Not working, always invalid username or password

[antwal]

I tried different configurations and several restarts of the server without any solution, it always says that the credentials are wrong both with the correct users and those that do not exist:

VirtualBox version:

root@server:~# vboxmanage -v | cut -dr -f1
6.1.44

Configs:

root@server:~# cat /etc/default/virtualbox 
VBOXWEB_USER=vbox
VBOXWEB_HOST=0.0.0.0
VBOXWEB_PORT=18083
VBOXWEB_LOGFILE=/home/vbox/vboxweb.log
VBOXAUTOSTART_DB=/etc/vbox
VBOXAUTOSTART_CONFIG=/etc/vbox/autostartvm.cfg

root@server:~# cat /etc/vbox/autostartvm.cfg 
default_policy = deny

vbox = {
    allow = true
    startup_delay = 10
}

VBoxWeb Log:

root@server:~# cat /home/vbox/vboxweb.log
00:00:00.001440 main     VirtualBox web service 6.1.44 r156814 linux.amd64 (Apr 13 2023 11:19:06) release log
00:00:00.001442 main     Log opened 2023-06-28T17:32:03.167844000Z
00:00:00.001442 main     Build Type: release
00:00:00.001444 main     OS Product: Linux
00:00:00.001445 main     OS Release: 6.1.0-0.deb11.7-amd64
00:00:00.001446 main     OS Version: #1 SMP PREEMPT_DYNAMIC Debian 6.1.20-2~bpo11+1 (2023-04-23)
00:00:00.001465 main     DMI Product Name: To Be Filled By O.E.M.
00:00:00.001474 main     DMI Product Version: To Be Filled By O.E.M.
00:00:00.001479 main     Firmware type: BIOS
00:00:00.001517 main     Host RAM: 15675MB (15.3GB) total, 15051MB (14.6GB) available
00:00:00.001519 main     Executable: /usr/lib/virtualbox/vboxwebsrv
00:00:00.001519 main     Process ID: 33321
00:00:00.001520 main     Package type: LINUX_64BITS__DEBIAN_11
00:00:00.012018 main     IPC socket path: /tmp/.vbox-vbox-ipc/ipcd
00:00:00.170939 SQPmp    Socket connection successful: host = 0.0.0.0, port = 18083, master socket = 9
00:00:05.165419 Watchdog Statistics: 0 websessions, 0 references
00:00:14.026628 SQPmp    Request 1 on socket 10 queued for processing (1 items on Q)
00:00:14.026735 SQW01    New SOAP thread started
00:00:14.026783 SQW01    Processing connection from IP=172.17.0.3 socket=10 (0 out of 1 threads idle)
00:00:14.028334 SQW01    External authentication library is 'VBoxAuth'
00:00:17.159001 SQW01    Access for user 'username' denied
00:01:18.599189 SQPmp    Request 2 on socket 10 queued for processing (1 items on Q)
00:01:18.599223 SQW01    Processing connection from IP=172.17.0.3 socket=10 (0 out of 1 threads idle)
00:01:21.454384 SQW01    Access for user 'vbox' denied
00:01:49.531627 SQPmp    Request 3 on socket 10 queued for processing (1 items on Q)
00:01:49.531725 SQW01    Processing connection from IP=172.17.0.3 socket=10 (0 out of 1 threads idle)
00:01:49.586256 SQW01    Access for user 'vbox' granted
00:01:54.655884 SQPmp    Request 4 on socket 10 queued for processing (1 items on Q)
00:01:54.655973 SQW01    Processing connection from IP=172.17.0.3 socket=10 (0 out of 1 threads idle)
00:01:54.711275 SQW01    Access for user 'vbox' granted
00:06:06.128152 SQPmp    Request 5 on socket 10 queued for processing (1 items on Q)
00:06:06.128206 SQW01    Processing connection from IP=172.17.0.3 socket=10 (0 out of 1 threads idle)
00:06:06.183072 SQW01    Access for user 'vbox' granted
00:07:40.186324 SQPmp    Request 6 on socket 10 queued for processing (1 items on Q)
00:07:40.186433 SQW01    Processing connection from IP=172.17.0.3 socket=10 (0 out of 1 threads idle)
00:07:40.240121 SQW01    Access for user 'vbox' granted

Container Log:

Using following global configuration parameters:
Array
(
    [browserRestrictFolders] => /home
)
Using the following linked server instances:
Array
(
    [0] => Array
�
(
            [name] => Server1
            [username] => vbox
            [password] => vbox
            [location] => http://172.16.88.10:18083/
�
)
)
2023/06/28 17:39:29 [notice] 1#1: using the "epoll" event method
2023/06/28 17:39:29 [notice] 1#1: nginx/1.22.1
2023/06/28 17:39:29 [notice] 1#1: OS: Linux 6.1.0-0.deb11.7-amd64
2023/06/28 17:39:29 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2023/06/28 17:39:29 [notice] 1#1: start worker processes
2023/06/28 17:39:29 [notice] 1#1: start worker process 12
2023/06/28 17:39:29 [notice] 1#1: start worker process 13
2023/06/28 17:39:29 [notice] 1#1: start worker process 14
2023/06/28 17:39:29 [notice] 1#1: start worker process 15
172.16.88.25 - - [28/Jun/2023:17:39:43 +0000] "POST /endpoints/api.php HTTP/1.1" 200 93 "http://172.16.88.10:8080/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"

User:

root@server:~# cat /etc/passwd | grep vbox
vbox:x:1000:991::/home/vbox:/bin/bash

root@server:~# cat /etc/group | grep vbox
users:x:100:vbox
vboxusers:x:991:root,vbox

but i show always this screen:

what is the problem and how to solve it?