"is not working" is not problem description which enables any of us to help you.

What does the Error log show? (/var/log/apache2/error.log)

On 3/16/21 6:12 PM, Soni, Drupad wrote:

Hi,

I have tried this. It is not working.

Regards,

Drupad Soni

*KPMG – Cyber Security*

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our *Cyber Security Services*

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

*From:* IntelMQ-users intelmq-users-bounces@lists.cert.at *On Behalf Of *Sebastian Wagner *Sent:* Tuesday, March 16, 2021 8:09 PM *To:* intelmq-users@lists.cert.at *Subject:* Re: [IntelMQ-users] Intelmq login username and password

Does the documentation on how to set-up user accounts help? https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#adding-a...

Sebastian

On 3/16/21 12:00 PM, Soni, Drupad wrote:

Hi Intelmq Team,

 

We have successfully setup Intelmq but we are unable to login .
Please help us out with default username and password.

 

I have used intelmq:intelmq  also intelmqadmin:intelmqadmin

 

Please see below.



 

Regards,

Drupad Soni

*KPMG – Cyber Security*

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our *Cyber Security Services*

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html

 

------------------------------------------------------------------------

KPMG (in India) allows reasonable personal use of the e-mail
system. Views and opinions expressed in these communications do
not necessarily represent those of KPMG (in India).

*******************************************************************************************************
DISCLAIMER
The information in this e-mail is confidential and may be legally
privileged. It is intended solely for the addressee. Access to
this e-mail by anyone else is unauthorized. If you have received
this communication in error, please address with the subject
heading "Received in error," send to postmaster1@kpmg.com
<mailto:postmaster1@kpmg.com>, then delete the e-mail and destroy
any copies of it. If you are not the intended recipient, any
disclosure, copying, distribution or any action taken or omitted
to be taken in reliance on it, is prohibited and may be unlawful.
Any opinions or advice contained in this e-mail are subject to the
terms and conditions expressed in the governing KPMG client
engagement letter. Opinions, conclusions and other information in
this e-mail and any attachments that do not relate to the official
business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or
error-free, as information could be intercepted, corrupted,
amended, lost, destroyed, arrive late or incomplete, or contain
viruses.

KPMG, an Indian partnership and a member firm of KPMG
International Cooperative ("KPMG International"), a Swiss entity
that serves as a coordinating entity for a network of independent
firms operating under the KPMG name. KPMG International
Cooperative (“KPMG International”) provides no services to
clients. Each member firm of KPMG International Cooperative (“KPMG
International”) is a legally distinct and separate entity and each
describes itself as such.

“Notwithstanding anything inconsistent contained in the meeting
invite to which this acceptance pertains, this acceptance is
restricted solely to confirming my availability for the proposed
call and should not be construed in any manner as acceptance of
any other terms or conditions. Specifically, nothing contained
herein may be construed as an acceptance (or deemed acceptance) of
any request or notification for recording of the call, which can
be done only if it is based on my explicit and written consent and
subject to the terms and conditions on which such consent has been
granted”
*******************************************************************************************************

-- // Sebastian Wagner wagner@cert.at mailto:wagner@cert.at - T: +43 1 5056416 7201 // CERT Austria - https://www.cert.at/ // Eine Initiative der nic.at GmbH - https://www.nic.at/ // Firmenbuchnummer 172568b, LG Salzburg

Hi Soni,

Am Mittwoch, 17. März 2021, 06:36:06 CET schrieb Soni, Drupad:

I have tried adding user using command below intelmq-api-adduser --user <username> --password <password>

you have to type in usename and the password exactely like you have added it, with case being significant.

To exclude a few potential sources of problems: * add another user without special characters in username and password (use only ascii) do not use this user for production, delete it later. Does this work?

* check the raw contents of the session database sqlite3 /path/to/sessiondb select * from user; Is your added user there?

Best, Bernhard

Hi Sebestian,

I have installed Intelmq-api.

