke(session.clj:160)
at compojure.core$wrap_response$fn__32065.invoke(core.clj:160)
at compojure.core$wrap_route_middleware$fn__32049.invoke(core.clj:132)
at compojure.core$wrap_route_info$fn__32054.invoke(core.clj:139)
at compojure.core$wrap_route_matches$fn__32058.invoke(core.clj:151)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077.invoke(core.clj:200)
at metabase.api.session$_PLUS_log_all_request_failures$fn__79011.invoke(session.clj:295)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077.invoke(core.clj:200)
at compojure.core$make_context$handler__32105.invoke(core.clj:289)
at compojure.core$make_context$fn__32109.invoke(core.clj:299)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$make_context$fn__32109.invoke(core.clj:300)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at metabase.api.routes$fn__79738$fn__79741.invoke(routes.clj:56)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077.invoke(core.clj:200)
at clojure.lang.AFn.applyToHelper(AFn.java:160)
at clojure.lang.AFn.applyTo(AFn.java:144)
at clojure.core$apply.invokeStatic(core.clj:667)
at clojure.core$apply.invoke(core.clj:662)
at metabase.server.routes$fn__79883$fn__79884.doInvoke(routes.clj:57)
at clojure.lang.RestFn.invoke(RestFn.java:436)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077.invoke(core.clj:200)
at compojure.core$make_context$handler__32105.invoke(core.clj:289)
at compojure.core$make_context$fn__32109.invoke(core.clj:299)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$wrap_route_matches$fn__32058.invoke(core.clj:153)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$wrap_route_matches$fn__32058.invoke(core.clj:153)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at compojure.core$wrap_route_matches$fn__32058.invoke(core.clj:153)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077$f__32078$respond_SINGLEQUOTE___32079.invoke(core.clj:197)
at metabase.server.routes$fn__79871$fn__79873.invoke(routes.clj:41)
at compojure.core$routes$fn__32077$f__32078.invoke(core.clj:198)
at compojure.core$routes$fn__32077.invoke(core.clj:200)
at metabase.server.middleware.exceptions$catch_uncaught_exceptions$fn__77343.invoke(exceptions.clj:98)
at metabase.server.middleware.exceptions$catch_api_exceptions$fn__77340.invoke(exceptions.clj:86)
at metabase.server.middleware.log$log_api_call$fn__80338$fn__80339$fn__80340.invoke(log.clj:209)
at metabase.driver.sql_jdbc.execute.diagnostic$do_with_diagnostic_info.invokeStatic(diagnostic.clj:15)
at metabase.driver.sql_jdbc.execute.diagnostic$do_with_diagnostic_info.invoke(diagnostic.clj:9)
at metabase.server.middleware.log$log_api_call$fn__80338$fn__80339.invoke(log.clj:201)
at toucan.db$_do_with_call_counting.invokeStatic(db.clj:216)
at toucan.db$_do_with_call_counting.invoke(db.clj:209)
at metabase.server.middleware.log$log_api_call$fn__80338.invoke(log.clj:200)
at metabase.server.middleware.browser_cookie$ensure_browser_id_cookie$fn__83551.invoke(browser_cookie.clj:30)
at metabase.server.middleware.security$add_security_headers$fn__59213.invoke(security.clj:147)
at metabase.server.middleware.json$wrap_json_body$fn__82695.invoke(json.clj:62)
at metabase.server.middleware.json$wrap_streamed_json_response$fn__82713.invoke(json.clj:98)
at metabase.server.middleware.offset_paging$handle_paging$fn__59237.invoke(offset_paging.clj:42)
at ring.middleware.keyword_params$wrap_keyword_params$fn__83818.invoke(keyword_params.clj:55)
at ring.middleware.params$wrap_params$fn__83834.invoke(params.clj:69)
at metabase.server.middleware.misc$maybe_set_site_url$fn__34076.invoke(misc.clj:59)
at metabase.server.middleware.session$bind_current_user$fn__44977$fn__44978.invoke(session.clj:257)
at metabase.server.middleware.session$do_with_current_user.invokeStatic(session.clj:238)
at metabase.server.middleware.session$do_with_current_user.invoke(session.clj:230)
at metabase.server.middleware.session$bind_current_user$fn__44977.invoke(session.clj:256)
at metabase.server.middleware.session$wrap_current_user_info$fn__44964.invoke(session.clj:216)
at metabase.server.middleware.session$wrap_session_id$fn__44950.invoke(session.clj:162)
at metabase.server.middleware.auth$wrap_api_key$fn__70269.invoke(auth.clj:27)
at ring.middleware.cookies$wrap_cookies$fn__83738.invoke(cookies.clj:216)
at metabase.server.middleware.misc$add_content_type$fn__34059.invoke(misc.clj:27)
at metabase.server.middleware.misc$disable_streaming_buffering$fn__34084.invoke(misc.clj:76)
at ring.middleware.gzip$wrap_gzip$fn__83780.invoke(gzip.clj:86)
at metabase.server.middleware.misc$bind_request$fn__34087.invoke(misc.clj:93)
at metabase.server.middleware.ssl$redirect_to_https_middleware$fn__83567.invoke(ssl.clj:38)
at metabase.server$async_proxy_handler$fn__80111.invoke(server.clj:71)
at metabase.server.proxy$org.eclipse.jetty.server.handler.AbstractHandler$ff19274a.handle(Unknown Source)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
at org.eclipse.jetty.server.Server.handle(Server.java:516)
at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:388)
at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:633)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:380)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277)
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311)
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)
at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173)
at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)
at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:386)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883)
at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034)
at java.base/java.lang.Thread.run(Unknown Source)
2022-02-16T15:54:19-08:00 DEBUG metabase.server.middleware.log POST /api/session 401 291.1 ms (0 DB calls)
{:errors {:password "did not match stored password"}}

Hi @dot_files
You should upgrade immediately to a newer release: https://github.com/metabase/metabase/releases

Have you managed to fix it? I have the same issue.

Please open a new thread