No GUI access

[gazzo]

Hello,
Not sure what happened but out of nowhere my root password has started to fail. I'm unable to log into the gui side of pve but I can ssh into it using the same password. I've seen several people with the same issue but different fixes. Unfortunately all those fixes I've tried don't work.

 

[merlin-vrn]

Check the realm in the login form, it probably should be set to `Linux PAM`.

 

[gazzo]

I tried both realms, unsuccessful.

 

[bbgeek17]

Do you have space issues on your system?
df -h

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[gazzo]

I don't think so.

 

[bbgeek17]

Did you enable directory authentication? 2FA/Oath authentication? Made any other changes? Is there anything in the browser console? Is anything logged here: tail -f /var/log/pveproxy/access.log , after auth failure.

What happens when you run from SSH shell:
curl -k -d 'username=root@pam' --data-urlencode 'password=xxxxxxxxx' https://[IP]:8006/api2/json/access/ticket

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[gazzo]

I did not enable directory or 2 factor authentication. Last change I made, switched the email associated with root. I can access the login form in the gui but login fails when I enter root password. I do use the same password for ssh.

 

[bbgeek17]

You have a typo in the first command: missing "y" in pveproxy
You also appear to have typed the second command wrong... A "-" instead of "="

If you have special characters, they may interfere in the curl command without appropriate quoting/escaping. You may want to set your password to something simple temporary.

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[gazzo]

Oops, sorry about that.

 

[bbgeek17]

If you havent yet rebooted, it may be a good idea. Or you can try to restart services:
systemctl try-reload-or-restart pvedaemon pveproxy pvestatd pvescheduler
Additionally, you may want to trace system log during curl request: journalctl -f

Good luck

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[gazzo]

I did journalctl -f and tried logging in. Looks like the root account was disabled. No idea how that happened.



I edited the user.cfg in /etc/pve and changed it to 1:0.


I'm back in now. Thanks for all your help! Much appreciated.

 

[bbgeek17]

If you have fail2ban or something similar enabled, perhaps that caused it (after multiple failed attempts)

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox