Add PBS to PVE: 401 Unauthorized permission check failed

jnorthe

New Member
Apr 20, 2024
2
0
1
Germany, Ba-Wü
Hi folks,
PVE: 8.1.10 (no pending updates)
PBS: 3.1-2 (no pending updates - new setup)

After adding the PBS to the PVE, I can't access the datastore from the PVE and get the "Error fetching datastores - 401 Unauthorized (500)".

PVE site:
-------------
/etc/pve/storage.cfg
..
pbs: cppbx-15
datastore cp-zfs1
server 10.0.230.15
content backup
fingerprint b3:e3:f8:09:74:12:28:a5:00:b6:6b:46:5d:df:6d:27:03:cd:d8:52:68:c9:1d:10:07:08:fd:b4:ad:36:da:88
prune-backups keep-all=1
username root@pam

PBS site:
-------------
ls -la /mnt/datastore/
total 2
drwxr-xr-x 3 root root 3 Apr 20 19:05 .
drwxr-xr-x 3 root root 3 Apr 17 20:05 ..
drwxr-xr-x 3 backup backup 4 Apr 20 19:05 cp-zfs1

I recreated the datastore several times and also tried it with "connector@pbs" and set the permissions to the role Admin for datastore and subdirectories. After this does not help either I restarted again to connect with root@pam to avoid permission issues.
Also I checked the fingerprint which I took from the PBS Dashboard button twice and can confirm that it matches to the certificate of the PBS.
On the PBS site I only see
Apr 20 19:23:58 cppbx-15 proxmox-backup-api[1205]: pam_unix(proxmox-backup-auth:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:10.0.230.10 user=root
Apr 20 19:23:59 cppbx-15 proxmox-backup-[1205]: cppbx-15 proxmox-backup-api[1205]: authentication failure; rhost=[::ffff:10.0.230.10]:58146 user=root@pam msg=authentication error - SUCCESS (0)
Apr 20 19:24:02 cppbx-15 proxmox-backup-[1205]: cppbx-15 proxmox-backup-api[1205]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:10.0.230.10]:58146] permission check failed.


Is a key-based and password less login from PVE to PBS with the above user used - as it is the case in a cluster environment?
Even a reboot after the marriage does not fix the issue.

Thank you very much for any hint!
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!