Cannot Login to WebAccess but to ESXi console

[magelan089]

Hi *,

i can access the ESXi console with my root & pw, but not the WebAccess with "root" & pw. The pw is the same, there are no spell / keyboard language issues.

We have a single ESXi 6.5 (4887370), no vCenter. No Domain Account, just local.

Best regards

Max

[virtualDD]

so you can log in like over ssh using root&password but cannot access the host ui (https://hostname/ui) with the same credentials?

Or are you talking about the DCUI (yellow/black console window)?

It sounds like you're in lockdown mode. Try disabling it in the DCUI (HOW TO: Enable or Disable Lockdown Mode on VMware vSphere ESXi host | vStrong.info )

[magelan089]

- I can login /w ssh to the shell

- I can login to the DCUI

- I cannot login to https://hostname/ui/#/login

In the yellow/black console, the option "Configure lockdown Mode" is greyed out.

[vijayrana968]

You have to installed embedded client on ESXI.

If you have SSH access then install it using below command and retry via UI.

esxcli software vib install -v http://download3.vmware.com/software/vmw-tools/esxui/esxui-signed-5744014.vib

[vcolling]

I am having this problem on VSphere 7.1. Would this same VIB work or should I use a different one?

[imrankhatib]

If you have access to the esxi through the console login in and change password and than try via web works

[virtualDD]

I think there is a embedded client already shipped with the GA of ESXi 6.5

I'd try to reset your password. You can do it on the shell or in the DCUI and try to login in with the newly set password on the host client.

If you can login to ssh and dcui you have access to the host. If there is no vCenter server you can't have lockdown mode.

[magelan089]

Is there also the possibility, that the root account is locked out of the WebClient after too many retrys?

I did a reset of the password in the DCUI & tried to login:

- Login /w ssh to the shell - working

- Login to the DCUI - working

- Login to WebClient:

Still not working.

[Lionel]

Hi,

if you some sort of monitoring server that is probing that host. it could be that the root account is locked out. you can change the lockout time to 0 and try it or fix the monitoring system to use the proper password and wait the default lockout time and you should be able to logon. But it sounds like something or someone is hammering that host with root logon using the wrong credentials.

Lionel.

[magelan089]

Hi Lionel,

the root account was locked by Nagios monitoring - i just quit the checks & after 30min the root account was able to login to the WebClient.

Thank you for your help & best regards

Max

[sidharth1982]

I don't have nagios monitoring so whats blocking me from accessing the client?

I can login in shell/ssh but not in client with root username

[RAJ_RAJ]

Hi ,

Same issue . root account is not locked  and able to access through console not from web

Rebooting the host solved issue .

[sidharth1982]

Rebooting the host did not work for me.

Is this related to correct IP address of the machine? I had to set a static IP.

[RAJ_RAJ]

Hi ,

if you have static IP then its good but it is not related IP  .

You may have to disable the lockout or account lock  . And reset management networks , host services  or reboot is the options

[PraveenAvrur]

A reboot of the host solved the issue for me

[rjurdaneta]

Yes, reboot the host helps

[MakeITright]

That worked…. Thank you so much!!!

[MakeITright]

Procedure to Restart the Management Agents (instead of rebooting the machine)

1. From the direct console, select Troubleshooting Options and press Enter.
2. Select Restart Management Agents and press Enter.
3. Press F11 to confirm the restart.

[Manuel_Serrano]

What are you typing in the url?

[sarikrizvi]

Cause :- Root account is locked and some time monitoring system will not unlock automatically.

1. Try to login through SSH/WinScp/VI-Client/host UI on host after checked "lock-down mode" 

2. If step #1 fail; Login on  vCenter >>> Select Host >>> Security Profile >> Restart SSH service

3. Try to login through SSH/WinScp/VI-Client/host UI on host and root password would be working.

Note:- Starting with vSphere 6.x, account locking is supported for access through SSH and through the vSphere Web Services SDK. The Direct Console Interface (DCUI) and the ESXi Shell do not support account lockout.

A maximum failed attempts is allowed before the account is locked (login on host UI - https://hostname/ui >>>System>>>Advanced settings>>>Check "SecurityLockFailures" and "SecurityAccountUnlockTime")

[efloriot]

Hello

if you have access to console enable shell and use the following commang for it' works well pam_tally2 --user root --reset.

Thanks to Kimi Thang http://kimizhang.com/unlook-root-account-for-vmware-esxi-host/

Have a nice day.

Eric

[MCuzo]

You rule! Thanks, worked!!

[aspenrick]

THANK YOU! Worked perfectly and i was spending hours trying to resolve this!

[hart_rian]

Resolved.

I first usedESXXi 6.7  but could not log in.

I then used ESXi 6.7 update 2.  now everything works.   Dell power edge r720

[ipworks]

Hello,

i can confirm Lionel's idea.

Here it happened after upgrading to ESXi 6.7 and changing the password. The inventory software "hammered" on the server trying to check the inventory.

After removing the device in the inventory software and rescanning the server the WebAccess worked again.

[Tanquen123]

If vCenter appliance is down you can't access your ESXi hosts, even with the right account?

[dixoni]

I'm currently having this issue. I cannot login to the web interface, ssh but i can log into the host itself. I had to reboot the server to get in the last time, it worked then all the accounts failed again. Causing my backups to fail as well. My backups only uses one account, there's three accounts on the system and i cannot get any of them to logon to the host and the lockdown mode is grayed out. SMH

[nijlal]

Check whether SSH / UI enable or not

if not, enable it and restart agent 

 

Thanks,

Nijlal

[aldylisfianto]

Hi, this is just happened to me and do not know why the root cause,

Login to https://ip/ui/#/login is failed due to wrong credential,
Login via ssh to ip, failed too,
Login to DCUI (console with yellow-black colouring page) is OK,

Everything with the same username and password, and then I try change the password, but nothing change,

In the end I just try to restart the management agent via DCUI and then everything works fine, hope this help!