[SOLVED] No GUI access but SSH access works

A

azrod

New Member
May 18, 2023
12
3
3
Hello everyone,

I have a problem, I can't access my web interface on Proxmox, but two weeks ago it worked. However, SSH access is functional and I can also PING the IP of my server.
No changes have been made and I reboot 2 times but is not working

In attach files, you see all informations :
- In SSH session :
> IP addresses, route, interfaces, /etc/hosts, hostname, port, services (wokring), curl (working)

- On my laptop (IP : 192.168.3.2) :
> PING (working), curl (not working)


I have check differents disscusion on this forms but nothing work for me. What is the problem ?
Thanks for help
 

Attachments

  • ip.png
    ip.png
    243.6 KB · Views: 10
  • proxy_daemon.png
    proxy_daemon.png
    394 KB · Views: 9
  • ping.png
    ping.png
    109.8 KB · Views: 7
  • curl.png
    curl.png
    136.6 KB · Views: 7
  • port.png
    port.png
    49.2 KB · Views: 10
  • hostname.png
    hostname.png
    28.8 KB · Views: 10
  • hosts.png
    hosts.png
    59.5 KB · Views: 8
  • interfaces.png
    interfaces.png
    151.6 KB · Views: 8
  • route.png
    route.png
    58.4 KB · Views: 9
Hi, I have the same issue since 2 days.

my Proxmox-Version is:
proxmox-ve: 8.2.0 (running kernel: 6.8.4-2-pve)


Regards
Ferengie
 
Last edited:
  • Like
Reactions: azrod
i think, that some service for authentication is not working, i have tried this:
generating a new cert
pvecm updatecerts --force

restartign "webservice"
service pveproxy restart

i only got the information in the webbrowser thatr the cert has ben changes, login still not working

edit:
i tried somethin 'crazy': using a definitly wrong password -> then there sould be something like "wrong password"
Idea was to check if the webGUI is talking with the security database on the server

and:
same error "Login failed. Please try again"



Regards
Ferengie
 
Last edited:
ferengie said:
i think, that some service for authentication is not working, i have tried this:
generating a new cert
pvecm updatecerts --force

restartign "webservice"
service pveproxy restart

i only got the information in the webbrowser thatr the cert has ben changes, login still not working

Regards
Ferengie
Click to expand...
I tried the same actions as you, but it doesn't work for me either

Regards
 
azrod said:
I have a problem, I can't access my web interface on Proxmox,
Click to expand...
What does this mean? The web page does not open and you get an error? If yes, which one? The login screen opens and you cant login?
ferengie said:
i think, that some service for authentication is not working
Click to expand...
@azrod , @ferengie - what is the output of the following commands when run directly from the PVE node shell?
curl -k https://localhost:8006
curl -k -d 'username=root@pam' --data-urlencode 'password=xxxxxx' https://localhost:8006/api2/json/access/ticket

Make sure to replace the xxxxx with actual password.

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
 
bbgeek17 said:
What does this mean? The web page does not open and you get an error? If yes, which one? The login screen opens and you cant login?

@azrod , @ferengie - what is the output of the following commands when run directly from the PVE node shell?
curl -k https://localhost:8006
curl -k -d 'username=root@pam' --data-urlencode 'password=xxxxxx' https://localhost:8006/api2/json/access/ticket

Make sure to replace the xxxxx with actual password.

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
Click to expand...

The webpage won't open or load.
I don't get any errors, it acts like the webpage doesn't exist.
Like this after 2 minutes :
1727987654702.png

In attach file you can see the two commands requested.

Thanks
 

Attachments

  • curl_localhost.png
    curl_localhost.png
    272.1 KB · Views: 5
  • curl_ticket.png
    curl_ticket.png
    229.7 KB · Views: 6
Last edited:
PVE appears to be functioning fine.

I'd start looking at firewall you may have installed/configured on your client and/or router.
Any other software you installed and forgot about, which may have activated on reboot. VPN, tailscale, etc.
Any extensions you may have in your client browser.
A firewall you may have enabled on PVE.

