search

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.36k stars 161 forks source link

Application Not Authorized to use CAS #96

Closed ag-michael closed 3 years ago

ag-michael commented 3 years ago

I can't seem to get past this, I tried purging /var/lib/docker,reinstalling docker and see if it works with different configs. I tried setting the hostname as the local $(hostname) , I also tried setting it to the IP address I'm using to access the webui and other variants of hostname to no avail. This is very similar to #25 (hence identical title).

I turned on debug logging but I am not familiar enough with docker to know where else to look other than tomcat logs, this is the only error that shows up:

2020-10-18 00:47:23,429 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'vectrService'
com.mongodb.MongoSecurityException: Exception authenticating MongoCredential{mechanism=SCRAM-SHA-256, userName='admin', source='admin', password=<hidden>, mechanismProperties=<hidden>}
        at com.mongodb.internal.connection.SaslAuthenticator.wrapException(SaslAuthenticator.java:201)
        at com.mongodb.internal.connection.SaslAuthenticator.access$300(SaslAuthenticator.java:40)
        at com.mongodb.internal.connection.SaslAuthenticator$1.run(SaslAuthenticator.java:78)
        at com.mongodb.internal.connection.SaslAuthenticator$1.run(SaslAuthenticator.java:47)
        at com.mongodb.internal.connection.SaslAuthenticator.doAsSubject(SaslAuthenticator.java:207)
        at com.mongodb.internal.connection.SaslAuthenticator.authenticate(SaslAuthenticator.java:47)
        at com.mongodb.internal.connection.InternalStreamConnectionInitializer.authenticateAll(InternalStreamConnectionInitializer.java:156)
        at com.mongodb.internal.connection.InternalStreamConnectionInitializer.initialize(InternalStreamConnectionInitializer.java:63)
        at com.mongodb.internal.connection.InternalStreamConnection.open(InternalStreamConnection.java:129)
        at com.mongodb.internal.connection.UsageTrackingInternalConnection.open(UsageTrackingInternalConnection.java:50)
        at com.mongodb.internal.connection.DefaultConnectionPool$PooledConnection.open(DefaultConnectionPool.java:398)
        at com.mongodb.internal.connection.DefaultConnectionPool.get(DefaultConnectionPool.java:115)
        at com.mongodb.internal.connection.DefaultConnectionPool.get(DefaultConnectionPool.java:101)
        at com.mongodb.internal.connection.DefaultServer.getConnection(DefaultServer.java:92)
        at com.mongodb.binding.ClusterBinding$ClusterBindingConnectionSource.getConnection(ClusterBinding.java:126)
        at com.mongodb.operation.CommandOperationHelper$5.call(CommandOperationHelper.java:207)
        at com.mongodb.operation.OperationHelper.withReadConnectionSource(OperationHelper.java:463)
        at com.mongodb.operation.CommandOperationHelper.executeCommand(CommandOperationHelper.java:203)
        at com.mongodb.operation.ListDatabasesOperation.execute(ListDatabasesOperation.java:178)
        at com.mongodb.operation.ListDatabasesOperation.execute(ListDatabasesOperation.java:54)
        at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:196)
        at com.mongodb.client.internal.MongoIterableImpl.execute(MongoIterableImpl.java:143)
        at com.mongodb.client.internal.MongoIterableImpl.iterator(MongoIterableImpl.java:92)
        at com.mongodb.client.internal.MappingIterable.iterator(MappingIterable.java:39)
        at com.sra.mongodb.MongoOperations.getDatabaseNames(MongoOperations.java:110)
        at com.sra.purpletools.mongomodel.VectrMongoConnection.getDatabaseNames(VectrMongoConnection.java:306)
        at com.sra.purpletools.rest.service.impl.VectrService.init(VectrService.java:33)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:566)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeCustomInitMethod(AbstractAutowireCapableBeanFactory.java:1922)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1864)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1792)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:595)
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:517)
        at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:323)
        at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)
        at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:321)
        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:202)
        at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:879)
        at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:878)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:550)
        at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:401)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:292)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:103)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4678)
        at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5139)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:705)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:978)
        at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1848)
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
        at java.base/java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:118)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:773)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:427)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1576)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:309)
        at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
        at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
        at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
        at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)
        at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:841)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
        at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384)
        at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1374)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
        at java.base/java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:140)
        at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:909)
        at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:262)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
        at org.apache.catalina.core.StandardService.startInternal(StandardService.java:421)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
        at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:930)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:738)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:566)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:342)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:473)
Caused by: com.mongodb.MongoCommandException: Command failed with error 18 (AuthenticationFailed): 'Authentication failed.' on server vectr-mongo:27017. The full response is {"ok": 0.0, "errmsg": "Authentication failed.", "code": 18, "codeName": "AuthenticationFailed"}
        at com.mongodb.internal.connection.ProtocolHelper.getCommandFailureException(ProtocolHelper.java:175)
        at com.mongodb.internal.connection.InternalStreamConnection.receiveCommandMessageResponse(InternalStreamConnection.java:303)
        at com.mongodb.internal.connection.InternalStreamConnection.sendAndReceive(InternalStreamConnection.java:259)
        at com.mongodb.internal.connection.CommandHelper.sendAndReceive(CommandHelper.java:83)
        at com.mongodb.internal.connection.CommandHelper.executeCommand(CommandHelper.java:33)
        at com.mongodb.internal.connection.SaslAuthenticator.sendSaslContinue(SaslAuthenticator.java:162)
        at com.mongodb.internal.connection.SaslAuthenticator.access$200(SaslAuthenticator.java:40)
        at com.mongodb.internal.connection.SaslAuthenticator$1.run(SaslAuthenticator.java:67)
        ... 84 more
2020-10-18 00:47:23,584 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'assessmentResource'

