zacharee/HINTControl

Can't Authenticate

Opened this issue · 43 comments

johnrs commented

Hi.

I just installed HINT Control on my Pixel 2. Unfortunately, I’m not able to authenticate with it.

I also have the T-Mobile app. It does work with my Sagemcom FAST 5688W 5G Gateway.

Question: Is the app trying to connect via the Ethernet address or via WiFi? It didn’t ask me for an IP address or for a SSID. I used the Ethernet password, since it wouldn’t make much sence to connect via WiFi, since I want to disable it!

But I’m wondering how you would have discovered the Ethernet address, because I have my own router behind it. So the Sagencom is not the LAN’s gateway IP.

Confused,

John

zacharee commented

What error is it giving you when you try to log in?

The password is the same whether you're connected over Ethernet or WiFi. Your router automatically handles requests to 192.168.12.1 and forwards them to the gateway.

johnrs commented
zacharee commented

Make sure you're typing the password in correctly. If you changed it through the official app during setup, it won't be the one on the label.

johnrs commented
zacharee commented
johnrs commented
zacharee commented
johnrs commented
synchronster commented

Hi Zachary,

I own the Arcadyan gateway and can confirm the app is also having a hard time authenticating my credentials. I d'led to both my phone (Pixel 6) and an Amazon Fire tablet that has Playstore access. (Both are unrooted) I did change my pw from the sticker on the gateway to a simple one that I know I can remember. It did work on the tablet once but once it closed and I opened it again, it did not. (it also comes up with an error string that says something with 'bad path' and your name.)

I verified at work that my correct pw does have a symbol char, a '!' at the end. I will try this again when I get back home tonight. I suggest you do it like the app since I only needed the credentials 1 time. Now, the T-mobile app never asks for credentials, even when I uninstall or do version updates.

So the one time it did work, I must say, your app looks promising. I like the layout and the feature that auto updates the metrics although I tried changing it to 1 second update and it only seems to want to work at 5000 (I assume thats 5000ms = 5 sec). It seems all you can do so far is toggle the wifi radios and band steering which default to on which is how the Gateways are set up at factory. I'm not interested in using my router yet and turn off the radios but I would like to set my 5G to either n71 or n41 band on demand. Will that ever work with your app? What does Band steering do when you turn it off?

Thanks in advance, Good job so far!

zacharee commented

Hi Zachary,

I own the Arcadyan gateway and can confirm the app is also having a hard time authenticating my credentials. I d'led to both my phone (Pixel 6) and an Amazon Fire tablet that has Playstore access. (Both are unrooted) I did change my pw from the sticker on the gateway to a simple one that I know I can remember. It did work on the tablet once but once it closed and I opened it again, it did not. (it also comes up with an error string that says something with 'bad path' and your name.)

I verified at work that my correct pw does have a symbol char, a '!' at the end. I will try this again when I get back home tonight. I suggest you do it like the app since I only needed the credentials 1 time. Now, the T-mobile app never asks for credentials, even when I uninstall or do version updates.

So the one time it did work, I must say, your app looks promising. I like the layout and the feature that auto updates the metrics although I tried changing it to 1 second update and it only seems to want to work at 5000 (I assume thats 5000ms = 5 sec). It seems all you can do so far is toggle the wifi radios and band steering which default to on which is how the Gateways are set up at factory. I'm not interested in using my router yet and turn off the radios but I would like to set my 5G to either n71 or n41 band on demand. Will that ever work with your app? What does Band steering do when you turn it off?

Thanks in advance, Good job so far!

Can you share a screenshot of the error you see? I have the Arcadyan gateway and I'm unable to reproduce the login issues.

The app is designed to save the credentials by default on a successful login. It should automatically use them on subsequent launches. If the authentication fails, it doesn't save anything.

My password contains a + sign but otherwise only lowercase letters. Is the ! the only non-letter character in your password? It's possible it's not being encoded correctly when the app is trying to authenticate.

To change the refresh period you have to put the new duration in the text field and then press the checkmark at the end of the field to apply it.

As for cellular band locking, we'd need to find an API for that, if there even is one. There are no mentions of any API for band locking in the official app or in any sources online I can find, so if it exists it hasn't been found. Without that, it's not possible to lock bands.

The "Band Steering" option is for WiFi, not cellular. When it's enabled, the gateway will try to keep client devices on the 5GHz band when possible and request they only fall back to 2.4GHz if they either don't support 5GHz or they're too far away.

johnrs commented

Follow up: I have a friend who also has T-Mobile Home Internet. He has the Arcadyan gateway. He was able to use the app on his Samsung phone with no problem.

alphawave415 commented

FWIW, just logged in successfully using app on Chromebook, Arcadyan. Cheers

synchronster commented

Just a FYI that I tried authenticating again on the Pixel 6 and this time it didn't do anything. I tried several times but it just sat there, no 'Not authorized' or error messages. Then I force stopped the app, ran it again, and it took me to the main screen and has been working ever since. I tried the reboot this morning and it works good (it became 5G N71 overnite and rebooting adjusted to N41). Also, there's no way to toggle the checkmark when changing the refresh rate It just grays out when you clear the field. But something IS happening when I make it faster. There's a spinny circle at the top and the values don't update. Right now, I adjusted to 1800 but it still looks like 5 second updates.

zacharee commented

Put in a new value and press the checkmark to apply it. It will always be pressable as long as there's a valid number in the field.

