Hi,

I tried to remove the session store as suggested. The "Not logged in" status and login button remain, but the default bot configuration I expect to see (/etc/intelmq/pipeline.conf) doesn't show up when I select the Configuration tab so there's still something odd remaining in our setup. Thanks and further hints are welcome.

Br, Mika

From: "Sebastian Wagner" wagner@cert.at To: "Mika Silander" mika.silander@csc.fi, "intelmq-dev" intelmq-dev@lists.cert.at Sent: Wednesday, 31 March, 2021 14:19:56 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi,

If you use HTTP Basic Authentication, do you need the additional authentication of the API? If not, you can ignore it. If you remove/rename the setting session_store in the API settings, the authentication is disabled.

See [ https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configur... | https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configur... ]

Sebastian

On 3/31/21 1:11 PM, Mika Silander wrote:

Hi,

Seems I have a configuration error somewhere in intelmq-manager's setup. I have configured basic authentication for this service, apache asks for the account and password and shows the start view of intelmq-manager. The start view says "Not logged in" and provides a login button below. If I press the button and use the same credentials, it still says "not logged in". Any hints?

intelmq-manager, intelmq and intelmq-api were all installed from package repos for Ubuntu 20.04 LTS.

Cheers, Mika _______________________________________________ IntelMQ-dev mailing list [ https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev | https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev ] [ https://intelmq.readthedocs.io/ | https://intelmq.readthedocs.io/ ]

Ok. Problem solved. An additional Alias definition in apache's site specification for intelmq was the culprit. Lesson: stick with

Alias /intelmq-manager /usr/share/intelmq_manager/html/

as stated in [ https://intelmq.readthedocs.io/en/maintenance/user/intelmq-manager.html#conf... | https://intelmq.readthedocs.io/en/maintenance/user/intelmq-manager.html#conf... ] .

Now, looking for the next bump ... :-)

Cheers, Mika

From: "Mika Silander" mika.silander@csc.fi To: "intelmq-dev" intelmq-dev@lists.cert.at Sent: Wednesday, 31 March, 2021 14:57:29 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Further debugging: it seems the point of failure after logging in to intelmq-manager is that the intelmq-api access URLs fail after opening the Configuration tab:

https://ourmachine/intelmq/v1/api/config?file=bots

I haven't manipulated the ROOT setting inside /usr/share/intelmq_manager/html/js/intelmq-manager.js, so the above URLs are default ones (file=(bots|pipeline|positions|defaults ...). And another note: the earlier(?) path /usr/share/intelmq-manager is now /usr/share/intelmq_manager. Don't know whether this has anything to do with this case ...

Br, Mika

From: "Mika Silander" mika.silander@csc.fi To: "intelmq-dev" intelmq-dev@lists.cert.at Sent: Wednesday, 31 March, 2021 14:33:27 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi,

I tried to remove the session store as suggested. The "Not logged in" status and login button remain, but the default bot configuration I expect to see (/etc/intelmq/pipeline.conf) doesn't show up when I select the Configuration tab so there's still something odd remaining in our setup. Thanks and further hints are welcome.

Br, Mika

From: "Sebastian Wagner" wagner@cert.at To: "Mika Silander" mika.silander@csc.fi, "intelmq-dev" intelmq-dev@lists.cert.at Sent: Wednesday, 31 March, 2021 14:19:56 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi,

If you use HTTP Basic Authentication, do you need the additional authentication of the API? If not, you can ignore it. If you remove/rename the setting session_store in the API settings, the authentication is disabled.

See [ https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configur... | https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configur... ]

Sebastian

On 3/31/21 1:11 PM, Mika Silander wrote:

Hi,

Seems I have a configuration error somewhere in intelmq-manager's setup. I have configured basic authentication for this service, apache asks for the account and password and shows the start view of intelmq-manager. The start view says "Not logged in" and provides a login button below. If I press the button and use the same credentials, it still says "not logged in". Any hints?

intelmq-manager, intelmq and intelmq-api were all installed from package repos for Ubuntu 20.04 LTS.