Go back to basic troubleshooting, get a tcpdump if nothing else provides a clue.

We've seen some home "smart" router blocking non-standard ports for local devices. Direct connect your client to PVE to check if eliminating the router allows you to connect.

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
 
bbgeek17 said:
PVE appears to be functioning fine.

I'd start looking at firewall you may have installed/configured on your client and/or router.
Any other software you installed and forgot about, which may have activated on reboot. VPN, tailscale, etc.
Any extensions you may have in your client browser.
A firewall you may have enabled on PVE.

Go back to basic troubleshooting, get a tcpdump if nothing else provides a clue.

We've seen some home "smart" router blocking non-standard ports for local devices. Direct connect your client to PVE to check if eliminating the router allows you to connect.

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
Click to expand...
I was able to solve my problem.
Indeed, a few weeks ago I installed ufw to manage the rules for Wireguard. I forgot to open port 8006, quite simply..

Thanks
 
@azrod congrats you could solfe the issue.
It looks like we have different issues.

my issue is, that I get a loginscreen and when i try to login the webGUI - see screenshot
--------------------------------------------
root@pve2024:~# curl -k https://localhost:8006
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<title>pve2024 - Proxmox Virtual Environment</title>
<link rel="icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="apple-touch-icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/theme-crisp/resources/theme-crisp-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/crisp/resources/charts-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/fa/css/font-awesome.css" />
<link rel="stylesheet" type="text/css" href="/pve2/font-logos/css/font-logos.css" />
<link rel="stylesheet" type="text/css" href="/pve2/css/ext6-pve.css?ver=8.2.2" />
<link rel="stylesheet" type="text/css" href="/pwt/css/ext6-pmx.css?ver=v4.2.1-t1713893106" />
<link rel="stylesheet" type="text/css" media="(prefers-color-scheme: dark)" href="/pwt/themes/theme-proxmox-dark.css?ver=v4.2.1-t1713893106" />

<script type='text/javascript'>function gettext(buf) { return buf; }</script>

<script type="text/javascript" src="/pve2/ext6/ext-all.js?ver=7.0.0"></script>
<script type="text/javascript" src="/pve2/ext6/charts.js?ver=7.0.0"></script>

<script type="text/javascript" src="/pve2/js/u2f-api.js"></script>
<script type="text/javascript" src="/qrcode.min.js"></script>
<script type="text/javascript">
Proxmox = {
Setup: { auth_cookie_name: 'PVEAuthCookie' },
defaultLang: 'en',
NodeName: 'pve2024',
UserName: '',
CSRFPreventionToken: 'null'
};
</script>
<script type="text/javascript" src="/proxmoxlib.js?ver=v4.2.1-t1713893106"></script>
<script type="text/javascript" src="/pve2/js/pvemanagerlib.js?ver=8.2.2"></script>
<script type="text/javascript" src="/pve2/ext6/locale/locale-en.js?ver=7.0.0"></script>

<script type="text/javascript">
if (typeof(PVE) === 'undefined') PVE = {};
Ext.History.fieldid = 'x-history-field';
Ext.onReady(function() { Ext.create('PVE.StdWorkspace');});
</script>

</head>
<body>
<!-- Fields required for history management -->
<form id="history-form" class="x-hidden">
<input type="hidden" id="x-history-field"/>
</form>
</body>
</html>
root@pve2024:~#

--------------------------------------------
root@pve2024:~# curl -k -d 'username=root@pam' --data-urlencode 'password=********' https://localhost:8006/api2/json/access/ticket

there is no output


best regards

Ferengie
 

Attachments

  • 2024_10_05_18_10_23_pve2024_Proxmox_Virtual_Environment_Brave.jpg
    2024_10_05_18_10_23_pve2024_Proxmox_Virtual_Environment_Brave.jpg
    19.2 KB · Views: 8
ferengie said:
It looks like we have different issues.
Click to expand...

did you enable 2fa or some other password enhancing feature and forgot about it?
Is there anything in "journalctl -f" when you are trying to login?
What about tail -f /var/log/pveproxy/access.log

