Unabile to login to PVE GUI

[michal12]

Hello,
I recently upgraded my PVE installation to version 9. Since the upgrade, I’ve been unable to log in to the web GUI (receiving a 401 error).
Interestingly, I can still log in to the root account via SSH using the same credentials. I also tried changing the root password using:pveum passwd root@pam
However, this did not resolve the issue.
Could you advise on how I can recover access to the GUI?
Thank you.

Aug 11 13:43:31 zeus perl[1211]: rp_id is not an effective_domain of rp_origin
Aug 11 13:43:31 zeus pvedaemon[1211]: authentication failure; rhost=::ffff:10.203.32.188 user=root@pam msg=failed to begin webauthn context instantiation: The configuration was invalid

 

[fabian]

could you provide your webauthn settings (feel free to censor them, but if you do, do so in a consistent manner!)

 

[fabian]

also please provide "pveversion -v", thanks!

 

[michal12]

could you provide your webauthn settings (feel free to censor them, but if you do, do so in a consistent manner!)

Thank you - I forgot to update the id and rp values in the WebAuthn configuration file at /etc/pve/datacenter.cfg
What confuses me is that previously, everything worked fine when accessing the GUI with both the IP address and the domain name — even with an incorrect configuration. Is it possible to configure WebAuthn so that logging into the GUI works with both the domain and the IP address?

 

[fabian]

the upgrade to Trixie brings a new version of the webauthn library we use, and it got stricter in a lot of places..

 

[agreenbhm]

the upgrade to Trixie brings a new version of the webauthn library we use, and it got stricter in a lot of places..

I found that despite having my WebAuthn MFA disabled it still prevented me from authenticating via the PVE Android app and a third-party app I use. Only after deleting the WebAuthn option did it allow me to login with the apps.