Web Control Panel login with correct credentials suddenly not working

  • Suddenly, I cannot login to the Web Control Panel. (At the same time ssh is no problem.)

    Credentials are correct (I am using Lastpass to auto fill the form fields). To be sure I have double checked and tried it manually as well.

    The Login seems to work (no errors) but after a few seconds the Login screen is shown again. It is in a loop.

    FYI: When I intentionally use a wrong password I get the usual red error message


    What I've tried to fix it:

    1)

    omv-firstaid:

    3 Change control panel administrator password

    4 Reset failed login attampts


    2)

    apt-get update && apt-get upgrade


    3)

    sudo reboot


    No success ;(


    What I suspect caused it:

    The last time I was logged into the web panel I was using the "Update Manager".

    I think the "upgrade" did not work. Unfortunately I can't recall the details.

    After that the problem happened.


    When I do this via ssh I get the following:

    Code
    apt-get update && apt-get upgrade
    0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
  • In the shell run df -h and see if the rootfs is full or not.

    --
    Google is your friend and Bob's your uncle!


    OMV AMD64 5.x on ASRock Rack C2550D4I C0 Stepping - 16GB ECC - Silverstone DS380 + Silverstone DS380 DAS Box.

  • I still can't login to my web control panel.


    Here is a short video-capture of 2 login attempts with correct PW and a final one in contrast with an incorrect PW:

    https://dl.dropboxusercontent.…dyxsdj/omv_login_loop.mp4

    (I did refresh my browser Cache and tried it with different browsers)


    Samba shares work fine.


    Code
    omv-firstaid:

    Points 2 - 10 all work and confirm everything is valid

    Point 11 "Submit diagnostic report to administrator" is attached.


    Code
    apt-get update && apt-get upgrade

    worked with no errors


    Code
    omv-update
    0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
  • You may have a look into syslog, maybe there is a hint why logging in does not work. You may also check with omv-firstaid if the user is blocked because of too many failed logins. Use the tool to reset the ban counter.

  • User Blocked:

    I regularly used first-aid to "Reset failed login attempt counter".


    Logs:

    I found something in

    /var/log/nginx/openmediavault-webgui_error.log

    Code
    2020/11/19 15:46:57 [error] 1800#1800: *63 FastCGI sent in stderr: "PHP message: PHP Warning: session_start(): open(/var/lib/php/sessions/sess_d960ui2irim3oialm4hr26mje5, O_RDWR) failed: Permission denied (13) in /usr/share/php/openmediavault/session.inc on line 43" while reading response header from upstream, client: 127.0.0.1, server: openmediavault-webgui, request: "HEAD / HTTP/1.1", upstream: "fastcgi://unix:/var/run/php-fpm-openmediavault-webgui.sock:", host: "127.0.0.1"

    /var/log/nginx/openmediavault-webgui_access.log

    Code
    127.0.0.1 - - [19/Nov/2020:15:46:57 +0000] "HEAD / HTTP/1.1" 200 0 "-" "Monit/5.20.0"
  • Code
    root@rock64:~# systemctl stop php7.3-fpm
    Failed to stop php7.3-fpm.service: Unit php7.3-fpm.service not loaded.
    root@rock64:~# rm /var/lib/php/sessions/*
    rm: cannot remove '/var/lib/php/sessions/*': No such file or directory
    root@rock64:~# systemctl start php7.3-fpm
    Failed to start php7.3-fpm.service: Unit php7.3-fpm.service not found
  • Solved my issue with duffr's answer:

    chmod 777 /var/lib/php/sessions


    Thank's votdev for pointing me to the logs! That was quite helpful!


    FYI

    On a cloned SD Card I also solved it with hugn's answer (which basically does the same to the "sessions" directory):

    sudo rm -rf /var/lib/php/sessions

    sudo mkdir -m 777 /var/lib/php/sessions

    ls /var/lib/php -l

    sudo nginx -s reload

  • wolf8auer

    Added the Label resolved
  • wolf8auer

    Added the Label OMV 4.x

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!