Fresh installation 2.4.0p24.cre I can't login web console

Troubleshooting
1

**CMK version:**OMD - Open Monitoring Distribution Version 2.4.0p24.cre
**OS version:**Red Hat Enterprise Linux release 9.6

Error message: No error message after auth succeeded **
**
2026-03-30 15:52:35,205 [cmk_security.auth 31192] {“summary”: “authentication succeeded”, “details”: {“method”: “login_form”, “user”: “cmkadmin”, “remote_ip”: “*.*.*.* ”}}

the web interface remain to the username/password initial request.

below some check already made:

sestatus
SELinux status: disabled

firewall-cmd --zone=public --add-service=http --permanent
FirewallD is not running

netstat -tlpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1685/httpd
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1685/httpd

any idea? many thanks in advance

2

Not directly but you can check the Apache log of the system and inside the site for some suspicious entries.
Or the ~/var/log/web.log inside your created site.

3

into the web.log there are some password failed connection but nothing interesting.. nothing also in /web/httpd/logs/error_log

into /web/httpd/logs/access_log a part this entries after the GET

[2026-03-30T18:01:58.279 +0200] - ... 50699 … 80 304 - - 609 1049 - “-” “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0” - “http://host.domain/monitoring/check_mk/login.py?_origtarget=index.py” “GET /monitoring/check_mk/themes/modern-dark/images/favicon.ico HTTP/1.1” “host.domain”

[2026-03-30T18:02:49.617 +0200] - … 27979 … 80 408 - - 0 0 - “-” “-” “-” - “-” “-” “-”

[2026-03-30T18:05:08.898 +0200] - … 63688 … 80 408 - - 0 0 - “-” “-” “-” - “-” “-” “-”

thanks

4

hello folks,

I noticed that after the authentication (passed) the URL in the browser change from

“http://hostname.domain/monitoring/check_mk/login.py”

to

“http://hostname.domain/monitoring/check_mk/login.py?_origtarget=index.py”

but the page remain always in the usual request username/password.

double checked httpd process and seems normal

ps -ef | grep httpd
root 2052 1 0 00:20 ? 00:00:02 /usr/sbin/httpd -DFOREGROUND
apache 2409 2052 0 00:20 ? 00:00:00 /usr/sbin/httpd -DFOREGROUND
apache 2410 2052 0 00:20 ? 00:00:12 /usr/sbin/httpd -DFOREGROUND
apache 2411 2052 0 00:20 ? 00:00:10 /usr/sbin/httpd -DFOREGROUND
apache 2413 2052 0 00:20 ? 00:00:10 /usr/sbin/httpd -DFOREGROUND
apache 402226 2052 0 09:02 ? 00:00:06 /usr/sbin/httpd -DFOREGROUND
monitor+ 769966 1 0 17:39 ? 00:00:00 /usr/sbin/httpd -f /omd/sites/monitoring/etc/apache/apache.conf
monitor+ 769969 769966 0 17:39 ? 00:00:00 /usr/sbin/httpd -f /omd/sites/monitoring/etc/apache/apache.conf
monitor+ 769970 769966 1 17:39 ? 00:00:04 /usr/sbin/httpd -f /omd/sites/monitoring/etc/apache/apache.conf
root 773775 773719 0 17:44 pts/1 00:00:00 grep --color=auto httpd

any advice will be appreciate. thanks

cheers