I'm using the instructions from the docs to install (no custom scripts or configs outside of .env file) , I also tried creating a SSL cert as suggested in #25 (even though I'm not using TLS/SSL at all. Where else can I look? I realize this is a mongo authentication issue, would it cause the error in question? and how would I fix it?

thebleucheese commented 3 years ago

You’ll need to delete the data directory. The first time the Mongo DB starts up it initialized the db with the key set in the .env file. That key was changed so the data directory needs to be wiped.

The default data dir is /var/data/sandbox1 I believe. Once deleted you can restart all the containers and it should work.

ag-michael commented 3 years ago

@thebleucheese That fixed the mongodb connection error but the issue still remains, I can't even get to the login page, this is the tomcat logs:

18-Oct-2020 03:37:54.134 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive [/usr/local/tomcat/webapps/sra-purpletools-rest.war]
18-Oct-2020 03:37:58.100 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
2020-10-18 03:37:58,471 INFO [org.springframework.web.context.ContextLoader] - Root WebApplicationContext: initialization started
2020-10-18 03:37:58,559 DEBUG [org.springframework.web.context.support.XmlWebApplicationContext] - Refreshing Root WebApplicationContext
2020-10-18 03:37:58,880 DEBUG [org.springframework.beans.factory.xml.XmlBeanDefinitionReader] - Loaded 4 bean definitions from class path resource [META-INF/cxf/cxf.xml]
2020-10-18 03:37:58,901 DEBUG [org.springframework.beans.factory.xml.XmlBeanDefinitionReader] - Loaded 0 bean definitions from class path resource [META-INF/cxf/cxf-servlet.xml]
2020-10-18 03:37:59,030 DEBUG [org.springframework.beans.factory.xml.XmlBeanDefinitionReader] - Loaded 69 bean definitions from ServletContext resource [/WEB-INF/rest-servlet.xml]
2020-10-18 03:37:59,115 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'org.apache.cxf.bus.spring.BusWiringBeanFactoryPostProcessor'
2020-10-18 03:37:59,133 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'org.apache.cxf.bus.spring.Jsr250BeanPostProcessor'
2020-10-18 03:37:59,139 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'org.apache.cxf.bus.spring.BusExtensionPostProcessor'
2020-10-18 03:37:59,146 DEBUG [org.springframework.ui.context.support.UiApplicationContextUtils] - Unable to locate ThemeSource with name 'themeSource': using default [org.springframework.ui.context.support.ResourceBundleThemeSource@7e56395f]
2020-10-18 03:37:59,147 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'cxf'
2020-10-18 03:37:59,253 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'cxf.config0'
2020-10-18 03:37:59,266 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'jsonProvider'
2020-10-18 03:37:59,290 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'jaxbProvider'
2020-10-18 03:37:59,295 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'propertiesMap'
2020-10-18 03:37:59,335 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'vectrConfig'
2020-10-18 03:37:59,404 DEBUG [org.apache.commons.beanutils.converters.BooleanConverter] - Setting default value: false