I used commands as below

echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.04... /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04/... | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null sudo apt-get -y update sudo apt-get -y install Intelmq sudo apt-get -y install intelmq-manager sudo apt-get -y install intelmq-api

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: IntelMQ-users intelmq-users-bounces@lists.cert.at On Behalf Of Sebastian Wagner Sent: Wednesday, March 17, 2021 2:25 PM To: intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

It looks like you use Ubuntu 18.04. Which installation method did you choose? On 3/17/21 6:36 AM, Soni, Drupad wrote: Hi, I have tried adding user using command below intelmq-api-adduser --user <username> --password <password>

And the result was?

The first screenshot showed an error 404 for the API calls. Is the intelmq-api installed? Sharing error logs:

[Mon Mar 15 10:07:54.039198 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 configured -- resuming n$ [Mon Mar 15 10:07:54.039298 2021] [core:notice] [pid 8049:tid 140262513130432] AH00094: Command line: '/usr/sbin/apache2' [Mon Mar 15 10:16:53.128986 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00493: SIGUSR1 received. Doing graceful restart [Mon Mar 15 10:16:53.136690 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 configured -- resuming n$ [Mon Mar 15 10:16:53.136705 2021] [core:notice] [pid 8049:tid 140262513130432] AH00094: Command line: '/usr/sbin/apache2' [Tue Mar 16 10:08:49.591813 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00493: SIGUSR1 received. Doing graceful restart [Tue Mar 16 10:08:49.617642 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 configured -- resuming n$ [Tue Mar 16 10:08:49.617653 2021] [core:notice] [pid 8049:tid 140262513130432] AH00094: Command line: '/usr/sbin/apache2'

Ok, no errors here. Sebastian

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such.

“Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

Hi Sebestian,

I have done this, as you mentioned I got updates for hug and falcon. Also I am still trying to login and I am unable to.

[cid:image001.png@01D71B41.65072430]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.at Sent: Wednesday, March 17, 2021 2:51 PM To: Soni, Drupad drupadsoni@kpmg.com; intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

can you please run apt update apt upgrade systemctl restart apache2

You should see an update for python3-hug and python3-falcon. Afterwards, let's see if you still have issues.

Sebastian On 3/17/21 9:59 AM, Soni, Drupad wrote: Hi Sebestian,

I have installed Intelmq-api.

I used commands as below

echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.04... /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04/... | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null sudo apt-get -y update sudo apt-get -y install Intelmq sudo apt-get -y install intelmq-manager sudo apt-get -y install intelmq-api

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: IntelMQ-users intelmq-users-bounces@lists.cert.atmailto:intelmq-users-bounces@lists.cert.at On Behalf Of Sebastian Wagner Sent: Wednesday, March 17, 2021 2:25 PM To: intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

It looks like you use Ubuntu 18.04. Which installation method did you choose? On 3/17/21 6:36 AM, Soni, Drupad wrote: Hi, I have tried adding user using command below intelmq-api-adduser --user <username> --password <password>

And the result was?

The first screenshot showed an error 404 for the API calls. Is the intelmq-api installed? Sharing error logs:

[Mon Mar 15 10:07:54.039198 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 configured -- resuming n$ [Mon Mar 15 10:07:54.039298 2021] [core:notice] [pid 8049:tid 140262513130432] AH00094: Command line: '/usr/sbin/apache2' [Mon Mar 15 10:16:53.128986 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00493: SIGUSR1 received. Doing graceful restart [Mon Mar 15 10:16:53.136690 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 configured -- resuming n$ [Mon Mar 15 10:16:53.136705 2021] [core:notice] [pid 8049:tid 140262513130432] AH00094: Command line: '/usr/sbin/apache2' [Tue Mar 16 10:08:49.591813 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00493: SIGUSR1 received. Doing graceful restart [Tue Mar 16 10:08:49.617642 2021] [mpm_event:notice] [pid 8049:tid 140262513130432] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 configured -- resuming n$ [Tue Mar 16 10:08:49.617653 2021] [core:notice] [pid 8049:tid 140262513130432] AH00094: Command line: '/usr/sbin/apache2'

Ok, no errors here. Sebastian

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

________________________________ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.commailto:postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted" *******************************************************************************************************

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

Hi Sebestian,

Yes, I have created a user during installation only.

