Just sat a password for my user and I am not able to get into my vera box again (can log into it with ssh)? Is there any way of getting rid of the password without resetting the box (and loose all configuration) ?
Nevere mind, I found out (but with quite a lot of sweat in my palms ;))
And the answer was…?
(IMHO, anyone who says ‘never mind, I figured it out’ should always share the solution!)
D.
I had the same issue. The solution was to Capitalize the first letter in the user name.
Sorry about that, I agree that a found solution shall be distributed. But beware on this one, it worked for me but I don’t know how safe it is:
I removed all contents from /jffs/etc/lighttpd.users and
removed all lines in httpd.conf with my username in it.
I took the chance of doing this since I feared that factory reset was the only way to get back in, so it would not matter if I cluttered the system.
But I still want to have a password 
Tried to set password again, same behavior. Same fix worked, but one must reboot after the changes…
Tried to add a user, then it worked ??? ???
To remove a user you’ll have just to delete it from /etc/lighttpd.users file.
If you want to disable local authentication you can delete that file.
after that procedure you should also do /etc/init.d/lighttpd restart
Your username can contains only apha-numeric chars.