<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div> Further debugging: it seems the point of failure after logging in to intelmq-manager is that the intelmq-api access URLs fail after opening the Configuration tab:</div><div><br data-mce-bogus="1"></div><div><span style="font-size: 13.3333px;">https://ourmachine/intelmq/v1/api/config?file=bots</span><br data-mce-bogus="1"></div><div><br></div><div> I haven't manipulated the ROOT setting inside /usr/share/intelmq_manager/html/js/intelmq-manager.js, so the above URLs are default ones (file=(bots|pipeline|positions|defaults ...).</div><div>And another note: the earlier(?) path /usr/share/intelmq-manager is now /usr/share/intelmq_manager. Don't know whether this has anything to do with this case ...</div><div><br data-mce-bogus="1"></div><div>Br, Mika</div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"Mika Silander" <mika.silander@csc.fi><br><b>To: </b>"intelmq-dev" <intelmq-dev@lists.cert.at><br><b>Sent: </b>Wednesday, 31 March, 2021 14:33:27<br><b>Subject: </b>Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt; color: #000000"><div>Hi,</div><br><div> I tried to remove the session store as suggested. The "Not logged in" status and login button remain, but the default bot configuration I expect to see (/etc/intelmq/pipeline.conf) doesn't show up when I select the Configuration tab so there's still something odd remaining in our setup. Thanks and further hints are welcome.</div><br><div>Br, Mika</div><br><hr id="zwchr"><div><b>From: </b>"Sebastian Wagner" <wagner@cert.at><br><b>To: </b>"Mika Silander" <mika.silander@csc.fi>, "intelmq-dev" <intelmq-dev@lists.cert.at><br><b>Sent: </b>Wednesday, 31 March, 2021 14:19:56<br><b>Subject: </b>Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS<br></div><br><div><p>Hi,<br>
</p>
<p>If you use HTTP Basic Authentication, do you need the additional
authentication of the API? If not, you can ignore it. If you
remove/rename the setting <code class="docutils literal
notranslate"><span class="pre">session_store</span></code> in
the API settings, the authentication is disabled.</p>
<p>See
<a class="moz-txt-link-freetext" href="https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configuring-intelmq-api" target="_blank">https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configuring-intelmq-api</a></p>
<p>Sebastian<br>
</p>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 3/31/21 1:11 PM, Mika Silander
wrote:<br>
</div>
<blockquote cite="mid:115298420.15235440.1617189111241.JavaMail.zimbra@csc.fi">
<pre class="moz-quote-pre">Hi,
Seems I have a configuration error somewhere in intelmq-manager's setup. I have configured basic authentication for this service, apache asks for the account and password and shows the start view of intelmq-manager. The start view says "Not logged in" and provides a login button below. If I press the button and use the same credentials, it still says "not logged in". Any hints?
intelmq-manager, intelmq and intelmq-api were all installed from package repos for Ubuntu 20.04 LTS.
Cheers, Mika
_______________________________________________
IntelMQ-dev mailing list
<a class="moz-txt-link-freetext" href="https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev" target="_blank">https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev</a>
<a class="moz-txt-link-freetext" href="https://intelmq.readthedocs.io/" target="_blank">https://intelmq.readthedocs.io/</a>
</pre>
</blockquote>
<pre class="moz-signature">--
// Sebastian Wagner <a class="moz-txt-link-rfc2396E" href="mailto:wagner@cert.at" target="_blank"><wagner@cert.at></a> - T: +43 1 5056416 7201
// CERT Austria - <a class="moz-txt-link-freetext" href="https://www.cert.at/" target="_blank">https://www.cert.at/</a>
// Eine Initiative der nic.at GmbH - <a class="moz-txt-link-freetext" href="https://www.nic.at/" target="_blank">https://www.nic.at/</a>
// Firmenbuchnummer 172568b, LG Salzburg</pre><br></div></div><br>_______________________________________________<br>IntelMQ-dev mailing list<br>https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev<br>https://intelmq.readthedocs.io/<br></div></div></body></html>