Cannot Login through the Web User Interface

[nprkuhn]

Hi,

I've just installed Promox VE 6.4 on a couple of dedicated servers hosted at OVH (using the Proxmox OVH installation template).

I'm connecting through SSH fine but when I try to connect though to the Web UI interface I get an error message every time on both servers!

"Connection failure. Network error or Proxmox VE services not running?" or "Login failed. Please try again"

I use root and my installation password that works fine with SSH ( for the Realm it is set to : Linux PAM standard authentication and I tried as well Proxmox VE authentication server)

I did update all the packages of distribution, I rebooted as well : still no luck!

I look up all the related problems on the forums here and elsewhere: could not find a clue.

I tried several commands recommended in these pages like "pvecm updatecerts"


One lead though is that after investigating for hours I did install cockpit package and I have the same problem: impossible to login on port 9090 for cockpit just like on port 8006 on PVE...

Here are the usual commands requested by support and their results :

systemctl restart pveproxy pvedaemon

then a connect attempt:

systemctl status pveproxy pvedaemon

● pveproxy.service - PVE API Proxy Server
Loaded: loaded (/lib/systemd/system/pveproxy.service; enabled; vendor preset: enabled)
Active: active (running) since Sun 2021-07-04 04:15:10 UTC; 1min 37s ago
Process: 4355 ExecStartPre=/usr/bin/pvecm updatecerts --silent (code=exited, status=0/SUCCESS)
Process: 4357 ExecStart=/usr/bin/pveproxy start (code=exited, status=0/SUCCESS)
Main PID: 4360 (pveproxy)
Tasks: 4 (limit: 4915)
Memory: 138.9M
CGroup: /system.slice/pveproxy.service
├─4360 pveproxy
├─4361 pveproxy worker
├─4362 pveproxy worker
└─4363 pveproxy worker

Jul 04 04:15:08 adv4-gra1 systemd[1]: Starting PVE API Proxy Server...
Jul 04 04:15:10 adv4-gra1 pveproxy[4360]: starting server
Jul 04 04:15:10 adv4-gra1 pveproxy[4360]: starting 3 worker(s)
Jul 04 04:15:10 adv4-gra1 pveproxy[4360]: worker 4361 started
Jul 04 04:15:10 adv4-gra1 pveproxy[4360]: worker 4362 started
Jul 04 04:15:10 adv4-gra1 pveproxy[4360]: worker 4363 started
Jul 04 04:15:10 adv4-gra1 systemd[1]: Started PVE API Proxy Server.

● pvedaemon.service - PVE API Daemon
Loaded: loaded (/lib/systemd/system/pvedaemon.service; enabled; vendor preset: enabled)
Active: active (running) since Sun 2021-07-04 04:15:08 UTC; 1min 38s ago
Process: 4347 ExecStart=/usr/bin/pvedaemon start (code=exited, status=0/SUCCESS)
Main PID: 4351 (pvedaemon)
Tasks: 4 (limit: 4915)
Memory: 135.5M
CGroup: /system.slice/pvedaemon.service
├─4351 pvedaemon
├─4352 pvedaemon worker
├─4353 pvedaemon worker
└─4354 pvedaemon worker

Jul 04 04:15:08 adv4-gra1 systemd[1]: Starting PVE API Daemon...
Jul 04 04:15:08 adv4-gra1 pvedaemon[4351]: starting server
Jul 04 04:15:08 adv4-gra1 pvedaemon[4351]: starting 3 worker(s)
Jul 04 04:15:08 adv4-gra1 pvedaemon[4351]: worker 4352 started
Jul 04 04:15:08 adv4-gra1 pvedaemon[4351]: worker 4353 started
Jul 04 04:15:08 adv4-gra1 pvedaemon[4351]: worker 4354 started
Jul 04 04:15:08 adv4-gra1 systemd[1]: Started PVE API Daemon.
Jul 04 04:16:37 adv4-gra1 IPCC.xs[4354]: pam_unix(proxmox-ve-auth:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=root
Jul 04 04:16:39 adv4-gra1 pvedaemon[4354]: authentication failure; rhost=::ffff:37.165.115.158 user=root@pam msg=Authentication failure

cat /etc/pve/user.cfg
cat: /etc/pve/user.cfg: No such file or directory

So no user.cfg in that directory (it's a fresh install the only user yet is root)
I tried to enter the password by copy/paste and typing it without success on the Web UI

cat /etc/hosts
XXX.XX.XX.XX adv4-gra1.XXXX.XX adv4-gra1

No 127.0.0.1 line in the file.

ip -br -c a
lo UNKNOWN 127.0.0.1/8 ::1/128
enp97s0f0 UP
enp97s0f1 UP
vmbr0 UP XXX.XX.XX.XX/24 fe80::xxxx:xxxx:xxxx:xxxx/64

I am running out of ideas: can you please help?

