Can't login on webinterface 401

M

mauriceklein

New Member
Dec 19, 2023
6
1
3
Hello, i can't login anymore on my cluster on the web gui.
I allways get the message

Login failed:
authentication failure (401)
Please try again

It's recently upgraded to version 9 and afterwards i can't remember if I was still logged in or if i did login after.
I defenitly had access to the webui after the upgrade though.

I'm trying to login with root and linux pam is selected.
I've also restarted the pveproxy service.
SSH login works without issues.

Thanks!

Version:
pve-manager/9.0.6/49c767b70aeb6648 (running kernel: 6.14.11-1-pve)
 
What happens when you run this from the PVE shell:
curl -k -d "username=root@pam&password=YOURPASSWORD" https://localhost:8006/api2/json/access/ticket

What is in the output of "journalctl -n 100" immediately after running that command?

Have you tried a different browser? Did you try in Incognito mode? Are you sure your browser extensions are not interfering?

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
 
Last edited:
Hi,

i did try in many different browsers and also in incognito mode.
Even from different machines.

the comand returns:

{"data":null,"journalctl -n 100ication failure\n"}

The relevant lines in journal after seem to be these:


Sep 05 14:21:53 pve03 perl[1849736]: rp_id is not an effective_domain of rp_origin


Sep 05 14:21:53 pve03 pvedaemon[1849736]: authentication failure; rhost=::1 user=root@pam msg=failed to begin webauthn context instantiation: The configuration was invalid

Thanks!
 
mauriceklein said:
Sep 05 14:21:53 pve03 pvedaemon[1849736]: authentication failure; rhost=::1 user=root@pam msg=failed to begin webauthn context instantiation: The configuration was invalid
Click to expand...
So you’ve configured more than just basic authentication in PVE.

I don’t use WebAuthn personally, so I can’t offer practical troubleshooting advice. You should check the forum threads on this topic, for example:
https://forum.proxmox.com/threads/unable-to-login-with-webauthn.107873/
https://www.reddit.com/r/Proxmox/comments/1jyuwnp/webauthn_setup_worked_last_week_now_completely/

Beyond that, perhaps someone more familiar with this technology will be able to assist. There’s probably also a way to disable WebAuthn from the CLI if needed.

Cheers

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
 
Last edited:
  • Like
Reactions: december12
I also don't use webauthn.
I've deleted the webauthn line from my datacenter.cfg now and i'm able to login again.
I think years ago i played around with it but i had it disabled again.

Thanks for your help!
 
  • Like
Reactions: december12
You must log in or register to reply here.
Top Bottom