Wazuh manager docker password auth

[Gladioluss]

Hello everyone, I have a problem connecting agents using a password.
In the docker wazuh manager logs I see the following

2025/08/11 16:07:30 wazuh-authd: INFO: New connection from 192.168.0.160
2025/08/11 16:07:30 wazuh-authd: ERROR: Invalid password provided by 192.168.0.160. Closing connection.
2025/08/11 16:07:40 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '192.168.0.160' (name 'unknown').
2025/08/11 16:07:50 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '192.168.0.160' (name 'unknown').
2025/08/11 16:08:00 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '192.168.0.160' (name 'unknown').

Here is the ossec.conf block in manager

  <auth>
    <disabled>no</disabled>
    <port>1515</port>
    <use_source_ip>no</use_source_ip>
    <purge>yes</purge>
    <use_password>yes</use_password>
    <ciphers>HIGH:!ADH:!EXP:!MD5:!RC4:!3DES:!CAMELLIA:@STRENGTH</ciphers>
    <ssl_verify_host>no</ssl_verify_host>
    <ssl_manager_cert>etc/sslmanager.cert</ssl_manager_cert>
    <ssl_manager_key>etc/sslmanager.key</ssl_manager_key>
    <ssl_auto_negotiate>no</ssl_auto_negotiate>
  </auth>

I added authd.pass to the docker container with the required rights

- ./config/wazuh_cluster/authd.pass:/var/ossec/etc/authd.pass:ro

Full compose wazuh manager

version: '3'
services:
  wazuh.manager:
    image: wazuh/wazuh-manager:4.12.0
    hostname: wazuh.manager
    restart: always
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 655360
        hard: 655360
    ports:
      - "1514:1514"
      - "1515:1515"
      - "514:514/udp"
      - "55000:55000"
    env_file:
      - .env
    volumes:
      - wazuh_api_configuration:/var/ossec/api/configuration
      - wazuh_etc:/var/ossec/etc
      - wazuh_logs:/var/ossec/logs
      - wazuh_queue:/var/ossec/queue
      - wazuh_var_multigroups:/var/ossec/var/multigroups
      - wazuh_integrations:/var/ossec/integrations
      - wazuh_active_response:/var/ossec/active-response/bin
      - wazuh_agentless:/var/ossec/agentless
      - wazuh_wodles:/var/ossec/wodles
      - filebeat_etc:/etc/filebeat
      - filebeat_var:/var/lib/filebeat
      - ./config/wazuh_cluster/lists/agents:/var/ossec/etc/lists/agents/
      - ./config/wazuh_cluster/rules:/var/ossec/etc/rules
      - ./config/wazuh_cluster/active_response/:/var/ossec/active-response/bin/agents/
      - ./config/wazuh_indexer_ssl_certs/root-ca-manager.pem:/etc/ssl/root-ca.pem
      - ./config/wazuh_indexer_ssl_certs/wazuh.manager.pem:/etc/ssl/filebeat.pem
      - ./config/wazuh_indexer_ssl_certs/wazuh.manager-key.pem:/etc/ssl/filebeat.key
      - ./config/wazuh_cluster/wazuh_manager.conf:/var/ossec/etc/ossec.conf
      - ./config/wazuh_cluster/authd.pass:/var/ossec/etc/authd.pass:ro

Wazuh agent I install via apt. Here is an example of ossec.conf agent

<ossec_config>
  <client>
    <server>
      <address>manager-ip</address>
      <port>1514</port>
    </server>
    <config-profile>default</config-profile>
    <enrollment>
      <enabled>yes</enabled>
      <manager_address>manager-ip</manager_address>
      <port>1515</port>
      <authorization_pass_path>/var/ossec/etc/authd.pass</authorization_pass_path>
    </enrollment>
  </client>

When changing the password, I delete /var/ossec/etc/client.keys on the agent.

I compared the passwords and they are the same.
Agent

xxd -g 1 /var/ossec/etc/authd.pass
00000000: 53 75 70 65 72 53 65 63 72 65 74 50 77 64 31 32  SuperSecretPwd12
00000010: 33 0a                                            3.

wc -c  /var/ossec/etc/authd.pass
18 /var/ossec/etc/authd.pass

Manager

xxd -g 1 authd.pass
00000000: 53 75 70 65 72 53 65 63 72 65 74 50 77 64 31 32  SuperSecretPwd12
00000010: 33 0a                                            3.

wc -c  config/wazuh_cluster/authd.pass
18 config/wazuh_cluster/authd.pass

I don't understand why the password is invalid. Thanks for your help