diff --git a/scripts/cgi-bin/quecmanager/auth.sh b/scripts/cgi-bin/quecmanager/auth.sh
index dc53c38..ef9a0cf 100644
--- a/scripts/cgi-bin/quecmanager/auth.sh
+++ b/scripts/cgi-bin/quecmanager/auth.sh
@@ -9,10 +9,23 @@ read -r POST_DATA
 
 # Debug log for generated hash
 DEBUG_LOG="/tmp/auth.log"
+touch $DEBUG_LOG
+# Clear log before each attempt to keep file space usage small
+echo "" > "$DEBUG_LOG"
 
+# get the platform type
+PLATFORM=$(cat /sys/devices/soc0/machine)
+echo "PLATFORM: $PLATFORM" >> "$DEBUG_LOG"
 # Extract the password from POST data (URL encoded)
-USER="root"
+if echo $PLATFORM | grep -q  "LEMUR"; then
+        USER="admin"
+        ACCESS_FILE="/opt/etc/.htpasswd"
+elif echo $PLATFORM | grep -q  "PINN"; then
+        USER="root"
+        ACCESS_FILE="/etc/shadow"
+fi
 INPUT_PASSWORD=$(echo "$POST_DATA" | grep -o 'password=[^&]*' | cut -d= -f2-)
+echo "User: $USER" >> "$DEBUG_LOG"
 
 # URL-decode the password while preserving most special characters
 # First decode percent-encoded sequences
@@ -23,6 +36,7 @@ urldecode() {
 
 # Decode the password
 INPUT_PASSWORD=$(urldecode "$INPUT_PASSWORD")
+echo "ACCESS_FILE: $ACCESS_FILE" >> $DEBUG_LOG
 
 # Basic validation to reject & and $ characters
 if echo "$INPUT_PASSWORD" | grep -q '[&$]'; then
@@ -32,9 +46,10 @@ fi
 
 # Sanitize the password for shell usage
 INPUT_PASSWORD=$(printf '%s' "$INPUT_PASSWORD" | sed 's/[\"]/\\&/g')
-
 # Extract the hashed password from /etc/shadow for the specified user
-USER_SHADOW_ENTRY=$(grep "^$USER:" /etc/shadow)
+USER_SHADOW_ENTRY=$(grep "^$USER:" "$ACCESS_FILE")
+
+echo "USER: $USER - Shadow User: $USER_SHADOW_ENTRY" >> $DEBUG_LOG
 
 if [ -z "$USER_SHADOW_ENTRY" ]; then
     echo '{"state":"failed", "message":"User not found"}'
@@ -47,16 +62,21 @@ USER_HASH=$(echo "$USER_SHADOW_ENTRY" | cut -d: -f2)
 # Extract the salt (MD5 uses the $1$ prefix followed by the salt)
 SALT=$(echo "$USER_HASH" | cut -d'$' -f3)
 
+HASH_TYPE=$(echo "$USER_HASH" | cut -d'$' -f2)
+
+echo "SALT: $SALT" >> $DEBUG_LOG
+echo "HASH_TYPE: $HASH_TYPE" >> $DEBUG_LOG
+
 # Generate a hash from the input password using the same salt
 # Use printf to avoid issues with special characters in echo
-GENERATED_HASH=$(printf '%s' "$INPUT_PASSWORD" | openssl passwd -1 -salt "$SALT" -stdin)
+GENERATED_HASH=$(printf '%s' "$INPUT_PASSWORD" | openssl passwd -$HASH_TYPE -salt "$SALT" -stdin)
 
 # Log generated hash for debugging
-printf "Generated hash: %s\n" "$GENERATED_HASH" >> "$DEBUG_LOG"
+echo "Generated hash: %s\n" "$GENERATED_HASH" >> "$DEBUG_LOG"
 
 # Compare the generated hash with the one in the shadow file
 if [ "$GENERATED_HASH" = "$USER_HASH" ]; then
     echo '{"state":"success"}'
 else
     echo '{"state":"failed", "message":"Authentication failed"}'
-fi
\ No newline at end of file
+fi