Thanks everyone for the troubleshooting so far. I agree that the cockpit auth file is the
same as 4.4.5. The timestamps are before the upgrade too. I get the same errors in the
secure log. I found an error messages, looking at it now.
secure log
May 18 21:50:57 xxxxxxxx unix_chkpwd[529704]: check pass; user unknown
May 18 21:50:57 xxxxxxxx unix_chkpwd[529705]: check pass; user unknown
May 18 21:50:57 xxxxxxxx unix_chkpwd[529705]: password check failed for user (root)
messages
May 18 22:00:23 xxxxxxxx cockpit-ws[532424]: cockpit-session: open(/var/log/btmp) failed:
Permission denied