Cannot login into PVE WebGUI... ok to ssh and ok to login from app

[balle]

I can't figure out how to solve this. I am not able to login to PVE WebGIU. I can SSH into the pve machine and I can also login from the android app. I used to be able to do this yesterday, but I cannot do log in today. I get a message "Login Failed".

Did I get an update that broke things? Where should I look to debug?

 

[t.lamprecht]

Can you ensure you selected the correct realm (e.g. @pam for root@pam or @pve for the PVE internal realm)?

SSH is something different, but the android app also uses the API just like the Web-GUI, so it seems that part works out fine..
If above does not help maybe open the web developer console of the browser and check how the request and response of the login looks like in the network panel there.

 

[balle]

Cannot login in root@pam


Request:
username=root%40pam&password=REMOVED&realm=pam&new-format=1

Response:
{"success":0,"data":null,"status":"401","message":"authentication failure\n"}

 

[t.lamprecht]

Hmm, can you log in via ssh, run both

apt update
pveversion -v

and post that output here? To rule out a few things...

 

[balle]

pveversion -v output is,

proxmox-ve: 7.1-1 (running kernel: 5.13.19-2-pve)
pve-manager: 7.1-7 (running version: 7.1-7/df5740ad)
pve-kernel-helper: 7.1-6
pve-kernel-5.13: 7.1-5
pve-kernel-5.13.19-2-pve: 5.13.19-4
pve-kernel-5.13.19-1-pve: 5.13.19-3
ceph-fuse: 15.2.15-pve1
corosync: 3.1.5-pve2
criu: 3.15-1+pve-1
glusterfs-client: 9.2-1
ifupdown2: 3.1.0-1+pmx3
ksm-control-daemon: 1.4-1
libjs-extjs: 7.0.0-1
libknet1: 1.22-pve2
libproxmox-acme-perl: 1.4.0
libproxmox-backup-qemu0: 1.2.0-1
libpve-access-control: 7.1-5
libpve-apiclient-perl: 3.2-1
libpve-common-perl: 7.0-14
libpve-guest-common-perl: 4.0-3
libpve-http-server-perl: 4.0-4
libpve-storage-perl: 7.0-15
libspice-server1: 0.14.3-2.1
lvm2: 2.03.11-2.1
lxc-pve: 4.0.9-4
lxcfs: 4.0.8-pve2
novnc-pve: 1.2.0-3
proxmox-backup-client: 2.1.2-1
proxmox-backup-file-restore: 2.1.2-1
proxmox-mini-journalreader: 1.3-1
proxmox-widget-toolkit: 3.4-4
pve-cluster: 7.1-2
pve-container: 4.1-2
pve-docs: 7.1-2
pve-edk2-firmware: 3.20210831-2
pve-firewall: 4.2-5
pve-firmware: 3.3-3
pve-ha-manager: 3.3-1
pve-i18n: 2.6-2
pve-qemu-kvm: 6.1.0-3
pve-xtermjs: 4.12.0-1
qemu-server: 7.1-4
smartmontools: 7.2-1
spiceterm: 3.2-2
swtpm: 0.7.0~rc1+2
vncterm: 1.7-1
zfsutils-linux: 2.1.1-pve3

 

[t.lamprecht]

Also out of interest: pveum user list --noborder

 

[balle]

userid    comment email            enable expire firstname groups keys lastname realm-type tokens
nitin@pam                          1           0                                pam
root@pam          mail@example.com 1           0                                pam

 

[t.lamprecht]

Hmm, looks all OK, did you create nitin as PAM user? Not having that should not block login root@pam though.

Also, any error in the syslog during such a login attempt over the web-inteface?