Cheers, Mika _______________________________________________ IntelMQ-dev mailing list [ https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev | https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev ] [ https://intelmq.readthedocs.io/ | https://intelmq.readthedocs.io/ ]

Hi Sebastian,

This time around I managed, yes, thanks. I'm not quite sure if this was a failure in the installation process (intelmq + intelmq api + intelmq-manager on Ubuntu 20.04 LTS) or just my error, but I had to manually tweak the symlinks below /etc/apache2/conf-available & /etc/apache2/conf-enabled. It was as if the symlink

/etc/apache2/conf-available/manager-apache.conf -> ../../intelmq/manager-apache.conf

were missing after the install. Now with the symlinks

/etc/apache2/conf-available/manager-apache.conf -> ../../intelmq/manager-apache.conf /etc/apache2/conf-available/intelmq-api.conf -> ../../intelmq/api-apache.conf /etc/apache2/conf-enabled/manager-apache.conf -> ../conf-available/manager-apache.conf /etc/apache2/conf-enabled/intelmq-api.conf -> ../conf-available/intelmq-api.conf

suitable a2enconf invocations and a restart of apache2, the system seems to work.

Br, Mika

From: "Sebastian Wagner" wagner@cert.at To: "Mika Silander" mika.silander@csc.fi, "intelmq-dev" intelmq-dev@lists.cert.at Sent: Thursday, 1 April, 2021 12:42:46 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi,

Great to see that you could resolve the issue. Just responding to the other note: On 3/31/21 1:57 PM, Mika Silander wrote:

And another note: the earlier(?) path /usr/share/intelmq-manager is now /usr/share/intelmq_manager. Don't know whether this has anything to do with this case ...

The path /usr/share/intelmq-manager was used in the Debian packages for IntelMQ Manager < 2.3.0. That was changed for consistency to intelmq_manager in 2.3.0.

Sebastian

Hi Sebastian,

That seems to explain it. According to the logs I installed intelmq-manager first, then a few minutes later apache2. Maybe a "beware of this pitfall" is needed somewhere in the installation instructions or it's already there and I've just missed it?

Br, Mika

From: "Sebastian Wagner" wagner@cert.at To: "Mika Silander" mika.silander@csc.fi, "intelmq-dev" intelmq-dev@lists.cert.at Sent: Thursday, 1 April, 2021 13:05:58 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi Mika, On 4/1/21 12:00 PM, Mika Silander wrote:

Hi Sebastian,

This time around I managed, yes, thanks. I'm not quite sure if this was a failure in the installation process (intelmq + intelmq api + intelmq-manager on Ubuntu 20.04 LTS) or just my error, but I had to manually tweak the symlinks below /etc/apache2/conf-available & /etc/apache2/conf-enabled. It was as if the symlink

BQ_BEGIN

/etc/apache2/conf-available/manager-apache.conf -> ../../intelmq/manager-apache.conf

were missing after the install.

BQ_END

In what order did you install the packages? If intelmq-manager was installed without apache2 being pre-installed, some links are missing because apache2 is not a hard-requirement ( [ https://github.com/certtools/intelmq-manager/issues/246 | https://github.com/certtools/intelmq-manager/issues/246 ] ).

Sebastian

BQ_BEGIN

Now with the symlinks

/etc/apache2/conf-available/manager-apache.conf -> ../../intelmq/manager-apache.conf /etc/apache2/conf-available/intelmq-api.conf -> ../../intelmq/api-apache.conf /etc/apache2/conf-enabled/manager-apache.conf -> ../conf-available/manager-apache.conf /etc/apache2/conf-enabled/intelmq-api.conf -> ../conf-available/intelmq-api.conf

suitable a2enconf invocations and a restart of apache2, the system seems to work.

Br, Mika

From: "Sebastian Wagner" [ mailto:wagner@cert.at | wagner@cert.at ] To: "Mika Silander" [ mailto:mika.silander@csc.fi | mika.silander@csc.fi ] , "intelmq-dev" [ mailto:intelmq-dev@lists.cert.at | intelmq-dev@lists.cert.at ] Sent: Thursday, 1 April, 2021 12:42:46 Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi,

Great to see that you could resolve the issue. Just responding to the other note: On 3/31/21 1:57 PM, Mika Silander wrote:

BQ_BEGIN

And another note: the earlier(?) path /usr/share/intelmq-manager is now /usr/share/intelmq_manager. Don't know whether this has anything to do with this case ...

