CentOS Stream 10 – Common Problem 071 – Diagnosis and Fix

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Administrators cannot log into Cockpit on port 9090 despite valid credentials.

Environment & Reproduction

Common when the cockpit.socket is disabled or polkit authorization rules block users.

Root Cause Analysis

Cockpit socket inactive or PAM stack rejecting the login.

Quick Triage

Check `systemctl status cockpit.socket` and `journalctl -u cockpit`.

Step-by-Step Diagnosis

Inspect `/etc/cockpit/disallowed-users` and PAM logs.

Solution – Primary Fix

Enable with `systemctl enable –now cockpit.socket` and remove the user from disallowed list.

Solution – Alternative Approaches

Use SSH instead while Cockpit is being repaired.

Verification & Acceptance Criteria

Cockpit dashboard loads and authorized users log in successfully.

Rollback Plan

Restore disallowed-users to prior state if shared accounts must remain blocked.

Prevention & Hardening

Document Cockpit access policy and bind the service to a management VLAN.

Related Errors & Cross-Refs

Linked to firewalld zone misassignment and PAM lockout issues.

Related tutorial: View the step-by-step tutorial for centos-stream-10.

View all centos-stream-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Cockpit administration documentation.