/etc/pam.d/cockpit under node 4.4.6 is the same as you posted.
Something else changed.

#%PAM-1.0
# this MUST be first in the "auth" stack as it sets PAM_USER
# user_unknown is definitive, so die instead of ignore to avoid subsequent modules mess up the error code
-auth      [success=done new_authtok_reqd=done user_unknown=die default=ignore]   pam_cockpit_cert.so
auth       required     pam_sepermit.so
auth       substack     password-auth
auth       include      postlogin
auth       optional     pam_ssh_add.so
account    required     pam_nologin.so
account    include      password-auth
password   include      password-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session    required     pam_selinux.so open env_params
session    optional     pam_keyinit.so force revoke
session    optional     pam_ssh_add.so
session    include      password-auth
session    include      postlogin


On Tue, May 18, 2021 at 11:50 AM Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
On Tue, May 18, 2021 at 4:50 PM Glenn Farmer <glenn.farmer@netfortris.com> wrote:
The current thread is about 4.4.6 - nice that you can login to your 4.4.5.

The subject of the thread says it all... ;-)
My point was to ask if you see differences in /etc/pam.d/cockpit in your 4.4.6, in respect with the version I pasted for my 4.4.5 or if they are the same.
I cannot compare as I have not yet 4.4.6 installed


I changed the admin password on the engine - still cannot access the Cockpit GUI on any of my hosts.

The cockpit gui for the host is accessed through users defined on the hosts, not on engine side. It is not related to the admin engine web admi gui...
I think you can configure a normal user on your hypervisor host and see if you can use it to connect to the cockpit gui or if you receive error.
Do you need any particular functionality to use the root user?

HIH,
Gianluca

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VSM4BLBD36MFNXR5OXS4QWWHHGQXXZIP/