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
 
  • Like
Reactions: ferengie
Hi bbgeek17,

ad 2fa)
no, definitly not

ad "journalctl -f")
root@pve2024:~# journalctl -f
Oct 05 18:17:01 pve2024 CRON[972633]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 05 18:17:01 pve2024 CRON[972634]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
Oct 05 18:17:01 pve2024 CRON[972633]: pam_unix(cron:session): session closed for user root
Oct 05 18:29:13 pve2024 pveproxy[810102]: proxy detected vanished client connection
Oct 05 18:38:56 pve2024 chronyd[2208]: Source 144.76.197.108 replaced with 162.159.200.1 (2.debian.pool.ntp.org)
Oct 05 19:09:24 pve2024 chronyd[2208]: Source 91.206.8.36 replaced with 162.159.200.123 (2.debian.pool.ntp.org)
Oct 05 19:17:01 pve2024 CRON[981160]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 05 19:17:01 pve2024 CRON[981161]: (root) CMD (cd / && run-parts --report /etc/cron.hourly)
Oct 05 19:17:01 pve2024 CRON[981160]: pam_unix(cron:session): session closed for user root
Oct 05 19:40:37 pve2024 chronyd[2208]: Source 83.137.41.14 replaced with 78.41.116.149 (2.debian.pool.ntp.org)

ad "tail -f /var/log/pveproxy/access.log"
root@pve2024:~# tail -f /var/log/pveproxy/access.log
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/button/default-small-arrow.png HTTP/1.1" 200 17328
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/util/splitter/mini-bottom.png HTTP/1.1" 200 15274
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/tree/arrows.png HTTP/1.1" 200 3078
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/ext6/theme-crisp/resources/images/grid/sort_desc.png HTTP/1.1" 200 18260
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/images/proxmox_logo.png HTTP/1.1" 200 2809
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/fa/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1" 200 77160
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /api2/json/access/domains HTTP/1.1" 200 159
::ffff:172.16.123.4 - - [05/10/2024:18:28:37 +0200] "GET /pve2/images/logo-128.png HTTP/1.1" 200 4977
::ffff:172.16.123.4 - - [05/10/2024:18:28:43 +0200] "GET /pve2/ext6/theme-crisp/resources/images/loadmask/loading.gif HTTP/1.1" 200 1849
::ffff:172.16.123.4 - - [05/10/2024:18:29:05 +0200] "POST /api2/extjs/access/ticket HTTP/1.1" 500 -


just to understand:
the PV system has ip 172.16.123.40 but in access.log it says 172.16.123.4 - might the issue be there?

best regards

Ferengie
 
ferengie said:
@azrod congrats you could solfe the issue.
It looks like we have different issues.

my issue is, that I get a loginscreen and when i try to login the webGUI - see screenshot
--------------------------------------------
root@pve2024:~# curl -k https://localhost:8006
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<title>pve2024 - Proxmox Virtual Environment</title>
<link rel="icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="apple-touch-icon" sizes="128x128" href="/pve2/images/logo-128.png" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/theme-crisp/resources/theme-crisp-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/ext6/crisp/resources/charts-all.css?ver=7.0.0" />
<link rel="stylesheet" type="text/css" href="/pve2/fa/css/font-awesome.css" />
<link rel="stylesheet" type="text/css" href="/pve2/font-logos/css/font-logos.css" />
<link rel="stylesheet" type="text/css" href="/pve2/css/ext6-pve.css?ver=8.2.2" />
<link rel="stylesheet" type="text/css" href="/pwt/css/ext6-pmx.css?ver=v4.2.1-t1713893106" />
<link rel="stylesheet" type="text/css" media="(prefers-color-scheme: dark)" href="/pwt/themes/theme-proxmox-dark.css?ver=v4.2.1-t1713893106" />

<script type='text/javascript'>function gettext(buf) { return buf; }</script>

<script type="text/javascript" src="/pve2/ext6/ext-all.js?ver=7.0.0"></script>
<script type="text/javascript" src="/pve2/ext6/charts.js?ver=7.0.0"></script>