2020-10-18 03:37:59,405 DEBUG [org.apache.commons.beanutils.converters.BooleanConverter] - Converting 'Boolean' value 'false' to type 'Boolean'
2020-10-18 03:37:59,405 DEBUG [org.apache.commons.beanutils.converters.BooleanConverter] -     No conversion required, value is already a Boolean
2020-10-18 03:37:59,409 DEBUG [org.apache.commons.beanutils.converters.ByteConverter] - Setting default value: 0
2020-10-18 03:37:59,409 DEBUG [org.apache.commons.beanutils.converters.ByteConverter] - Converting 'Integer' value '0' to type 'Byte'
2020-10-18 03:37:59,409 DEBUG [org.apache.commons.beanutils.converters.ByteConverter] -     Converted to Byte value '0'
2020-10-18 03:37:59,410 DEBUG [org.apache.commons.beanutils.converters.CharacterConverter] - Setting default value:  
2020-10-18 03:37:59,410 DEBUG [org.apache.commons.beanutils.converters.CharacterConverter] - Converting 'Character' value ' ' to type 'Character'
2020-10-18 03:37:59,410 DEBUG [org.apache.commons.beanutils.converters.CharacterConverter] -     No conversion required, value is already a Character
2020-10-18 03:37:59,411 DEBUG [org.apache.commons.beanutils.converters.DoubleConverter] - Setting default value: 0
2020-10-18 03:37:59,411 DEBUG [org.apache.commons.beanutils.converters.DoubleConverter] - Converting 'Integer' value '0' to type 'Double'
2020-10-18 03:37:59,412 DEBUG [org.apache.commons.beanutils.converters.DoubleConverter] -     Converted to Double value '0.0'
2020-10-18 03:37:59,412 DEBUG [org.apache.commons.beanutils.converters.FloatConverter] - Setting default value: 0
2020-10-18 03:37:59,412 DEBUG [org.apache.commons.beanutils.converters.FloatConverter] - Converting 'Integer' value '0' to type 'Float'
2020-10-18 03:37:59,412 DEBUG [org.apache.commons.beanutils.converters.FloatConverter] -     Converted to Float value '0.0'
2020-10-18 03:37:59,413 DEBUG [org.apache.commons.beanutils.converters.IntegerConverter] - Setting default value: 0
2020-10-18 03:37:59,413 DEBUG [org.apache.commons.beanutils.converters.IntegerConverter] - Converting 'Integer' value '0' to type 'Integer'
2020-10-18 03:37:59,413 DEBUG [org.apache.commons.beanutils.converters.IntegerConverter] -     No conversion required, value is already a Integer
2020-10-18 03:37:59,415 DEBUG [org.apache.commons.beanutils.converters.LongConverter] - Setting default value: 0
2020-10-18 03:37:59,416 DEBUG [org.apache.commons.beanutils.converters.LongConverter] - Converting 'Integer' value '0' to type 'Long'
2020-10-18 03:37:59,416 DEBUG [org.apache.commons.beanutils.converters.LongConverter] -     Converted to Long value '0'
2020-10-18 03:37:59,417 DEBUG [org.apache.commons.beanutils.converters.ShortConverter] - Setting default value: 0
2020-10-18 03:37:59,417 DEBUG [org.apache.commons.beanutils.converters.ShortConverter] - Converting 'Integer' value '0' to type 'Short'
2020-10-18 03:37:59,418 DEBUG [org.apache.commons.beanutils.converters.ShortConverter] -     Converted to Short value '0'
2020-10-18 03:37:59,418 DEBUG [org.apache.commons.beanutils.converters.BigDecimalConverter] - Setting default value: 0.0
2020-10-18 03:37:59,419 DEBUG [org.apache.commons.beanutils.converters.BigDecimalConverter] - Converting 'BigDecimal' value '0.0' to type 'BigDecimal'