Cobra003 commented

I just installed this app on a no-name chines tablet (the Only android device I have). I have the fast 56888W gateway. When I try to connect I get "Failed to connect to /192.168.12.1:80" I get basically the same result trying to go through Chrome.

Any help or direction would be appreciated. Thanks

Cobra003 commented

I did a factory reset and still used the same password but I was able to get in. :)

zacharee commented

Anyone still getting the unauthorized error, can you use a sniffer tool like Package Capture on Android or Wireshark on desktop to record the full request and response data for the authentication?

I can only think there's some sort of encoding issue with the token generated, but I don't know what it would be.

johnrs commented

Unfortunately, Google Play tells me "This app is not available for your device". Odd since it's a Pixel 2 running Android v.11 and the app only needs v.5. I do see some others, however. tPacketCapture is also "not available", but either PCAPdroid or NetCapture will install. Any preference?

btw - I am able to ping 192.168.12.1 with no problem.

zacharee commented

Any tool will work as long as it can pick up the request headers and body.

johnrs commented

I used NetCapture. The initial connection seems to go fine, returning lots of info about the gateway. But I am still not able to log in. I am getting a very different form of error message from your app: Unauthorized {"result": {"statusCode":401,"error":"AuthorizationError","message":"Not Authorized, Access token is missing or invalid"}}

When I look at the capture, the Request Body contains username and password - both correct. The Response Body contains the message above, which appears in the app.

zacharee commented

Can you send me full logs? You can email me if you want.

johnrs commented

Problem solved! It turns out that the Sagemcom Gateway reverted to the default admin password. It managed to do this without logging me out of the T-Mobile app. Go figure!

I found this out by manually logging out of the T-Mobile app, then logging back in. It used the stored credentials and failed. I typed in the changed password and it failed. Then I typed in the default password and it worked. So I changed the password again. Then I tried the HINT app with the changed password (the one I had been using all along) and it worked just fine.

Finally, I rebooted the router and checked to see that the changed password was still working. AOK.

The Sagemcom only allows you to turn off 1 of the WiFi's. HINT initially showed that both were on. Regardless, after using the app to turn them both off - there are now both off. Great!

Thanks much for your help. I apologize for the Sagemcom foul-up at my end.

Side note: The vertical screen size is a bit too large. it doesn't seem to allow for the on-screen Android button row at the bottom.

BuckeyeFlier commented

Hello, I’ve read through all these comments but I too seem to have the same problem. I am unable to login through the app. I am using the HintControl app through Test Flight on iOS. I receive the following error.

Socket timeout has expired [url=http://192.168.12.1/login_app.cgi, socket_timeout=unknown] ms

Any thoughts to this?

Thanks!

Edit: I’m using the Nokia 5G Gateway

Edit2: I factory reset my Gateway and still cannot login with the default admin password.

zacharee commented

Hello, I’ve read through all these comments but I too seem to have the same problem. I am unable to login through the app. I am using the HintControl app through Test Flight on iOS. I receive the following error.

Socket timeout has expired [url=http://192.168.12.1/login_app.cgi, socket_timeout=unknown] ms

Any thoughts to this?

Thanks!

Edit: I’m using the Nokia 5G Gateway

Edit2: I factory reset my Gateway and still cannot login with the default admin password.

Questions:

  1. Are you on the same local network as the gateway? Remote connections aren't possible.
  2. Does the official T-Mobile Internet app work?
  3. What device and iOS version are you using?
BuckeyeFlier commented

Hello, I’ve read through all these comments but I too seem to have the same problem. I am unable to login through the app. I am using the HintControl app through Test Flight on iOS. I receive the following error.
Socket timeout has expired [url=http://192.168.12.1/login_app.cgi, socket_timeout=unknown] ms
Any thoughts to this?
Thanks!
Edit: I’m using the Nokia 5G Gateway
Edit2: I factory reset my Gateway and still cannot login with the default admin password.

