[SOLVED] No GUI access but SSH access works

[azrod]

Hello everyone,

I have a problem, I can't access my web interface on Proxmox, but two weeks ago it worked. However, SSH access is functional and I can also PING the IP of my server.
No changes have been made and I reboot 2 times but is not working

In attach files, you see all informations :
- In SSH session :
> IP addresses, route, interfaces, /etc/hosts, hostname, port, services (wokring), curl (working)

- On my laptop (IP : 192.168.3.2) :
> PING (working), curl (not working)


I have check differents disscusion on this forms but nothing work for me. What is the problem ?
Thanks for help

 

[ferengie]

Hi, I have the same issue since 2 days.

my Proxmox-Version is:
proxmox-ve: 8.2.0 (running kernel: 6.8.4-2-pve)


Regards
Ferengie

 

[ferengie]

i think, that some service for authentication is not working, i have tried this:
generating a new cert
pvecm updatecerts --force

restartign "webservice"
service pveproxy restart

i only got the information in the webbrowser thatr the cert has ben changes, login still not working

edit:
i tried somethin 'crazy': using a definitly wrong password -> then there sould be something like "wrong password"
Idea was to check if the webGUI is talking with the security database on the server

and:
same error "Login failed. Please try again"



Regards
Ferengie

 

[azrod]

i think, that some service for authentication is not working, i have tried this:
generating a new cert
pvecm updatecerts --force

restartign "webservice"
service pveproxy restart

i only got the information in the webbrowser thatr the cert has ben changes, login still not working

Regards
Ferengie

I tried the same actions as you, but it doesn't work for me either

Regards

 

[bbgeek17]

I have a problem, I can't access my web interface on Proxmox,

What does this mean? The web page does not open and you get an error? If yes, which one? The login screen opens and you cant login?

i think, that some service for authentication is not working

@azrod , @ferengie - what is the output of the following commands when run directly from the PVE node shell?
curl -k https://localhost:8006
curl -k -d 'username=root@pam' --data-urlencode 'password=xxxxxx' https://localhost:8006/api2/json/access/ticket

Make sure to replace the xxxxx with actual password.

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[azrod]

What does this mean? The web page does not open and you get an error? If yes, which one? The login screen opens and you cant login?

@azrod , @ferengie - what is the output of the following commands when run directly from the PVE node shell?
curl -k https://localhost:8006
curl -k -d 'username=root@pam' --data-urlencode 'password=xxxxxx' https://localhost:8006/api2/json/access/ticket

Make sure to replace the xxxxx with actual password.

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

The webpage won't open or load.
I don't get any errors, it acts like the webpage doesn't exist.
Like this after 2 minutes :


In attach file you can see the two commands requested.

Thanks

 

[bbgeek17]

PVE appears to be functioning fine.

I'd start looking at firewall you may have installed/configured on your client and/or router.
Any other software you installed and forgot about, which may have activated on reboot. VPN, tailscale, etc.
Any extensions you may have in your client browser.
A firewall you may have enabled on PVE.

Go back to basic troubleshooting, get a tcpdump if nothing else provides a clue.

We've seen some home "smart" router blocking non-standard ports for local devices. Direct connect your client to PVE to check if eliminating the router allows you to connect.

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[azrod]

PVE appears to be functioning fine.

I'd start looking at firewall you may have installed/configured on your client and/or router.
Any other software you installed and forgot about, which may have activated on reboot. VPN, tailscale, etc.
Any extensions you may have in your client browser.
A firewall you may have enabled on PVE.

Go back to basic troubleshooting, get a tcpdump if nothing else provides a clue.

We've seen some home "smart" router blocking non-standard ports for local devices. Direct connect your client to PVE to check if eliminating the router allows you to connect.

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

I was able to solve my problem.
Indeed, a few weeks ago I installed ufw to manage the rules for Wireguard. I forgot to open port 8006, quite simply..

Thanks

 

[ferengie]

@azrod congrats you could solfe the issue.
It looks like we have different issues.

my issue is, that I get a loginscreen and when i try to login the webGUI - see screenshot
--------------------------------------------
root@pve2024:~# curl -k https://localhost:8006
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<title>pve2024 - Proxmox Virtual Environment</title>
<link rel="icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="apple-touch-icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/theme-crisp/resources/theme-crisp-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/crisp/resources/charts-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/fa/css/font-awesome.css" />
<link rel="stylesheet" type="text/css" href="/pve2/font-logos/css/font-logos.css" />
<link rel="stylesheet" type="text/css" href="/pve2/css/ext6-pve.css?ver=8.2.2" />
<link rel="stylesheet" type="text/css" href="/pwt/css/ext6-pmx.css?ver=v4.2.1-t1713893106" />
<link rel="stylesheet" type="text/css" media="(prefers-color-scheme: dark)" href="/pwt/themes/theme-proxmox-dark.css?ver=v4.2.1-t1713893106" />

