PVE can't authenticate with PBS

[Alek5]

Hi everyone,
I just setup a PBS and I'm trying to add it on PVE.
I keep getting errors like these :

Sep 29 15:24:30 pbs proxmox-backup-api[707]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:192.168.1.2]:36320] permission check failed.
Sep 29 15:24:37 pbs proxmox-backup-api[707]: pam_unix(proxmox-backup-auth:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=  user=root
Sep 29 15:24:39 pbs proxmox-backup-api[707]: authentication failure; rhost=[::ffff:192.168.1.2]:36322 user=root@pam msg=AUTH_ERR (7)
Sep 29 15:24:40 pbs proxmox-backup-api[707]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:192.168.1.2]:36322] permission chec

I tried to create a test user and give it permissions but same errors.

PVE is v6.4.13 and PBS is v2.0.10.

Any idea on how to solve this?

 

[che]

Hi everyone,
I just setup a PBS and I'm trying to add it on PVE.
I keep getting errors like these :

Sep 29 15:24:30 pbs proxmox-backup-api[707]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:192.168.1.2]:36320] permission check failed.
Sep 29 15:24:37 pbs proxmox-backup-api[707]: pam_unix(proxmox-backup-auth:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=  user=root
Sep 29 15:24:39 pbs proxmox-backup-api[707]: authentication failure; rhost=[::ffff:192.168.1.2]:36322 user=root@pam msg=AUTH_ERR (7)
Sep 29 15:24:40 pbs proxmox-backup-api[707]: POST /api2/json/access/ticket: 401 Unauthorized: [client [::ffff:192.168.1.2]:36322] permission chec

I tried to create a test user and give it permissions but same errors.

PVE is v6.4.13 and PBS is v2.0.10.

Any idea on how to solve this?

Hi,
I assume you followed the procedure as described in the docs here https://pbs.proxmox.com/docs/pve-integration.html?
Do you have a self signed certificate? In that case you also need to set the fingerprint for the storage as described in the docs.
Do you maybe have TFA enabled for this user? In that case it will not work I'm afraid...
Is the password given under /etc/pve/priv/storage/your-pbs-storage-name.pw on the PVE host correct?

 

[polemarch]

thank you che - registered to say that your last sentence, from 3 years ago, was the only one helping after about 2 hours of pulling my hair.

The password that was generated by a password generator contained a paragraph sign (§) and while this worked for the pbs login (root@pam) it was saved as an invalid character in the pw file on the PVE host. I manually corrected there and it worked immediately.

If somebody from the team is reading this - I would love to see validation on passwords in these cases. Thank you.