Also I went through email from Bernhard,

As per step 1 add another user without special characters in username and password

(use only ascii) do not use this user for production, delete it later. I did this no change has been noticed . Sharing command and o/p image below: [cid:image001.png@01D71B44.D6A8ED00]

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

select * from user;

Shared o/p image below

[cid:image002.png@01D71B45.158F86A0]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: IntelMQ-users intelmq-users-bounces@lists.cert.at On Behalf Of Sebastian Wagner Sent: Wednesday, March 17, 2021 3:27 PM To: intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi, On 3/17/21 10:52 AM, Soni, Drupad wrote: I have done this, as you mentioned I got updates for hug and falcon. Also I am still trying to login and I am unable to.

We are getting into loops: In order to help you, we need a precise problem description. Always asking for details is no fun, neither for you, nor for us.

Did you create a user? Either in the installation step or afterwards with `intelmq-api-adduser`? If there was an error, paste the full command and it's output. Have you read Bernhard Reiter's e-mail?

Sebastian

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such.

“Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

Hi,

I have created new user, also checked users in db all are present as added.

[cid:image001.png@01D71B53.4294EA10]

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

[cid:image002.png@01D71B53.4294EA10]

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

-----Original Message----- From: Bernhard Reiter bernhard@intevation.de Sent: Wednesday, March 17, 2021 4:25 PM To: Sebastian Wagner wagner@cert.at; intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.com; Soni, Drupad drupadsoni@kpmg.com Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

As per step 1 add another user without special characters in username

and password

can you login with this user now?

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhardhttp://www.intevation.de/~bernhard +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

********************************************************************** KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative (“KPMG International”) provides no services to clients. Each member firm of KPMG International Cooperative (“KPMG International”) is a legally distinct and separate entity and each describes itself as such.

“Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted” *******************************************************************************************************

Hi,

Sharing image below,

[cid:image001.png@01D71BDE.61439E30]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.at Sent: Wednesday, March 17, 2021 10:49 PM To: Soni, Drupad drupadsoni@kpmg.com; intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Looks like your intelmq-api installation did not succeed or is incomplete. Can you please show

ls -l /etc/apache2/conf-enabled/ /etc/apache2/conf-available/

Sebastian On 3/17/21 1:00 PM, Soni, Drupad wrote:

Hi,

I have created new user, also checked users in db all are present as added.

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

-----Original Message----- From: Bernhard Reiter bernhard@intevation.demailto:bernhard@intevation.de Sent: Wednesday, March 17, 2021 4:25 PM To: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.commailto:kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.commailto:richuthakur@kpmg.com; Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

As per step 1 add another user without special characters in username

and password

can you login with this user now?

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhardhttp://www.intevation.de/~bernhard +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

________________________________ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.commailto:postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted" *******************************************************************************************************

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

FYI

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Soni, Drupad Sent: Thursday, March 18, 2021 10:07 AM To: Sebastian Wagner wagner@cert.at; intelmq-users@lists.cert.at Subject: RE: [IntelMQ-users] Intelmq login username and password

Hi,

Sharing image below,

[cid:image001.png@01D71C02.4F596550]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner <wagner@cert.atmailto:wagner@cert.at> Sent: Wednesday, March 17, 2021 10:49 PM To: Soni, Drupad <drupadsoni@kpmg.commailto:drupadsoni@kpmg.com>; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Looks like your intelmq-api installation did not succeed or is incomplete. Can you please show

ls -l /etc/apache2/conf-enabled/ /etc/apache2/conf-available/

Sebastian On 3/17/21 1:00 PM, Soni, Drupad wrote:

Hi,

I have created new user, also checked users in db all are present as added.

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

-----Original Message----- From: Bernhard Reiter bernhard@intevation.demailto:bernhard@intevation.de Sent: Wednesday, March 17, 2021 4:25 PM To: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.commailto:kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.commailto:richuthakur@kpmg.com; Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

As per step 1 add another user without special characters in username

and password

can you login with this user now?