<script type='text/javascript'>function gettext(buf) { return buf; }</script>

<script type="text/javascript" src="/pve2/ext6/ext-all.js?ver=7.0.0"></script>
<script type="text/javascript" src="/pve2/ext6/charts.js?ver=7.0.0"></script>

<script type="text/javascript" src="/pve2/js/u2f-api.js"></script>
<script type="text/javascript" src="/qrcode.min.js"></script>
<script type="text/javascript">
Proxmox = {
Setup: { auth_cookie_name: 'PVEAuthCookie' },
defaultLang: 'en',
NodeName: 'pve2024',
UserName: '',
CSRFPreventionToken: 'null'
};
</script>
<script type="text/javascript" src="/proxmoxlib.js?ver=v4.2.1-t1713893106"></script>
<script type="text/javascript" src="/pve2/js/pvemanagerlib.js?ver=8.2.2"></script>
<script type="text/javascript" src="/pve2/ext6/locale/locale-en.js?ver=7.0.0"></script>

<script type="text/javascript">
if (typeof(PVE) === 'undefined') PVE = {};
Ext.History.fieldid = 'x-history-field';
Ext.onReady(function() { Ext.create('PVE.StdWorkspace');});
</script>

</head>
<body>
<!-- Fields required for history management -->
<form id="history-form" class="x-hidden">
<input type="hidden" id="x-history-field"/>
</form>
</body>
</html>
root@pve2024:~#

--------------------------------------------
root@pve2024:~# curl -k -d 'username=root@pam' --data-urlencode 'password=********' https://localhost:8006/api2/json/access/ticket

there is no output


best regards

Ferengie

 

[bacteam]

plus accès à promox avec internet
un laide svp

 

[bbgeek17]

It looks like we have different issues.

did you enable 2fa or some other password enhancing feature and forgot about it?
Is there anything in "journalctl -f" when you are trying to login?
What about tail -f /var/log/pveproxy/access.log

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[ferengie]

Hi bbgeek17,

ad 2fa)
no, definitly not

ad "journalctl -f")
root@pve2024:~# journalctl -f
Oct 05 18:17:01 pve2024 CRON[972633]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 05 18:17:01 pve2024 CRON[972634]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
Oct 05 18:17:01 pve2024 CRON[972633]: pam_unix(cron:session): session closed for user root
Oct 05 18:29:13 pve2024 pveproxy[810102]: proxy detected vanished client connection
Oct 05 18:38:56 pve2024 chronyd[2208]: Source 144.76.197.108 replaced with 162.159.200.1 (2.debian.pool.ntp.org)
Oct 05 19:09:24 pve2024 chronyd[2208]: Source 91.206.8.36 replaced with 162.159.200.123 (2.debian.pool.ntp.org)
Oct 05 19:17:01 pve2024 CRON[981160]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 05 19:17:01 pve2024 CRON[981161]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
Oct 05 19:17:01 pve2024 CRON[981160]: pam_unix(cron:session): session closed for user root
Oct 05 19:40:37 pve2024 chronyd[2208]: Source 83.137.41.14 replaced with 78.41.116.149 (2.debian.pool.ntp.org)

ad "tail -f /var/log/pveproxy/access.log"
root@pve2024:~# tail -f /var/log/pveproxy/access.log
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/button/default-small-arrow.png HTTP/1.1" 200 17328
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/util/splitter/mini-bottom.png HTTP/1.1" 200 15274
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/tree/arrows.png HTTP/1.1" 200 3078
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/grid/sort_desc.png HTTP/1.1" 200 18260
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/images/proxmox_logo.png HTTP/1.1" 200 2809
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/fa/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1" 200 77160
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /api2/json/access/domains HTTP/1.1" 200 159
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/images/logo-128.png HTTP/1.1" 200 4977
::ffff:172.16.123.4 - - [05/10/2024:18:28:43 +0200] "GET /pve2/ext6/theme-crisp/resources/images/loadmask/loading.gif HTTP/1.1" 200 1849
::ffff:172.16.123.4 - - [05/10/2024:18:29:05 +0200] "POST /api2/extjs/access/ticket HTTP/1.1" 500 -


just to understand:
the PV system has ip 172.16.123.40 but in access.log it says 172.16.123.4 - might the issue be there?

best regards

Ferengie

 

[azrod]

@azrod congrats you could solfe the issue.
It looks like we have different issues.

