Better error messages for missing authentication

If login is required, but the user is not logged in, the error messages are not good.

On Monitor:

11:21 AM Error loading botnet status: {"errors": {"Authentication Required": "Please provide valid Token verification credentials"}} Unauthorized

On configuration and management page, plus the same of monitor:

11:20 AM Get an error error, Unauthorized when trying to obtain config file properly
http://example.com/intelmq/v1/api/config?file=runtime
11:20 AM Error incomplete botnet: {"errors": {"Authentication Required": "Please provide valid Token verification credentials"}} Unauthorized

On check page: pop-up with error getting check command output
Ob about: pop-up with Error getting debugging information. Do you have IntelMQ >= 2.2.0?

[oscarliz]

10:45 AM 24× Error loading bot queues information: {"errors": {"Invalid Authentication": "Provided Token verification credentials were invalid"}} Unauthorized

10:44 AM Get an error error, Unauthorized when trying to obtain config file properly
http://172.29.26.232/intelmq/v1/api/config?file=positions
.

10:44 AM Get an error error, Unauthorized when trying to obtain config file properly
http://172.29.26.232/intelmq/v1/api/config?file=pipeline
.

10:44 AM Get an error error, Unauthorized when trying to obtain config file properly
http://172.29.26.232/intelmq/v1/api/config?file=runtime
.

10:44 AM Get an error error, Unauthorized when trying to obtain config file properly
http://172.29.26.232/intelmq/v1/api/config?file=defaults
.

10:44 AM Get an error error, Unauthorized when trying to obtain config file properly
http://172.29.26.232/intelmq/v1/api/config?file=bots
.

[aragorne007]

Hello,

Sorry to up this topic but I've the same issue.
Any help ?

Thank in advance :)

[sebix]

For any help more information is required: What error messages do you get at what action and which preconditions (e.g. logged in), how did you install and set up IntelMQ, which operating system are you using etc.

[oencarnacion]

@aragorne007 It could be that it is redis that is giving you a problem solution:

chown -R redis:redis /var/log/redis
chmod -R u+rwX,g+rwX,u+rx /var/log/redis
chmod +r /etc/redis/redis.conf
systemctl start redis

[aragorne007]

@oencarnacion
I tried but it doesn't work.

@sebix
I installed intelmq, intelmq-manager and intelmq-api.
After that, I've created an account with the cmd "intelmq-api-adduser".

When I'm log in and when I go to any menu, I've 2 kinds of error :

First One (Configuration & Monitor) :

22:27:55 369× Error loading bot queues information: {"errors": {"Invalid Authentication": "Provided Token verification credentials were invalid"}} Unauthorized

22:21:53 Get an error error, Unauthorized when trying to obtain config file properly
http://192.168.0.21/intelmq/v1/api/positions
.

22:21:53 Get an error error, Unauthorized when trying to obtain config file properly
http://192.168.0.21/intelmq/v1/api/runtime
.

22:21:53 Get an error error, Unauthorized when trying to obtain config file properly
http://192.168.0.21/intelmq/v1/api/bots
.

The second one (Check) :

error getting check command output

I'm sure that it's a permission issue but I'm not sure to understand which folder need to have the right access.
Or maybe it's a file configuration error but I think that I've well followed the Installation guide line

Thank for your help :)

[aragorne007]

If it can help, the result of "intelmqctl debug"

Paths:
HARMONIZATION_CONF_FILE: '/etc/intelmq/harmonization.conf'
RUNTIME_CONF_FILE: '/etc/intelmq/runtime.yaml'
VAR_RUN_PATH: '/var/run/intelmq/'
STATE_FILE_PATH: '/var/lib/intelmq/state.json'
DEFAULT_LOGGING_PATH: '/var/log/intelmq/'
file: '/usr/lib/python3/dist-packages/intelmq/bin/intelmqctl.py'
CONFIG_DIR: '/etc/intelmq/'
ROOT_DIR: '/'
Environment variables:
INTELMQ_ROOT_DIR: None
INTELMQ_PATHS_NO_OPT: None
INTELMQ_PATHS_OPT: None
INTELMQ_MANAGER_CONTROLLER_CMD: None
PATH: '/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games'

[sebix]

I assume you installed the deb/rpm packages? Which operating system?

When I'm log in and when I go to any menu, I've 2 kinds of error :

Is the login successful (Is the username shown instead of the login-button after the login?)
I assume it is, because then the error message would be different.

What you are seeing must be some glitch in the authentication between the manager and the API.

See also https://intelmq.readthedocs.io/en/latest/user/intelmq-api.html#access-denied-authentication-required-please-provide-valid-token-verification-credentials (but that does not really apply as you are using the API indirectly with the Manager). The Manager needs to pass the token to the API in its calls.

If you are up for some debugging, check what you see in the HTTP request headers of the API calls (using the debug tools of the browser).

[aragorne007]

@sebix

The documentation isn't enough complete I think :(

I'm not enough documented to try some debug with HTTP request

In "check" panel, I've this error :
error getting check command output

In "about" panel, I've 2 others error messages :
Error getting debugging information. Do you have IntelMQ >= 2.2.0?

error getting version

I don't know if it can help you or give you some clue ?

[sebix]

In order to reconstruct your error, it is still important to know if you installed the deb/rpm packages or via Pip or from git, and which operating system you are using?

The documentation isn't enough complete I think :(

Yes, I know. That section is not meant for the error you are experiencing, I linked it because it is related.

I'm not enough documented to try some debug with HTTP request

Which browser are you using? I can guide you.

In "check" panel, I've this error : error getting check command output

In "about" panel, I've 2 others error messages : Error getting debugging information. Do you have IntelMQ >= 2.2.0?

error getting version

All that indicates an error with the authentication, but no trace on the reasons.

I don't know if it can help you or give you some clue ?

I have no clue what the error is, either, but I am offering some of my spare time so we can debug it together.

[oencarnacion]

Hi @aragorne007 confirm me that in this /var/lib/ path you have a folder called dbconfig-common

[aragorne007]

Hello @sebix ;

I installed the package from pip3 install.

I'm using Google Chrome :)

Yes, It's what I expect, an authentication issue but I didn't find any log to prove that.

Hello @oencarnacion,

Yes, and "intelmq" user is the owner BUT I think that I've manually created this folder because it wasn't create during the installation.
That can helping you ?

Thank a lot for you help guys :)

[oencarnacion]

@aragorne007 The solution to your problem is to go to the /var/lib/ path, unzip the zip that I supply, give it read and write permission and then proceed to create the user and if you want, restart the server just in case and that's it, it should work for you. intelmq bug both for installation of binaries or through python.

You know @sebix :)

dbconfig-common.zip