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhardhttp://www.intevation.de/~bernhard +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

________________________________ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.commailto:postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted" *******************************************************************************************************

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

Hi Sebestian,

As suggested I have executed command `ls -l /etc/intelmq/'

[cid:image002.png@01D71C18.F63091D0]

In addition to this I have created another VM and executed commands as below.

I have simply ran below commands: echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.04... /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04/... | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null sudo apt-get -y update sudo apt-get -y install intelmq sudo apt-get -y install intelmq-manager sudo apt-get -y install Intelmq-api sudo apt-get -y update sudo service apache2 restart

Here, I have done no intervention. Please guide.

[cid:image001.png@01D71C17.D12CF910]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.at Sent: Thursday, March 18, 2021 3:16 PM To: Soni, Drupad drupadsoni@kpmg.com; intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

Please consider copy & pasting the terminal output into the mail instead of sending screenshots. Thank you.

Where does your file /etc/apache2/conf-enables/intelmq-manager.conf come from? It is not provided by the package, therefore please delete it.

/etc/intelmq/api-apache.conf and /etc/intelmq/manager-apache.conf do not exist. Why? They are provided by the packages intelmq-api and intelmq-manager. You can re-install the packages to get them again: sudo apt purge intelmq-api intelmq-manager sudo apt install intelmq-api intelmq-manager

But the next question is, if you are missing other files in /etc/intelmq/ as well. If that is the case, you'd need to reinstall intelmq too. Please show the output `ls -l /etc/intelmq/`

I don't know how you did get there. While there was one packaging bug with the API (hug and falcon were not available in a recent enough version), it looks like this did not cause your issues, but rather manual intervention led to this situation.

Sebastian On 3/18/21 5:36 AM, Soni, Drupad wrote: Hi,

Sharing image below,

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at Sent: Wednesday, March 17, 2021 10:49 PM To: Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Looks like your intelmq-api installation did not succeed or is incomplete. Can you please show

ls -l /etc/apache2/conf-enabled/ /etc/apache2/conf-available/

Sebastian On 3/17/21 1:00 PM, Soni, Drupad wrote:

Hi,

I have created new user, also checked users in db all are present as added.

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

-----Original Message----- From: Bernhard Reiter bernhard@intevation.demailto:bernhard@intevation.de Sent: Wednesday, March 17, 2021 4:25 PM To: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.commailto:kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.commailto:richuthakur@kpmg.com; Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

As per step 1 add another user without special characters in username

and password

can you login with this user now?

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhardhttp://www.intevation.de/~bernhard +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

________________________________ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.commailto:postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted" *******************************************************************************************************

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

Hi Sebastian,

Sharing apache2 error logs

[Thu Mar 18 11:19:53.452648 2021] [mpm_event:notice] [pid 5051:tid 140340889947072] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Thu Mar 18 11:19:53.452919 2021] [core:notice] [pid 5051:tid 140340889947072] AH00094: Command line: '/usr/sbin/apache2' [Thu Mar 18 11:19:55.073617 2021] [mpm_event:notice] [pid 5051:tid 140340889947072] AH00493: SIGUSR1 received. Doing graceful restart [Thu Mar 18 11:19:55.085257 2021] [mpm_event:notice] [pid 5051:tid 140340889947072] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Thu Mar 18 11:19:55.085275 2021] [core:notice] [pid 5051:tid 140340889947072] AH00094: Command line: '/usr/sbin/apache2' [Thu Mar 18 11:19:57.322338 2021] [mpm_event:notice] [pid 5051:tid 140340889947072] AH00493: SIGUSR1 received. Doing graceful restart [Thu Mar 18 11:19:57.330041 2021] [mpm_event:notice] [pid 5051:tid 140340889947072] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Thu Mar 18 11:19:57.330057 2021] [core:notice] [pid 5051:tid 140340889947072] AH00094: Command line: '/usr/sbin/apache2' [Thu Mar 18 11:21:16.047259 2021] [mpm_event:notice] [pid 5051:tid 140340889947072] AH00491: caught SIGTERM, shutting down [Thu Mar 18 11:21:40.643816 2021] [mpm_event:notice] [pid 1512:tid 139845975661504] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Thu Mar 18 11:21:40.648513 2021] [core:notice] [pid 1512:tid 139845975661504] AH00094: Command line: '/usr/sbin/apache2' [Thu Mar 18 11:26:42.698586 2021] [mpm_event:notice] [pid 1512:tid 139845975661504] AH00491: caught SIGTERM, shutting down [Thu Mar 18 11:26:42.785088 2021] [mpm_event:notice] [pid 3748:tid 140005782600640] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Thu Mar 18 11:26:42.785221 2021] [core:notice] [pid 3748:tid 140005782600640] AH00094: Command line: '/usr/sbin/apache2' [Thu Mar 18 11:42:01.276726 2021] [mpm_event:notice] [pid 3748:tid 140005782600640] AH00491: caught SIGTERM, shutting down [Thu Mar 18 11:42:28.464537 2021] [mpm_event:notice] [pid 1452:tid 139721895095232] AH00489: Apache/2.4.29 (Ubuntu) mod_wsgi/4.5.17 Python/3.6 config$ [Thu Mar 18 11:42:28.471354 2021] [core:notice] [pid 1452:tid 139721895095232] AH00094: Command line: '/usr/sbin/apache2'

