Hello,

On 14 May 2013 10:22, nap <napar...@gmail.com> wrote:
> It's time for testing the new 1.4RC1 version. You can grab it from
> www.shinken-monitoring.org/pub/shinken-1.4rc1.tar.gz
>
> Please test it and look if you don't find any regressions.
>

I'm not sure whether this is a regression or if I'm doing something
wrong, but I just installed 1.4rc1 to try it out and could only log in once.

After restarting Shinken, I am no longer allowed past the initial
`/user/login` URL after using `install -a` to install some add-ons
(mongodb, nagvis, and nconf).

I have restarted the broker several times and I am sure that the
`htpasswd.users` has admin/admin as the password:

    root@shinken-1:/usr/local/shinken# htpasswd -bd
/usr/local/shinken/etc/htpasswd.users admin admin
    Updating password for user admin

    root@shinken-1:/usr/local/shinken# cat etc/htpasswd.users
    #is admin/admin
    admin:wpBiDEoypGXUo

The broker code logs that authentication is successfull:

    2013-05-16 15:38:50,651 Added task (0 tasks queued)
    2013-05-16 15:38:50,654 [1368718730] Debug :   PASSWD: admin
wpBiDEoypGXUo wp
    2013-05-16 15:38:50,656 [1368718730] Info :    Authentication success
    2013-05-16 15:38:50,666 Added task (0 tasks queued)

Still, I get redirected to an "invalid login" page:

    root@shinken-1:/usr/local/shinken# netstat -ltp | fgrep 7767
    tcp        0      0 *:7767                  *:*
 LISTEN      9542/python
    root@shinken-1:/usr/local/shinken# strace -f -p 9542 -s 1024
    [pid  9565] open("/usr/local/shinken/etc/htpasswd.users", O_RDONLY) = 12
    [pid  9565] fstat(12, {st_mode=S_IFREG|0664, st_size=36, ...}) = 0
    [pid  9565] fstat(12, {st_mode=S_IFREG|0664, st_size=36, ...}) = 0
    [pid  9565] mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdce5f01000
    [pid  9565] read(12, "#is admin/admin\nadmin:wpBiDEoypGXUo\n", 8192) = 36
    [pid  9565] read(12, "", 4096)          = 0
    ...
    [pid  9565] write(5, "2013-05-16 15:40:49,396 [1368718849] Debug :
PASSWD: admin wpBiDEoypGXUo wp\n", 78) = 78
    ...
    [pid  9565] write(5, "2013-05-16 15:40:49,398 [1368718849] Info :
  Authentication success\n", 70) = 70
    [pid  9565] close(12)                   = 0
    ...
    [pid  9565] write(2, "130.60.10.230 - - [16/May/2013:15:40:49
+0000] \"POST /user/auth HTTP/1.1\" 303 0
\"http://130.60.24.36:7767/user/login\"; \"Mozilla/5.0 (X11; Linux
x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63
Safari/537.31\"\n", 225) = 225
    [pid  9565] sendto(15, "HTTP/1.0 303 See Other\r\n", 24, 0, NULL, 0) = 24
    [pid  9565] sendto(15, "Server: PasteWSGIServer/0.5
Python/2.7.3\r\n", 42, 0, NULL, 0) = 42
    [pid  9565] gettimeofday({1368718849, 400606}, NULL) = 0
    [pid  9565] sendto(15, "Date: Thu, 16 May 2013 15:40:49 GMT\r\n",
37, 0, NULL, 0) = 37
    [pid  9565] sendto(15, "Content-Length: 0\r\n", 19, 0, NULL, 0) = 19
    [pid  9565] sendto(15, "Content-Type: text/html;
charset=UTF-8\r\n", 40, 0, NULL, 0) = 40
    [pid  9565] sendto(15, "Location:
http://130.60.24.36:7767/user/login?error=Invalid user or
Password\r\n", 78, 0, NULL, 0) = 78

   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Am I doing something wrong?

Thanks,
Riccardo

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Shinken-devel mailing list
Shinken-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Reply via email to