<script type="text/javascript" src="/pve2/js/u2f-api.js"></script>
<script type="text/javascript" src="/qrcode.min.js"></script>
<script type="text/javascript">
Proxmox = {
Setup: { auth_cookie_name: 'PVEAuthCookie' },
defaultLang: 'en',
NodeName: 'pve2024',
UserName: '',
CSRFPreventionToken: 'null'
};
</script>
<script type="text/javascript" src="/proxmoxlib.js?ver=v4.2.1-t1713893106"></script>
<script type="text/javascript" src="/pve2/js/pvemanagerlib.js?ver=8.2.2"></script>
<script type="text/javascript" src="/pve2/ext6/locale/locale-en.js?ver=7.0.0"></script>

<script type="text/javascript">
if (typeof(PVE) === 'undefined') PVE = {};
Ext.History.fieldid = 'x-history-field';
Ext.onReady(function() { Ext.create('PVE.StdWorkspace');});
</script>

</head>
<body>
<!-- Fields required for history management -->
<form id="history-form" class="x-hidden">
<input type="hidden" id="x-history-field"/>
</form>
</body>
</html>
root@pve2024:~#

--------------------------------------------
root@pve2024:~# curl -k -d 'username=root@pam' --data-urlencode 'password=********' https://localhost:8006/api2/json/access/ticket

there is no output


best regards

Ferengie
Click to expand...

Which authentication server are you using ?
Have you tried with the others ?
SSH access works ?

In SSH session try this command : "pveum realm list"

Then create a Proxmox user with the correct authentication server :
> pveum user add <username>@<realm>
> pveum passwd <username>@<realm>

Otherwise create a user under Debian and try again :
> sudo useradd -M -s /usr/sbin/nologin <username>
> sudo passwd <username>
 
  • Like
Reactions: ferengie
Hi azrod,

root@pve2024:~# pveum realm list
┌───────┬──────┬───────────────────────────────────┬─────┐
│ realm │ type │ comment │ tfa │
╞═══════╪══════╪═══════════════════════════════════╪═════╡
│ pam │ pam │ Linux PAM standard authentication │ │
├───────┼──────┼───────────────────────────────────┼─────┤
│ pve │ pve │ Proxmox VE authentication server │ │
└───────┴──────┴───────────────────────────────────┴─────┘


my machine is called "pve2024", as I understand I use "pve" to authenticate

created a user like:
root@pve2024:~# pveum user add admin@pve
root@pve2024:~# pveum passwd admin@pve
which worked

but login still does not work :-(
 

Attachments

  • 2024_10_05_21_33_34_pve2024_Proxmox_Virtual_Environment_Brave.jpg
    2024_10_05_21_33_34_pve2024_Proxmox_Virtual_Environment_Brave.jpg
    25.1 KB · Views: 3
ferengie said:
the PV system has ip 172.16.123.40 but in access.log it says 172.16.123.4 - might the issue be there?
Click to expand...
no, .4 is your client IP. The log indicates which client sent the request.
ferengie said:
::ffff:172.16.123.4 - - [05/10/2024:18:29:05 +0200] "POST /api2/extjs/access/ticket HTTP/1.1" 500 -
Click to expand...
"500" is Internal server error. If it was wrong password, it would be 401. For successful authentication it would be 200.

What are the outputs of (in code </> tags) of:
systemctl |grep pve
pveversion
pveversion -v

Install debsums: apt install debsums
What is the output of: debsums -s

Have you rebooted and examined the "journalctl -b0" line by line for any errors?


Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox
 
Try login in a new private tab of your browser. Sometimes cookies are responsible of weird behaviors.
 
  • Like
Reactions: ferengie
You must log in or register to reply here.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Quick Navigation

Home Get Subscription Wiki Downloads Proxmox Customer Portal About

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!
Community platform by XenForo® © 2010-2024 XenForo Ltd.
Top Bottom
Back