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Soni, Drupad Sent: Thursday, March 18, 2021 5:06 PM To: Sebastian Wagner wagner@cert.at; intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.com Subject: RE: [IntelMQ-users] Intelmq login username and password

FYI

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Soni, Drupad Sent: Thursday, March 18, 2021 5:06 PM To: 'Sebastian Wagner' <wagner@cert.atmailto:wagner@cert.at>; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: RE: [IntelMQ-users] Intelmq login username and password

Hi Sebestian,

As suggested I have executed command `ls -l /etc/intelmq/'

[cid:image001.png@01D71C1C.38F45E40]

In addition to this I have created another VM and executed commands as below.

I have simply ran below commands: echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.04... /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04/... | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null sudo apt-get -y update sudo apt-get -y install intelmq sudo apt-get -y install intelmq-manager sudo apt-get -y install Intelmq-api sudo apt-get -y update sudo service apache2 restart

Here, I have done no intervention. Please guide.

[cid:image002.png@01D71C1C.38F45E40]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner <wagner@cert.atmailto:wagner@cert.at> Sent: Thursday, March 18, 2021 3:16 PM To: Soni, Drupad <drupadsoni@kpmg.commailto:drupadsoni@kpmg.com>; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

Please consider copy & pasting the terminal output into the mail instead of sending screenshots. Thank you.

Where does your file /etc/apache2/conf-enables/intelmq-manager.conf come from? It is not provided by the package, therefore please delete it.

/etc/intelmq/api-apache.conf and /etc/intelmq/manager-apache.conf do not exist. Why? They are provided by the packages intelmq-api and intelmq-manager. You can re-install the packages to get them again: sudo apt purge intelmq-api intelmq-manager sudo apt install intelmq-api intelmq-manager

But the next question is, if you are missing other files in /etc/intelmq/ as well. If that is the case, you'd need to reinstall intelmq too. Please show the output `ls -l /etc/intelmq/`

I don't know how you did get there. While there was one packaging bug with the API (hug and falcon were not available in a recent enough version), it looks like this did not cause your issues, but rather manual intervention led to this situation.

Sebastian On 3/18/21 5:36 AM, Soni, Drupad wrote: Hi,

Sharing image below,

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at Sent: Wednesday, March 17, 2021 10:49 PM To: Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Looks like your intelmq-api installation did not succeed or is incomplete. Can you please show

ls -l /etc/apache2/conf-enabled/ /etc/apache2/conf-available/

Sebastian On 3/17/21 1:00 PM, Soni, Drupad wrote:

Hi,

I have created new user, also checked users in db all are present as added.

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

-----Original Message----- From: Bernhard Reiter bernhard@intevation.demailto:bernhard@intevation.de Sent: Wednesday, March 17, 2021 4:25 PM To: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.commailto:kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.commailto:richuthakur@kpmg.com; Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

As per step 1 add another user without special characters in username

and password

can you login with this user now?

