Changing password for user not working

[Tha_Duck]

As an Admin I try to change the password of a user.
Error:

Failed Referer Check​

The referer request set (reseller/users/XXXX/view/domains) is not in the allowed list: CMD_API_USER_PASSWD, CMD_USER_PASSWD, HTM_USER_PASSWD, admin/passwords, admin/users, reseller/passwords

DirectAdmin is running in debug mode and gives the following information (username replaced with XXXX and DirectAdmin URL with DA):

Post string: {"username":"XXXX","passwd":"sadasdsa","json":"yes","action":"create","referer":"CMD_API_USER_PASSWD","passwd2":"sadasdsa"}
Checking referer https://DA:2222/reseller/users/XXXX/view/domains to DA:2222
Referer check passed: DA:2222=DA:2222
auth.authenticated
User::deny_override:/CMD_DOMAIN: call_level=2, depth1: aborting due to do depth
User::deny_override:/CMD_DOMAIN: call_level=1, depth2: aborting due to do depth
Plugin::addHooks: start
Plugin::addHooks: end
Command::doCommand(/CMD_USER_PASSWD)
have_required_refererer: Got: https://DA:2222/reseller/users/XXXX/view/domains. Require:
listType: 0 size=64
0: CMD_API_USER_PASSWD
1: CMD_USER_PASSWD
2: HTM_USER_PASSWD
3: admin/passwords
4: admin/users
5: reseller/passwords
request: /reseller/users/XXXX/view/domains
Dynamic(api=0, error=1):
text='Failed Referer Check'
result='The referer request set (reseller/users/XXXX/view/domains) is not in the allowed list: CMD_API_USER_PASSWD, CMD_USER_PASSWD, HTM_USER_PASSWD, admin/passwords, admin/users, reseller/passwords'
Failed Referer Check for doUserPassword: Could not find a match for 'https://DA:2222/reseller/users/XXXX/view/domains'
Command::doCommand(/CMD_USER_PASSWD) : finished
Command::run: finished /CMD_USER_PASSWD

As far as I can see all referers match. DirectAdmin and server is working as expected, except the password change.

 

[kebirhost]

Same issue here....

 

[Tha_Duck]

Oh, maybe it is related to the new 1.644 I installed this morning, did not try to change a password earlier (new install).

 

[kebirhost]

There was no problem. We have reported the problem to DA.

 

[tc0843]

I have this same issue. Logged in as admin and trying to change a user password I get:

The referer request set (reseller/users/******/view/usage) is not in the allowed list: CMD_API_USER_PASSWD, CMD_USER_PASSWD, HTM_USER_PASSWD, admin/passwords, admin/users, reseller/passwords

 

[Tha_Duck]

Hope the DA team reads the fora and fixes the issue soon.