[SOLVED] PMG webconsole denying login

[KatyComputer]

I am able to login to PMG using ssh, logging in via webconsole fails. The "Daily Spam Report" url for individual mailboxes is working.

Any ideas? I have tried my normal login as well as the root login I use for ssh.

 

[KatyComputer]

/etc/pmg/user.conf appears to be in good shape, where else should I look?

 

[Stoiko Ivanov]

* How does the login fail? (a screenshot could be helpful)
* Do you login using 'root@pam' or some other user (please provide a redacted version of your 'user.conf'
* Check the logs (try running `journalctl -f` and `tail -f /var/log/pmgproxy/pmgproxy.log` while logging in)
* Try to use a different browser without any plugins installed

I hope this helps!

 

[KatyComputer]

It fails like: fail.png
I setup a couple non-pam users, they both fail, as does root@pam, redacted user.conf attached.
Hopefully, you'll see something in the attached log.
Chrome, no plugins saved the day.

Thank you.

 

[Stoiko Ivanov]

Do I understand correctly that it does work with Chrome without any plugins installed?
If yes - with which browser(s) does it fail? (check the compatibility list in the docs: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#system_requirements)
you can also check what your not working browser is sending in the developer console of you browser

The pmgproxy.log that you posted does not show any POST to '/api2/json/access/ticket', which is the url where login happens

 

[KatyComputer]

Stoiko, I suspect this is occurring because my Let's Encrypt certificates expired in the last week. I hope to have time to figure out how to renew these in the next day or so.
PS: Built-in Let's Encrypt certificate management would be a nice feature

 

[Stoiko Ivanov]

Hmm sounds like a possible explanation.

Built-in Let's Encrypt certificate management would be a nice feature

We have it on the roadmap - but no timeframe yet when we will get around to implement this.
(Of course external patches are always welcome - should somebody in the community want to take a look at this)

 

[tom]

PS: Built-in Let's Encrypt certificate management would be a nice feature

See also https://forum.proxmox.com/threads/how-to-lets-encrypt-and-pmg.41493/

 

[KatyComputer]

I enabled Let's Encrypt using this forum post, it turn out I outsmarted myself, I closed ports 80 & 443 via the PVE firewall.

After opening 80, all is well.