[IntelMQ-users] Intelmq login username and password

Thu Mar 18 13:40:58 CET 2021

Hi Sebastian,

Is it possible if you can guide me through on remote session please? If possible I can resolve this asap.

Regards,
Drupad Soni
KPMG - Cyber Security
Embassy Golf Links Business Park, Pebble Beach, 'B' Block,
1st & 2nd Floor, Off Intermediate Ring Road
Mobile : +91 8140283894
Know more about our Cyber Security Services
https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html

From: Sebastian Wagner <wagner at cert.at>
Sent: Thursday, March 18, 2021 5:34 PM
To: Soni, Drupad <drupadsoni at kpmg.com>; intelmq-users at lists.cert.at
Subject: Re: [IntelMQ-users] Intelmq login username and password

Please consider copy & pasting the terminal output into the mail instead of sending screenshots. Thank you.

Now the Apache configuration files exist. That's good.

Try http://localhost/intelmq-manager/ (trailing slash)

Sebastian
On 3/18/21 12:36 PM, Soni, Drupad wrote:
Hi Sebestian,

As suggested I have executed command `ls -l /etc/intelmq/'

In addition to this I have created another VM and executed commands as below.

I have simply ran below commands:
echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_18.04/ /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list
 curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_18.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null
sudo apt-get -y update
sudo apt-get -y install intelmq
sudo apt-get -y install intelmq-manager
sudo apt-get -y install Intelmq-api
sudo apt-get -y update
sudo service apache2 restart

Here, I have done no intervention. Please guide.

Regards,
Drupad Soni
KPMG - Cyber Security
Embassy Golf Links Business Park, Pebble Beach, 'B' Block,
1st & 2nd Floor, Off Intermediate Ring Road
Mobile : +91 8140283894
Know more about our Cyber Security Services
https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html

From: Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at>
Sent: Thursday, March 18, 2021 3:16 PM
To: Soni, Drupad <drupadsoni at kpmg.com><mailto:drupadsoni at kpmg.com>; intelmq-users at lists.cert.at<mailto:intelmq-users at lists.cert.at>
Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi,

Please consider copy & pasting the terminal output into the mail instead of sending screenshots. Thank you.

Where does your file /etc/apache2/conf-enables/intelmq-manager.conf come from? It is not provided by the package, therefore please delete it.

/etc/intelmq/api-apache.conf and /etc/intelmq/manager-apache.conf do not exist. Why? They are provided by the packages intelmq-api and intelmq-manager. You can re-install the packages to get them again:
sudo apt purge intelmq-api intelmq-manager
sudo apt install intelmq-api intelmq-manager

But the next question is, if you are missing other files in /etc/intelmq/ as well. If that is the case, you'd need to reinstall intelmq too. Please show the output `ls -l /etc/intelmq/`

I don't know how you did get there. While there was one packaging bug with the API (hug and falcon were not available in a recent enough version), it looks like this did not cause your issues, but rather manual intervention led to this situation.

Sebastian
On 3/18/21 5:36 AM, Soni, Drupad wrote:
Hi,

Sharing image below,

Regards,
Drupad Soni
KPMG - Cyber Security
Embassy Golf Links Business Park, Pebble Beach, 'B' Block,
1st & 2nd Floor, Off Intermediate Ring Road
Mobile : +91 8140283894
Know more about our Cyber Security Services
https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html

From: Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at>
Sent: Wednesday, March 17, 2021 10:49 PM
To: Soni, Drupad <drupadsoni at kpmg.com><mailto:drupadsoni at kpmg.com>; intelmq-users at lists.cert.at<mailto:intelmq-users at lists.cert.at>
Subject: Re: [IntelMQ-users] Intelmq login username and password

Looks like your intelmq-api installation did not succeed or is incomplete. Can you please show

ls -l /etc/apache2/conf-enabled/ /etc/apache2/conf-available/

Sebastian
On 3/17/21 1:00 PM, Soni, Drupad wrote:

Hi,

I have created new user, also checked users in db all are present as added.

Also I am receiving error on Intelmq dashboard. Sharing screen below. I am not sure where I am missing out.

Regards,

Drupad Soni

KPMG - Cyber Security

Embassy Golf Links Business Park, Pebble Beach, 'B' Block,

1st & 2nd Floor, Off Intermediate Ring Road

Mobile : +91 8140283894

Know more about our Cyber Security Services

https://home.kpmg.com/in/en/home/services/advisory/risk-consulting/it-advisory-services/cyber-security.html

-----Original Message-----
From: Bernhard Reiter <bernhard at intevation.de><mailto:bernhard at intevation.de>
Sent: Wednesday, March 17, 2021 4:25 PM
To: Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at>; intelmq-users at lists.cert.at<mailto:intelmq-users at lists.cert.at>
Cc: Shah, Kunal <kunalshah3 at kpmg.com><mailto:kunalshah3 at kpmg.com>; Thakur, Richu <richuthakur at kpmg.com><mailto:richuthakur at kpmg.com>; Soni, Drupad <drupadsoni at kpmg.com><mailto:drupadsoni at kpmg.com>
Subject: Re: [IntelMQ-users] Intelmq login username and password

Hi Soni,

Am Mittwoch, 17. März 2021, 11:21:43 CET schrieb Soni, Drupad:

> As per step 1 add another user without special characters in username

> and password

can you login with this user now?

> As per step 2 check the raw contents of the session database

>     sqlite3 /path/to/sessiondb

(You need to replace "/path/to/sessiondb" with the path to the real session db. Do you know any GNU/Linux adminstration person that could assist you

directly?)

Best Regards,

Bernhard

--

www.intevation.de/~bernhard<http://www.intevation.de/~bernhard>   +49 541 33 508 3-3

Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

________________________________
KPMG (in India) allows reasonable personal use of the e-mail system. Views and opinions expressed in these communications do not necessarily represent those of KPMG (in India).

*******************************************************************************************************
DISCLAIMER
The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please address with the subject heading "Received in error," send to postmaster1 at kpmg.com<mailto:postmaster1 at kpmg.com>, then delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing KPMG client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it.

KPMG cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, arrive late or incomplete, or contain viruses.

KPMG, an Indian partnership and a member firm of KPMG International Cooperative ("KPMG International"), a Swiss entity that serves as a coordinating entity for a network of independent firms operating under the KPMG name. KPMG International Cooperative ("KPMG International") provides no services to clients. Each member firm of KPMG International Cooperative ("KPMG International") is a legally distinct and separate entity and each describes itself as such.

"Notwithstanding anything inconsistent contained in the meeting invite to which this acceptance pertains, this acceptance is restricted solely to confirming my availability for the proposed call and should not be construed in any manner as acceptance of any other terms or conditions. Specifically, nothing contained herein may be construed as an acceptance (or deemed acceptance) of any request or notification for recording of the call, which can be done only if it is based on my explicit and written consent and subject to the terms and conditions on which such consent has been granted"
*******************************************************************************************************

--

// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

--

// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg

--

// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 1 5056416 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210318/239dcf59/attachment.html>