Hi,
for unknown reason I cannot logon to WebUI using user "admin".
When I check the log /var/log/auth.log, there's an error message indicating the cause:
"User 'admin' has been banned after 4 failed login attempts."
I have tried to fix this issue by
1. Change password in CLI "omv-firstaid"
2. Run command "passwd admin" in console
None of the actions taken solved the issue.
When I try to change user in console I get this message:
root@vm104-nas:~# su admin
This account is currently not available.
root@vm104-nas:~# pam_tally2 -u admin
Login Failures Latest failure From
admin 12 01/09/16 16:37:27 ::ffff:192.168.1.48
For your reference this is the logfile /var/log/auth.log filtered on "admin":
root@vm104-nas:~# ack admin /var/log/auth.log
Jan 6 22:08:18 vm104-nas openmediavault-webgui[18595]: Authorized login from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 6 22:10:02 vm104-nas usermod[19481]: change user 'admin' password
Jan 6 22:36:28 vm104-nas openmediavault-webgui[2967]: Authorized login from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:27:27 vm104-nas omv-engined[3325]: pam_unix(openmediavault:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:192.168.1.48 user=admin
Jan 9 16:27:29 vm104-nas openmediavault-webgui[3322]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:27:36 vm104-nas omv-engined[3326]: pam_unix(openmediavault:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:192.168.1.48 user=admin
Jan 9 16:27:38 vm104-nas openmediavault-webgui[3322]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:27:49 vm104-nas omv-engined[3329]: pam_unix(openmediavault:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:192.168.1.48 user=admin
Jan 9 16:27:50 vm104-nas openmediavault-webgui[3322]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:28:00 vm104-nas omv-engined[3330]: User 'admin' has been banned after 4 failed login attempts.
Jan 9 16:28:02 vm104-nas openmediavault-webgui[3322]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:28:16 vm104-nas omv-engined[3332]: User 'admin' has been banned after 5 failed login attempts.
Jan 9 16:28:18 vm104-nas openmediavault-webgui[3331]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:29:34 vm104-nas omv-engined[3343]: User 'admin' has been banned after 6 failed login attempts.
Jan 9 16:29:37 vm104-nas openmediavault-webgui[3342]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:31:43 vm104-nas usermod[3737]: change user 'admin' password
Jan 9 16:31:49 vm104-nas omv-engined[3748]: User 'admin' has been banned after 7 failed login attempts.
Jan 9 16:31:51 vm104-nas openmediavault-webgui[3745]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:32:03 vm104-nas omv-engined[3751]: User 'admin' has been banned after 8 failed login attempts.
Jan 9 16:32:06 vm104-nas openmediavault-webgui[3745]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:34:14 vm104-nas omv-engined[3404]: User 'admin' has been banned after 9 failed login attempts.
Jan 9 16:34:16 vm104-nas openmediavault-webgui[3403]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:35:28 vm104-nas usermod[3493]: change user 'admin' password
Jan 9 16:35:39 vm104-nas omv-engined[3502]: User 'admin' has been banned after 10 failed login attempts.
Jan 9 16:35:41 vm104-nas openmediavault-webgui[3501]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:35:50 vm104-nas omv-engined[3505]: User 'admin' has been banned after 11 failed login attempts.
Jan 9 16:35:52 vm104-nas openmediavault-webgui[3501]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:37:27 vm104-nas omv-engined[3517]: User 'admin' has been banned after 12 failed login attempts.
Jan 9 16:37:27 vm104-nas omv-engined[3517]: pam_unix(openmediavault:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:192.168.1.48 user=admin
Jan 9 16:37:29 vm104-nas openmediavault-webgui[3514]: Unauthorized login attempt from ::ffff:192.168.1.48 [username=admin, user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.73 Safari/537.36 OPR/34.0.2036.25]
Jan 9 16:37:46 vm104-nas usermod[3535]: change user 'admin' password
Jan 9 16:40:47 vm104-nas usermod[3610]: change user 'admin' password
Jan 9 16:48:43 vm104-nas su[5597]: Successful su for admin by root
Jan 9 16:48:43 vm104-nas su[5597]: + /dev/pts/0 root:admin
Jan 9 16:48:43 vm104-nas su[5597]: pam_unix(su:session): session opened for user admin by root(uid=0)
Jan 9 16:48:43 vm104-nas su[5597]: pam_unix(su:session): session closed for user admin
Jan 9 16:51:44 vm104-nas passwd[5641]: pam_unix(passwd:chauthtok): password changed for admin
Display More
How can I fix this issue?
THX