F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

t_vanderkrogt's avatar
t_vanderkrogt
Icon for Altostratus rankAltostratus
Nov 16, 2016

Failing to login to GUI with admin account

I'm experiencing a really strange issue with my Virtual F5 LTM.   I'm running BIG-IP 11.6.1 Build 1.0.326 and since two weeks I'm not able to log into the GUI anymore. Neither with the admin acc...
application delivery
BIG-IP
gui
login attemps
LTM
tallylog
t_vanderkrogt's avatar
t_vanderkrogt
Icon for Altostratus rankAltostratus
Nov 17, 2016

Unfortunately no luck.

 

I've even updated to 12.1.1, still the same issue.

 

I can't stop thinking that the issue is somewhere with the tally file. With every login attempt, I see the following logging.

 

Any suggestions?

 

Nov 17 12:31:45 localhost info sshd(pam_audit)[21162]: 01070417:6: AUDIT - user tomk - RAW: sshd(pam_audit): user=tomk(tomk) partition=[All] level=Administrator tty=ssh host=10.128.1.1 attempts=1 start="Thu Nov 17 12:31:45 2016". Nov 17 12:43:52 localhost alert httpd[10113]: PAM Couldn't open /var/log/pam/tallylog : Permission denied Nov 17 12:43:52 localhost alert httpd[10113]: pam_tally2(httpd:auth): Error opening /var/log/pam/tallylog for update: Permission denied Nov 17 12:43:54 localhost err httpd[10113]: [error] [client 10.128.1.1] AUTHCACHE PAM: user 'admin' (fallback: false) - not authenticated: Authentication failure, referer: https://10.128.1.145/tmui/login.jsp?msgcode=1&; Nov 17 12:43:54 localhost info httpd(pam_audit)[10113]: User=admin tty=(unknown) host=10.128.1.1 failed to login after 1 attempts (start="Thu Nov 17 12:43:52 2016" end="Thu Nov 17 12:43:54 2016"). Nov 17 12:43:54 localhost info httpd(pam_audit)[10113]: 01070417:6: AUDIT - user admin - RAW: httpd(pam_audit): User=admin tty=(unknown) host=10.128.1.1 failed to login after 1 attempts (start="Thu Nov 17 12:43:52 2016" end="Thu Nov 17 12:43:54 2016").