Questions:

  1. Are you on the same local network as the gateway? Remote connections aren't possible.
  2. Does the official T-Mobile Internet app work?
  3. What device and iOS version are you using?
  1. Yes, the same local network.
  2. Yes the app works.
  3. I am on an iPhone 12 running iOS 16.5.
dbcorbin commented

I just tried Hint on my M1 mac. The sagecomm gateway is attached by ethernet to my home network. I did not change the admin password. Hint fails to authenticate screenshot of the error says:

Unauthorized
{status==401
headers==[content-length=[121], date=Fri,30 jun 2023 22:27.27 GMT],server-[lightpd/1.4.59]]
requestHeaders==[Accept=[application/json],Accept-Charset=[UTF-8]]
requestBody=={"username":"admin","password":"***"}
requestUrl==http://192.168.12.1/TMI/v1/auth/login
requestMethod==POST
{"result":{"statusCode".401,"error?:AuthorizationError","message":"Not Authorized, Access token is missing or invalid"}}

Any hints about what to do?

dbcorbin commented

just got in. I had changed the wifi password but didn't think it changed the admin password. randomly tried the my wifi password and it worked. Fascinating

BrianDvich commented

MacOS program user: Also had the authentication error: "Not Authorized, Access token is missing or invalid"...tried the OEM/out of box "Admin" PW and that worked. PW was reset with a firmware update?? I had changed it to my own PW back in February. Anyway I am in now...thanks for the software! Q: does turning off the Wi-Fi radios with your software really turn them off or just hide the SSID(s)? I live where outside temps are 108 degrees+ lately and the room I keep the T-mobile gateway in is in the low 80's to save on A/C elec. bills! Trying to keep gateway internal temps down by turning off the WiFi radios...I have a wired connection and separate MESH routers. Thanks again!

rmat103 commented

Hello, I have the same failure to authenticate error message as dcorbin. Intel Mac, Arcadian gateway, I haven’t made any changes to the username or passwords. Please advise. Thank you.

LuckyBogey commented

I have same problem. Cannot authenticate. Can some help?

rmat103 commented

Hello, I have the same failure to authenticate error message as dcorbin. Intel Mac, Arcadian gateway, I haven’t made any changes to the username or passwords. Please advise. Thank you.

Update 09-09-2023:
This was user error. I downloaded TestFlight from the App Store and installed the HINT control app to that platform. I got the same login error as I had on my Mac with the first login attempt. I discovered that I was consistently mistyping the password printed on the gateway but I couldn’t ‘see’ my mistake. This was all me. If you’re having trouble, take the time to verify each character as you type it into the login screen. Problem solved. Thank you Zacharee for this very useful app.

juddproductions commented

I’m having trouble authenticating from the iOS app. I’m putting in the default password for gateway but no error or message.

zacharee commented

@pigs-on-the-wing let's continue here. Does the official app log in correctly?

pigs-on-the-wing commented

@pigs-on-the-wing let's continue here. Does the official app log in correctly?

No. I receive the 401 Unauthorized error.
PS: I've ensured the password I've entered is correct

zacharee commented

If T-Mobile's app isn't letting you log in, there isn't much I can do.

I have noticed that that the gateway will sometimes let you set passwords that it then doesn't accept. If you use + or @ or non-ASCII characters in the password, that may be why it isn't logging in.

pigs-on-the-wing commented

Let me clarify ... I am able to login with the T-Mobile HI and T-Life apps. No issues there.
Unable to login with the HINT control app... Thought you were referring to the official HINT control app

zacharee commented

Ah, OK. I'll take another look at how T-Life is handling authentication and see if I can make any changes to HINT Control.

pigs-on-the-wing commented

quick update - Android app version 1.11.1 seems to be working now
I hadn't power cycled the TMO-G4AR in a while and decided to give it a clean start and that seems to have helped with the login. So, it's all good. Just wanted to drop a note

Appreciate your help/ fast responses. Let me know if I can help you with any other tests. Great job!

zacharee commented

If this comes up again, try enabling the Advanced toggle on the login screen and adding :8080 to the gateway address field.

zacharee commented

I ran into this myself with my KVD21 and it seems to be a firmware bug. Sometimes the gateway just refuses to accept the admin credentials and it needs to be physically rebooted.

mfeingol commented

@zacharee: I just installed the HINT Control app on Windows and Android. Looking to use it with a Nokia 5G21, software version 1.2303.00.0033. I'm using the correct password, but the app won't connect. On Android tapping the Log In button does nothing, and on Windows a progress ring spins and disappears. No error message. Using the default 192.168.12.1:8080 address and admin username. Any ideas?

pigs-on-the-wing commented

@zacharee: I just installed the HINT Control app on Windows and Android. Looking to use it with a Nokia 5G21, software version 1.2303.00.0033. I'm using the correct password, but the app won't connect. On Android tapping the Log In button does nothing, and on Windows a progress ring spins and disappears. No error message. Using the default 192.168.12.1:8080 address and admin username. Any ideas?

@mfeingol One thing to try...
If your password works with TMO HI or T-Life app and not with the HINT control, then try physically rebooting the Nokia 5G21 gateway, I had the same issue a few weeks ago on my Arcadyn. The reboot helped with the authentication.

mfeingol commented

@pigs-on-the-wing: thanks for the recommendation. I tried that with no change.