proxmox web frontend login failure vs auth.log

murat

Renowned Member
Dec 10, 2008
8
0
66
Hi,

I noticed that my system does not log the hostname when a login from the proxmox frontend fails (because of an authentication failure). Here is such a log line found in auth.log:

Dec 14 01:57:14 server01 apache2: (pam_unix) authentication failure; logname= uid=33 euid=33 tty= ruser= rhost= user=root

Apache access.log file doesn't contain an ip/host either:

127.0.0.1 - - [03/Jan/2009:03:38:20 +0100] "POST /nrd/LOGIN HTTP/1.1" 403 ...

I suppose this is not normal. Can you please do a faulty login and check your auth.log and access.log?

Murat
 
once it happens to us too, at first we try to restart the service but this did not fix the problem so... only solution to fix it, reboot it .
 
once it happens to us too, at first we try to restart the service but this did not fix the problem so... only solution to fix it, reboot it .

I've checked the log files and I have not seen a log line which contained the real host. The log files are from the past 3 weeks. In the past 3 weeks I already have rebooted the system a couple of times. So this doesn't help.

Any ideas?

Another question: How can i check which userid belongs to the numeric value of a user like in the logline "uid=33".

Regards,

Murat
 
Dietmar, thanks.

Ok, userid 33 belongs to www-data (as expected).

Any other suggestions to solve this problem?

Have you checked your log files? Do you also see empty values for param rhost?
 
It is the normal message you get when you log in with a wrong user/password on the web interface. Where is the problem?