deactivated root@PAM - how to reactivate [SOLVED]

[Tornavida]

Hi guys
I was fondeling around the the GUI. And I deactivated the PAM login and now I can't loginto the WEB-GUI. I know stupid me... but am learning by doing ... xD

Could someone post me the path to reactivate it via CLI

thaaaanks !!

 

[RokaKen]

Perhaps learning by RTFM would be better? <grin> See 21.14. pveum - Proxmox VE User Manager for the answer. HINT: 'pam' is a realm in PVE.

 

[Tornavida]

bad mooded, eh ?!
Why do you waste these couple of minutes of your life and make the effort for posting a reply with no informative value.
In need of a "ventile" to let out the pressure or why this cynicism... ?

 

[Tornavida]

so following:

root@server:~# journalctl -u pvedaemon
-- Logs begin at Wed 2020-07-22 16:27:54 CEST, end at Wed 2020-07-22 18:40:00 CEST. --
Jul 22 16:28:11 server systemd[1]: Starting PVE API Daemon...
Jul 22 16:28:11 server pvedaemon[2194]: starting server
Jul 22 16:28:11 server pvedaemon[2194]: starting 3 worker(s)
Jul 22 16:28:11 server pvedaemon[2194]: worker 2195 started
Jul 22 16:28:11 server pvedaemon[2194]: worker 2196 started
Jul 22 16:28:11 server pvedaemon[2194]: worker 2197 started
Jul 22 16:28:11 server systemd[1]: Started PVE API Daemon.
Jul 22 16:30:25 server pvedaemon[2197]: authentication failure; rhost=192.168.1.127 user=root@pam msg=user 'root@pam' is disabled
Jul 22 16:31:11 server pvedaemon[2197]: authentication failure; rhost=192.168.1.127 user=qm start 101@pam msg=value 'qm start 101@pam' does not look like a valid user name
Jul 22 18:09:46 server pvedaemon[2197]: authentication failure; rhost=192.168.1.127 user=root@pam msg=user 'root@pam' is disabled
Jul 22 18:09:53 server pvedaemon[2196]: authentication failure; rhost=192.168.1.127 user=root@pve msg=no such user ('root@pve')
Jul 22 18:27:19 server pvedaemon[2195]: authentication failure; rhost=192.168.1.127 user=root@pve msg=no such user ('root@pve')
Jul 22 18:27:25 server pvedaemon[2197]: authentication failure; rhost=192.168.1.127 user=root@pam msg=user 'root@pam' is disabled
Jul 22 18:29:44 server pvedaemon[2195]: authentication failure; rhost=192.168.1.127 user=root@pve msg=no such user ('root@pve')
Jul 22 18:32:42 server pvedaemon[2197]: authentication failure; rhost=192.168.1.127 user=root@pam msg=user 'root@pam' is disabled
Jul 22 18:36:17 server pvedaemon[2196]: authentication failure; rhost=192.168.1.3 user=root@pam msg=user 'root@pam' is disabled
Jul 22 18:39:50 server pvedaemon[2197]: authentication failure; rhost=192.168.1.3 user=root@pam msg=user 'root@pam' is disabled

and curl

root@server:~# curl -k -d "username=root@pam&password=******" https://192.168.1.3:8006/api2/json/access/ticket
{"data":null}root@server:~#

I guess i just need to enable root@pam
....

 

[Tornavida]

so as thought, solution simple - but for n00bs - not

So as mentioned above: I'messed aroung with my Web-Gui and somehow deactivated my root login on the server.
to cut a long story short:

# nano /etc/pve/user.cfg

user:root@pam:0:0:::server@XXXXX.ch:::

user:root@pam:1:0:::server@XXXXX.ch:::

so set the 0 to 1 .... reboot/restart service, voila !!

cheers

 

[shodan]

Hi there,
I had this error happen to me as well.

Because a strange quirk of the loggin screen.

I created a pve user rather than a pam user.



Things still worked fine and I didn't think any of it.

Some times later, I go to the webui, and...

No matter what, I can't login ! Why ??

So I searched google for "user=root@pve msg=no such user ('root@pve')"
This thread is the top result for this query

And that's how I find out what the quirk is

When you create a pve user, it will switch your default "realm" from pam to pve and now you can't login and can't find out why


The error message is very generic too, it felt like I had bad login and pass !



But all I needed was to switch the realm in the login screen back to Linux PAM