[IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS

[Mika Silander]

Ok. Problem solved. An additional Alias definition in apache's site specification for intelmq was the culprit. Lesson: stick with 

Alias /intelmq-manager /usr/share/intelmq_manager/html/ 

as stated in [ https://intelmq.readthedocs.io/en/maintenance/user/intelmq-manager.html#configuration | https://intelmq.readthedocs.io/en/maintenance/user/intelmq-manager.html#configuration ] . 

Now, looking for the next bump ... :-) 

Cheers, Mika 

From: "Mika Silander" <mika.silander at csc.fi> 
To: "intelmq-dev" <intelmq-dev at lists.cert.at> 
Sent: Wednesday, 31 March, 2021 14:57:29 
Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS 

Further debugging: it seems the point of failure after logging in to intelmq-manager is that the intelmq-api access URLs fail after opening the Configuration tab: 

https://ourmachine/intelmq/v1/api/config?file=bots 

I haven't manipulated the ROOT setting inside /usr/share/intelmq_manager/html/js/intelmq-manager.js, so the above URLs are default ones (file=(bots|pipeline|positions|defaults ...). 
And another note: the earlier(?) path /usr/share/intelmq-manager is now /usr/share/intelmq_manager. Don't know whether this has anything to do with this case ... 

Br, Mika 

From: "Mika Silander" <mika.silander at csc.fi> 
To: "intelmq-dev" <intelmq-dev at lists.cert.at> 
Sent: Wednesday, 31 March, 2021 14:33:27 
Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS 

Hi, 

I tried to remove the session store as suggested. The "Not logged in" status and login button remain, but the default bot configuration I expect to see (/etc/intelmq/pipeline.conf) doesn't show up when I select the Configuration tab so there's still something odd remaining in our setup. Thanks and further hints are welcome. 

Br, Mika 


From: "Sebastian Wagner" <wagner at cert.at> 
To: "Mika Silander" <mika.silander at csc.fi>, "intelmq-dev" <intelmq-dev at lists.cert.at> 
Sent: Wednesday, 31 March, 2021 14:19:56 
Subject: Re: [IntelMQ-dev] intelmq-manager authentication issue on Ubuntu 20.04 LTS 



Hi, 


If you use HTTP Basic Authentication, do you need the additional authentication of the API? If not, you can ignore it. If you remove/rename the setting session_store in the API settings, the authentication is disabled. 

See [ https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configuring-intelmq-api | https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html#configuring-intelmq-api ] 

Sebastian 

On 3/31/21 1:11 PM, Mika Silander wrote: 



Hi,

 Seems I have a configuration error somewhere in intelmq-manager's setup. I have configured basic authentication for this service, apache asks for the account and password and shows the start view of intelmq-manager. The start view says "Not logged in" and provides a login button below. If I press the button and use the same credentials, it still says "not logged in". Any hints?

 intelmq-manager, intelmq and intelmq-api were all installed from package repos for Ubuntu 20.04 LTS.

Cheers, Mika
_______________________________________________
IntelMQ-dev mailing list [ https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev | https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev ] [ https://intelmq.readthedocs.io/ | https://intelmq.readthedocs.io/ ] 



-- 
// Sebastian Wagner [ mailto:wagner at cert.at | <wagner at cert.at> ] - T: +43 1 5056416 7201
// CERT Austria - [ https://www.cert.at/ | https://www.cert.at/ ] // Eine Initiative der nic.at GmbH - [ https://www.nic.at/ | https://www.nic.at/ ] // Firmenbuchnummer 172568b, LG Salzburg 


_______________________________________________ 
IntelMQ-dev mailing list 
https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev 
https://intelmq.readthedocs.io/ 

_______________________________________________ 
IntelMQ-dev mailing list 
https://lists.cert.at/cgi-bin/mailman/listinfo/intelmq-dev 
https://intelmq.readthedocs.io/ 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20210331/081d7a7d/attachment.htm>