Comware

I have three Officeconnect 1950 switches that are currently stacked.  I've run into an issue that after awhile, I am unable to login to the web interface on the managment switch.  I've had this problem several times over the years.  I can still login using telnet, so I know the admin username and password are correct.  I would like to be able to login to the web interface without having to set the switches up again.  That is what I have done in the past.  It will then work awhile before locking me out again.  Any help with this issue would be appreciated.

Hi @RSC_HP !

Sounds like a password control issue due to the instable NTP clock sync or lack of such sync. Could you post here the config 'current-configuration' to verify this assumption?

Hello @RSC_HP ,

Were you able to access the web interface on management switch in past?

Can you share below output and check if using the same IP?

<HPE> summary 

Also what is the current software version in device?

Thanks!

Is there anything I should leave out of the configuration post since it is going to be on a public forum?

Hi @RSC_HP !

You can send it to me as a PM and keep the configuration offline out of sight of wide audience. It will be great if you an send the full 'display diag', I will send you instructions on PM how to unlock the CLI and generate it, since you still have Telnet access it should work.

@RSC_HP 

Ok, I've analyzed the 'dis diag' you've sent me.

- The clock is set manually, no NTP is used, so the clock should be stable.
- Password control is not enabled, so it's not the cause of the login issue.
- User 'admin' doesn't have 'http' in its 'service-type' list, but there is 'https' there, so https:// should work. But if you need HTTP access as well (since 'ip http enable' is in the config along with 'ip https enable', I assume you need it) I advise you to make following change (using unlocked CLI):

system-view

local-user admin 
 service-type telnet http https terminal
return

save safely force

So besides the old firmware, I don't see any issues. Could you explain in more details what is the issue with Web login? Do you see any error message after login attempt? Maybe you don't see the Web GUI at all?

Anyhow I strongly suggest you to upgrade to the latest version R3507, there are a couple of bugs fixed regarding login - both SSH and Web, so chances are you are hitting one of them now while you are on the old release. 

I get to the web login page, I enter the username and password and it says "Failed to log in"  I know the password is correct because it will work using telnet.  That is as far as I get.  I've tried different browers thinking maybe it was a browser issue, but all the browsers give me the same message.

I was able to get in after using the commands you posted above..  It must have been something to do with http and https settings not being correct.

Okay, I was able to get in using the commands you listed above.  Once I got into the web management interface, I went in and removed http access.  Once I tried connecting using https, I started getting the "Failed to log in" message again.  I ran the command you listed to add http access back, and then I was able to login again.  It has something to do with the https access.  I will try and upgrade to the latest firmware soon and see if that fixes the issue.  Thanks!

I have been able to access the web management functions in the past.  After awhile though, it always blocks me again.  I still have access through telnet, but nothing else.

Hello @RSC_HP ,

Can you share the running software version in the device?

Thanks!

Is this what you need? 

version 7.1.070, Release 3208P03