my issue is, that I get a loginscreen and when i try to login the webGUI - see screenshot
--------------------------------------------
root@pve2024:~# curl -k https://localhost:8006
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<title>pve2024 - Proxmox Virtual Environment</title>
<link rel="icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="apple-touch-icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/theme-crisp/resources/theme-crisp-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/crisp/resources/charts-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/fa/css/font-awesome.css" />
<link rel="stylesheet" type="text/css" href="/pve2/font-logos/css/font-logos.css" />
<link rel="stylesheet" type="text/css" href="/pve2/css/ext6-pve.css?ver=8.2.2" />
<link rel="stylesheet" type="text/css" href="/pwt/css/ext6-pmx.css?ver=v4.2.1-t1713893106" />
<link rel="stylesheet" type="text/css" media="(prefers-color-scheme: dark)" href="/pwt/themes/theme-proxmox-dark.css?ver=v4.2.1-t1713893106" />

<script type='text/javascript'>function gettext(buf) { return buf; }</script>

<script type="text/javascript" src="/pve2/ext6/ext-all.js?ver=7.0.0"></script>
<script type="text/javascript" src="/pve2/ext6/charts.js?ver=7.0.0"></script>

<script type="text/javascript" src="/pve2/js/u2f-api.js"></script>
<script type="text/javascript" src="/qrcode.min.js"></script>
<script type="text/javascript">
Proxmox = {
Setup: { auth_cookie_name: 'PVEAuthCookie' },
defaultLang: 'en',
NodeName: 'pve2024',
UserName: '',
CSRFPreventionToken: 'null'
};
</script>
<script type="text/javascript" src="/proxmoxlib.js?ver=v4.2.1-t1713893106"></script>
<script type="text/javascript" src="/pve2/js/pvemanagerlib.js?ver=8.2.2"></script>
<script type="text/javascript" src="/pve2/ext6/locale/locale-en.js?ver=7.0.0"></script>

<script type="text/javascript">
if (typeof(PVE) === 'undefined') PVE = {};
Ext.History.fieldid = 'x-history-field';
Ext.onReady(function() { Ext.create('PVE.StdWorkspace');});
</script>

</head>
<body>
<!-- Fields required for history management -->
<form id="history-form" class="x-hidden">
<input type="hidden" id="x-history-field"/>
</form>
</body>
</html>
root@pve2024:~#

--------------------------------------------
root@pve2024:~# curl -k -d 'username=root@pam' --data-urlencode 'password=********' https://localhost:8006/api2/json/access/ticket

there is no output


best regards

Ferengie

Which authentication server are you using ?
Have you tried with the others ?
SSH access works ?

In SSH session try this command : "pveum realm list"

Then create a Proxmox user with the correct authentication server :
> pveum user add <username>@<realm>
> pveum passwd <username>@<realm>

Otherwise create a user under Debian and try again :
> sudo useradd -M -s /usr/sbin/nologin <username>
> sudo passwd <username>

 

[ferengie]

Hi azrod,

root@pve2024:~# pveum realm list
┌───────┬──────┬───────────────────────────────────┬─────┐
│ realm │ type │ comment │ tfa │
╞═══════╪══════╪═══════════════════════════════════╪═════╡
│ pam │ pam │ Linux PAM standard authentication │ │
├───────┼──────┼───────────────────────────────────┼─────┤
│ pve │ pve │ Proxmox VE authentication server │ │
└───────┴──────┴───────────────────────────────────┴─────┘


my machine is called "pve2024", as I understand I use "pve" to authenticate

created a user like:
root@pve2024:~# pveum user add admin@pve
root@pve2024:~# pveum passwd admin@pve
which worked

but login still does not work :-(

 

[bbgeek17]

the PV system has ip 172.16.123.40 but in access.log it says 172.16.123.4 - might the issue be there?

no, .4 is your client IP. The log indicates which client sent the request.

::ffff:172.16.123.4 - - [05/10/2024:18:29:05 +0200] "POST /api2/extjs/access/ticket HTTP/1.1" 500 -

"500" is Internal server error. If it was wrong password, it would be 401. For successful authentication it would be 200.

What are the outputs of (in code </> tags) of:
systemctl |grep pve
pveversion
pveversion -v

Install debsums: apt install debsums
What is the output of: debsums -s

Have you rebooted and examined the "journalctl -b0" line by line for any errors?

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[Kan]

Try login in a new private tab of your browser. Sometimes cookies are responsible of weird behaviors.

 

[ferengie]

Hi,
fom my issue i opend a new thread:
https://forum.proxmox.com/threads/no-gui-access-but-ssh-access-works-another-issue.155666/

Best Regards