Bug 2062259

Summary: Authentication fails to cockpit web console after upgrading to cockpit 264-1 from 259-1
Product: [Fedora] Fedora Reporter: Christopher Wawak <cwawak>
Component: cockpitAssignee: Martin Pitt <mpitt>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 35CC: dperpeet, mmarusak, mpitt, patrick, pvolpe, stefw
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-03-10 01:13:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Christopher Wawak 2022-03-09 12:58:23 UTC 
Description of problem:
Unable to login to cockpit web console after upgrading to cockpit 264-1 from 259-1.

Version-Release number of selected component (if applicable):
cockpit-ws-264-1.fc35.x86_64.rpm removed

How reproducible:
Not sure.

Steps to Reproduce:
1. Upgrade system using normal dnf upgrade procedures
2. Connect to https://$hostname:9090
3. Attempt to login with normal use and root

Actual results:
- Login failure
- The following error message is seen in the journal:
Mar 09 07:48:40 hostname.wawak.org cockpit-tls[2076]: cockpit-tls: gnutls_handshake failed: A TLS fatal alert has been received.
- The following audit message is thrown:
Mar 09 07:56:47 hostname.wawak.org audit[15104]: USER_AUTH pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cockpit_session_t:s0 msg='op=PAM:authentication grantors=? acct="cwawak" exe="/usr/libexec/cockpit-session" hostname=::ffff:192.168.98.138 addr=::ffff:192.168.98.138 terminal=? res=failed'

Expected results:
Login.

Additional info:
SELinux is enabled, but I see no AVCs.

Here is the upgrades from dnf.log:

2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit.x86_64 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit.x86_64 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-bridge.x86_64 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-bridge.x86_64 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-networkmanager.noarch 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-networkmanager.noarch 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-packagekit.noarch 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-packagekit.noarch 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-pcp.x86_64 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-pcp.x86_64 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-podman.noarch 38-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-podman.noarch 42-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-selinux.noarch 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-selinux.noarch 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-storaged.noarch 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-storaged.noarch 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-system.noarch 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-system.noarch 264-1.fc35 will be an upgrade
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-ws.x86_64 259-1.fc35 will be upgraded
2022-03-07T09:30:05-0500 DEBUG ---> Package cockpit-ws.x86_64 264-1.fc35 will be an upgrade
 cockpit                                                      x86_64                             264-1.fc35                                        updates                                                43 k cockpit-bridge                                               x86_64                             264-1.fc35                                        updates                                               488 k cockpit-networkmanager                                       noarch                             264-1.fc35                                        updates                                               527 k cockpit-packagekit                                           noarch                             264-1.fc35                                        updates                                               597 k cockpit-pcp                                                  x86_64                             264-1.fc35                                        updates                                                78 k cockpit-podman                                               noarch                             42-1.fc35                                         updates                                               486 k cockpit-selinux                                              noarch                             264-1.fc35                                        updates                                               223 k cockpit-storaged                                             noarch                             264-1.fc35                                        updates                                               598 k cockpit-system                                               noarch                             264-1.fc35                                        updates                                               2.3 M cockpit-ws                                                   x86_64                             264-1.fc35                                        updates                                               1.3 M2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-264-1.fc35.x86_64
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-bridge-264-1.fc35.x86_64
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-networkmanager-264-1.fc35.noarch
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-packagekit-264-1.fc35.noarch
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-pcp-264-1.fc35.x86_64
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-podman-42-1.fc35.noarch
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-selinux-264-1.fc35.noarch
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-storaged-264-1.fc35.noarch
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-system-264-1.fc35.noarch
2022-03-07T09:39:48-0500 DEBUG Upgraded: cockpit-ws-264-1.fc35.x86_64
Comment 1 Christopher Wawak 2022-03-10 01:13:09 UTC 
pam config got wiped out, not sure how!