Log in to the Cockpit Web Console

Cockpit lets you log in directly to any Oracle Linux system that permits connections to the application using TCP port 9090.

Note:

If the 9090 port isn't accessible on the system, you can still use Cockpit to administer the system by adding it as a secondary host server. For details on how add a secondary server, see Management of Multiple Hosts.

What Do You Need?

The IP address or hostname of the Oracle Linux server where Cockpit is installed.
A valid Oracle Linux user account on the server where Cockpit is installed.

Note:
Cockpit uses PAM for authentication and the configuration is available in /etc/pam.d/cockpit. Authentication with PAM you to sign in with a username and password of any system account that has administrator privileges.
(Optional) Signed Certificate by Certificate Authority on Oracle Linux host.

Note:
To avoid granting a security exception each time you access the Cockpit web , install a certificate signed by a certificate authority (CA) in the /etc/cockpit/ws-certs.d directory. The last file (in alphabetical order) with a .cert extension is used. For more details, see Managing Certificates and Public Key Infrastructure in the Oracle Linux: Managing Certificates and Public Key Infrastructure.

Steps

Perform the following steps to sign in to the Cockpit web console.

In a web browser, access the Cockpit web console using the hostname or IP address of the system at port 9090 using HTTPS. For example:
```
https://myserver.example.com:9090
```
If you're signed in on the local host, you can use:
```
https://localhost:9090
```
If you aren't using a signed security certificate, a warning message appears indicating To continue, you can choose to bypass this error by clicking the browser option available (such as Advanced or More details) for adding a security exception for this site.

The Cockpit Login page appears.
In the Cockpit Login page, enter the system username and password.
Important:
On some Linux installations, you can't log in to Cockpit using a root account. For example, a root account can't be used to log in to Cockpit on new Oracle Linux 9.2 and later installations. In cases where the system was upgraded to Oracle Linux 9.2 or later, you can continue to log in to Cockpit with a root user account. On new Oracle Linux 9.2 or later installations, you can control which accounts can or can't be used for log in by editing the etc/cockpit/disallowed-users file.
```
cat /etc/cockpit/disallowed-users 
 List of users which are not allowed to login to Cockpit
root
```
Note:

As an alternative, you can remotely connect to another Linux host system on the network by clicking: (1) Other Options, (2) Connect to, and then entering the URL of the remote host.
Click Log in.

After successful authentication, the Cockpit web page appears.

Important:
The Cockpit web console takes on the privileges and security context of the signed in user. Upon first time sign in, Limited access mode is enabled by default. To elevate privileges to Administrative access mode, click the toggle switch to Turn on administrative access. Upon successful authentication of the user password, administrative privileges are granted.