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhardhttp://www.intevation.de/~bernhard +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

________________________________ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.commailto:postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted" *******************************************************************************************************

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

Hi Sebastian,

Trailing slash doesn't help. Sharing image.

[cid:image001.png@01D71C1D.959B2100]

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.at Sent: Thursday, March 18, 2021 5:34 PM To: Soni, Drupad drupadsoni@kpmg.com; intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Please consider copy & pasting the terminal output into the mail instead of sending screenshots. Thank you.

Now the Apache configuration files exist. That's good.

Try http://localhost/intelmq-manager/ (trailing slash)

Sebastian On 3/18/21 12:36 PM, Soni, Drupad wrote: Hi Sebestian,

As suggested I have executed command `ls -l /etc/intelmq/'

In addition to this I have created another VM and executed commands as below.

I have simply ran below commands: echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.04... /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04/... | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null sudo apt-get -y update sudo apt-get -y install intelmq sudo apt-get -y install intelmq-manager sudo apt-get -y install Intelmq-api sudo apt-get -y update sudo service apache2 restart

Here, I have done no intervention. Please guide.

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at Sent: Thursday, March 18, 2021 3:16 PM To: Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

Please consider copy & pasting the terminal output into the mail instead of sending screenshots. Thank you.

Where does your file /etc/apache2/conf-enables/intelmq-manager.conf come from? It is not provided by the package, therefore please delete it.

/etc/intelmq/api-apache.conf and /etc/intelmq/manager-apache.conf do not exist. Why? They are provided by the packages intelmq-api and intelmq-manager. You can re-install the packages to get them again: sudo apt purge intelmq-api intelmq-manager sudo apt install intelmq-api intelmq-manager

But the next question is, if you are missing other files in /etc/intelmq/ as well. If that is the case, you'd need to reinstall intelmq too. Please show the output `ls -l /etc/intelmq/`

I don't know how you did get there. While there was one packaging bug with the API (hug and falcon were not available in a recent enough version), it looks like this did not cause your issues, but rather manual intervention led to this situation.

Sebastian On 3/18/21 5:36 AM, Soni, Drupad wrote: Hi,

Sharing image below,

Regards, Drupad Soni KPMG - Cyber Security Embassy Golf Links Business Park, Pebble Beach, 'B' Block, 1st & 2nd Floor, Off Intermediate Ring Road Mobile : +91 8140283894 Know more about our Cyber Security Services https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

From: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at Sent: Wednesday, March 17, 2021 10:49 PM To: Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Subject: Re: [IntelMQ-users] Intelmq login username and password

Looks like your intelmq-api installation did not succeed or is incomplete. Can you please show

ls -l /etc/apache2/conf-enabled/ /etc/apache2/conf-available/

Sebastian On 3/17/21 1:00 PM, Soni, Drupad wrote:

Hi,

I have created new user, also checked users in db all are present as added.

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-adviso...

-----Original Message----- From: Bernhard Reiter bernhard@intevation.demailto:bernhard@intevation.de Sent: Wednesday, March 17, 2021 4:25 PM To: Sebastian Wagner wagner@cert.atmailto:wagner@cert.at; intelmq-users@lists.cert.atmailto:intelmq-users@lists.cert.at Cc: Shah, Kunal kunalshah3@kpmg.commailto:kunalshah3@kpmg.com; Thakur, Richu richuthakur@kpmg.commailto:richuthakur@kpmg.com; Soni, Drupad drupadsoni@kpmg.commailto:drupadsoni@kpmg.com Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

As per step 1 add another user without special characters in username

and password

can you login with this user now?

As per step 2 check the raw contents of the session database

sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhardhttp://www.intevation.de/~bernhard +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

________________________________ KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

******************************************************************************************************* DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1@kpmg.commailto:postmaster1@kpmg.com, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted" *******************************************************************************************************

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

--

// Sebastian Wagner wagner@cert.atmailto:wagner@cert.at - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg