[SOLVED] login error after PBS vm crash

[Stefano Giunchi]

After a power issue that caused the PBS vm to crash, I can't login anymore via web.
PVE connections don't work, too. I can login in ssh.

In /var/log/syslog I have these errors, repeated every 10 seconds:

2024-11-21T10:24:46.980889+00:00 PBS1 proxmox-backup-api[146]: authentication failure; rhost=[::ffff:192.168.1.11]:49716 user=backup@pbs msg=Unable to acquire lock "/etc/proxmox-backup/tfa.json.lock" - Resource temporarily unavailable (os error 11)
2024-11-21T10:24:49.982360+00:00 PBS1 proxmox-backup-api[146]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:192.168.1.11]:49716] permission check failed.

This is my /etc/proxmox-backup:

root@PBS1:/etc/proxmox-backup# ls -lah
total 52K
drwx------  3 backup backup 4.0K Nov 21 10:12 .
drwxr-xr-x 74 root   root   4.0K Nov 21 09:37 ..
-rw-rw----  1 backup backup    0 Nov 21 08:45 .datastore.lck
-rw-r-----  1 root   backup   99 Jun 19  2023 acl.cfg
-rw-------  1 root   root   3.2K Apr 15  2023 authkey.key
-rw-r-----  1 root   backup  800 Apr 15  2023 authkey.pub
-rw-r-----  1 root   backup 1.7K Apr 15  2023 csrf.key
-rw-r-----  1 root   backup   91 Jul 16 11:00 datastore.cfg
-rw-r-----  1 root   backup 3.2K Apr 15  2023 proxy.key
-rw-r-----  1 root   backup 2.2K Apr 15  2023 proxy.pem
-rw-r-----  1 root   backup   94 Apr 15  2023 prune.cfg
-rw-------  1 root   root    221 Jul 17 00:00 shadow.json
-rw-rw----  1 backup backup    0 Nov 21 10:12 tfa.json.lock
-rw-r-----  1 root   backup  115 Jun 19  2023 user.cfg

I tried to delete tfa.json.lock and reboot, it gets recreated.

 

[Moayad]

Hi,

2024-11-21T10:24:46.980889+00:00 PBS1 proxmox-backup-api[146]: authentication failure; rhost=[::ffff:192.168.1.11]:49716 user=backup@pbs msg=Unable to acquire lock "/etc/proxmox-backup/tfa.json.lock" - Resource temporarily unavailable (os error 11)
2024-11-21T10:24:49.982360+00:00 PBS1 proxmox-backup-api[146]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:192.168.1.11]:49716] permission check failed.

Have you tried to run cURL command to get a ticket as the example [0]? Don't forgot to change the port as well (8007).


[0] https://pve.proxmox.com/wiki/Proxmox_VE_API#Example:_Get_a_New_Ticket_and_the_CSRF_Prevention_Token

 

[Stefano Giunchi]

Thank you, I tried curl.

I get

root@PBS1:~# curl -k -d 'username=root@pam' --data-urlencode 'password=HIDDEN' https://127.0.0.1:8007/api2/json/access/ticket
permission check failed.

syslog:

2024-11-21T14:04:56.934560+00:00 PBS1 proxmox-backup-api[6205]: authentication failure; rhost=[::ffff:127.0.0.1]:39472 user=root@pam msg=Unable to acquire lock "/etc/proxmox-backup/tfa.json.lock" - Resource temporarily unavailable (os error 11)
2024-11-21T14:04:59.936558+00:00 PBS1 proxmox-backup-api[6205]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:127.0.0.1]:39472] permission check failed.

Please note that it doesn't work for both the Realms, root@PAM and backup@PBS.

 

[Stefano Giunchi]

After I realized (remembered) that PBS is on a container, and not a VM, I tried to reboot the host, and it resolved the problem.