Thanks in advance.
Nicolas

 

[Moayad]

Hi,

Have you tried to log in with a different browser into PVE?

Could you please post the sources.list as well?

grep '' /etc/apt/sources.list
grep '' /etc/apt/sources.list.d/*

 

[nprkuhn]

Hello Moayad,

I tried with :
- Apple Safari Version 14.1.1 (15611.2.7.1.6, 15611)
- Google Chrome Version 91.0.4472.114 (Build officiel) (x86_64)
- Mozilla Firefox 89.0.2 (64 bits)
all this under Mac OS X Catalina version 10.15.7 (19H1217)
No difference whatsoever!

grep '' /etc/apt/sources.list

deb http://deb.debian.org/debian/ buster main
deb-src http://deb.debian.org/debian/ buster main
deb http://deb.debian.org/debian/ buster-updates main
deb-src http://deb.debian.org/debian/ buster-updates main
deb http://security.debian.org/debian-security buster/updates main
deb-src http://security.debian.org/debian-security buster/updates main

deb http://download.proxmox.com/debian/pve buster pve-no-subscription

grep '' /etc/apt/sources.list.d/*

deb http://deb.debian.org/debian buster-backports main

This on both servers

Locally on my Parallels Desktop I use locally where I don't have the problem :

grep '' /etc/apt/sources.list
deb http://ftp.fr.debian.org/debian buster main contrib
deb http://ftp.fr.debian.org/debian buster-updates main contrib
# security updates
deb http://security.debian.org buster/updates main contrib

grep '' /etc/apt/sources.list.d/*
/etc/apt/sources.list.d/backports.list:deb http://deb.debian.org/debian buster-backports main
/etc/apt/sources.list.d/pve-enterprise.list:deb https://enterprise.proxmox.com/debian/pve buster pve-enterprise

Thanks again for your help.

PS: Don't know if it is helpful but with my local lab install I have the following issue:

Get:1 http://security.debian.org buster/updates InRelease [65.4 kB]
Get:2 http://deb.debian.org/debian buster-backports InRelease [46.7 kB]
Hit:3 http://ftp.fr.debian.org/debian buster InRelease
Get:4 http://ftp.fr.debian.org/debian buster-updates InRelease [51.9 kB]
Err:5 https://enterprise.proxmox.com/debian/pve buster InRelease 401 Unauthorized [IP: 51.91.38.34 443]
Reading package lists... Done
E: Failed to fetch https://enterprise.proxmox.com/debian/pve/dists/buster/InRelease 401 Unauthorized [IP: 51.91.38.34 443]
E: The repository 'https://enterprise.proxmox.com/debian/pve buster InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Any Idea what is address 51.91.38.34 (This is not my IP for sure) and why it is Unauthorized?

 

[Moayad]

Hello,

Err:5 https://enterprise.proxmox.com/debian/pve buster InRelease 401 Unauthorized [IP: 51.91.38.34 443]

Do you have a subscription with Proxmox VE? - if no, please use the no-subscription repository [0] then do [apt update && apt full-upgrade]

Any Idea what is address 51.91.38.34 (This is not my IP for sure) and why it is Unauthorized?

This is for Proxmox repository


[0] https://pve.proxmox.com/wiki/Package_Repositories#sysadmin_no_subscription_repo

 

[nprkuhn]

Hello Moyad,

I am going to implement that into my local lab on my computer. I suppose it is because my local package that I downloaded directly from Proxmox is different of the one provided by OVH on my production servers.

Concerning the issue with the Web UI on my production servers, can you please help me further with the elements provided yesterday?

Thanks in advance for your help.

 

[nprkuhn]

Hello Moyad,

following my Monday update, concerning the issue with the Web UI on my production servers, can you please help me further with the elements provided?

Thanks in advance for your help.
PS: I'm trying for a week now and still no solution.

 

[Moayad]

Hello,

Have you tried with curl command [0] to see if it's logged in?

[0] https://pve.proxmox.com/wiki/Proxmox_VE_API#Authentication

 

[nprkuhn]

Hello Moyad,
sorry but having to make curl command in the API is out of my league at present.
I have subscription now I'm going to open a ticket.