BQ_END

The path /usr/share/intelmq-manager was used in the Debian packages for IntelMQ Manager < 2.3.0. That was changed for consistency to intelmq_manager in 2.3.0.

Sebastian

Just FTR, the version thats fixed in is 2.3.1-2, not 2.3.2-2 (there is no 2.3.2 of intelmq-manager).

cheers, Birger

On 4/7/21 8:21 PM, Sebastian Wagner wrote:

Hi,

Thanks to my colleague Birger, this should be fixed now with 2.3.2-2.

Sebastian

On 4/1/21 12:15 PM, Mika Silander wrote:

...

Hi Sebastian,

That seems to explain it. According to the logs I installed intelmq-manager first, then a few minutes later apache2. Maybe a "beware of this pitfall" is needed somewhere in the installation instructions or it's already there and I've just missed it?

Br, Mika

---

*From: *"Sebastian Wagner" wagner@cert.at *To: *"Mika Silander" mika.silander@csc.fi, "intelmq-dev" intelmq-dev@lists.cert.at *Sent: *Thursday, 1 April, 2021 13:05:58 *Subject: *Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

Hi Mika,

On 4/1/21 12:00 PM, Mika Silander wrote:

 Hi Sebastian,

  This time around I managed, yes, thanks. I'm not quite sure if
 this was a failure in the installation process (intelmq + intelmq
 api + intelmq-manager on Ubuntu 20.04 LTS) or just my error, but I
 had to manually tweak the symlinks below
 /etc/apache2/conf-available & /etc/apache2/conf-enabled. It was as
 if the symlink

 /etc/apache2/conf-available/manager-apache.conf ->
 ../../intelmq/manager-apache.conf

 were missing after the install.

In what order did you install the packages? If intelmq-manager was installed without apache2 being pre-installed, some links are missing because apache2 is not a hard-requirement (https://github.com/certtools/intelmq-manager/issues/246).

Sebastian

 Now with the symlinks

 /etc/apache2/conf-available/manager-apache.conf ->
 ../../intelmq/manager-apache.conf
 /etc/apache2/conf-available/intelmq-api.conf ->
 ../../intelmq/api-apache.conf
 /etc/apache2/conf-enabled/manager-apache.conf ->
 ../conf-available/manager-apache.conf
 /etc/apache2/conf-enabled/intelmq-api.conf ->
 ../conf-available/intelmq-api.conf

 suitable a2enconf invocations and a restart of apache2, the system
 seems to work.

 Br, Mika

 ------------------------------------------------------------------------
 *From: *"Sebastian Wagner" <wagner@cert.at>
 *To: *"Mika Silander" <mika.silander@csc.fi>, "intelmq-dev"
 <intelmq-dev@lists.cert.at>
 *Sent: *Thursday, 1 April, 2021 12:42:46
 *Subject: *Re: [IntelMQ-dev] intelmq-manager authentication issue
 on Ubuntu 20.04 LTS

 Hi,

 Great to see that you could resolve the issue. Just responding to
 the other note:

 On 3/31/21 1:57 PM, Mika Silander wrote:

     And another note: the earlier(?) path
     /usr/share/intelmq-manager is now /usr/share/intelmq_manager.
     Don't know whether this has anything to do with this case ...

 The path /usr/share/intelmq-manager was used in the Debian
 packages for IntelMQ Manager < 2.3.0. That was changed for
 consistency to intelmq_manager in 2.3.0.

 Sebastian

 --
 // Sebastian Wagner <wagner@cert.at> - T: +43 1 5056416 7201
 // CERT Austria - https://www.cert.at/
 // Eine Initiative der nic.at GmbH - https://www.nic.at/
 // Firmenbuchnummer 172568b, LG Salzburg



 _______________________________________________
 IntelMQ-dev mailing list
 https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev
 https://intelmq.readthedocs.io/

-- // Sebastian Wagner wagner@cert.at - T: +43 1 5056416 7201 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - https://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg

---

IntelMQ-dev mailing list https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev https://intelmq.readthedocs.io/

---

IntelMQ-dev mailing list https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev https://intelmq.readthedocs.io/