2020-10-18 03:37:59,419 DEBUG [org.apache.commons.beanutils.converters.BigDecimalConverter] -     No conversion required, value is already a BigDecimal
2020-10-18 03:37:59,420 DEBUG [org.apache.commons.beanutils.converters.BigIntegerConverter] - Setting default value: 0
2020-10-18 03:37:59,420 DEBUG [org.apache.commons.beanutils.converters.BigIntegerConverter] - Converting 'BigInteger' value '0' to type 'BigInteger'
2020-10-18 03:37:59,420 DEBUG [org.apache.commons.beanutils.converters.BigIntegerConverter] -     No conversion required, value is already a BigInteger
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.BooleanConverter] - Setting default value: false
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.BooleanConverter] - Converting 'Boolean' value 'false' to type 'Boolean'
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.BooleanConverter] -     No conversion required, value is already a Boolean
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.ByteConverter] - Setting default value: 0
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.ByteConverter] - Converting 'Integer' value '0' to type 'Byte'
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.ByteConverter] -     Converted to Byte value '0'
2020-10-18 03:37:59,421 DEBUG [org.apache.commons.beanutils.converters.CharacterConverter] - Setting default value:  
2020-10-18 03:37:59,422 DEBUG [org.apache.commons.beanutils.converters.CharacterConverter] - Converting 'Character' value ' ' to type 'Character'
2020-10-18 03:37:59,422 DEBUG [org.apache.commons.beanutils.converters.CharacterConverter] -     No conversion required, value is already a Character
2020-10-18 03:37:59,422 DEBUG [org.apache.commons.beanutils.converters.DoubleConverter] - Setting default value: 0
2020-10-18 03:37:59,422 DEBUG [org.apache.commons.beanutils.converters.DoubleConverter] - Converting 'Integer' value '0' to type 'Double'
2020-10-18 03:37:59,423 DEBUG [org.apache.commons.beanutils.converters.DoubleConverter] -     Converted to Double value '0.0'
2020-10-18 03:37:59,423 DEBUG [org.apache.commons.beanutils.converters.FloatConverter] - Setting default value: 0
2020-10-18 03:37:59,423 DEBUG [org.apache.commons.beanutils.converters.FloatConverter] - Converting 'Integer' value '0' to type 'Float'
2020-10-18 03:37:59,423 DEBUG [org.apache.commons.beanutils.converters.FloatConverter] -     Converted to Float value '0.0'
2020-10-18 03:37:59,424 DEBUG [org.apache.commons.beanutils.converters.IntegerConverter] - Setting default value: 0
2020-10-18 03:37:59,424 DEBUG [org.apache.commons.beanutils.converters.IntegerConverter] - Converting 'Integer' value '0' to type 'Integer'
2020-10-18 03:37:59,424 DEBUG [org.apache.commons.beanutils.converters.IntegerConverter] -     No conversion required, value is already a Integer
2020-10-18 03:37:59,424 DEBUG [org.apache.commons.beanutils.converters.LongConverter] - Setting default value: 0
2020-10-18 03:37:59,424 DEBUG [org.apache.commons.beanutils.converters.LongConverter] - Converting 'Integer' value '0' to type 'Long'
2020-10-18 03:37:59,425 DEBUG [org.apache.commons.beanutils.converters.LongConverter] -     Converted to Long value '0'
2020-10-18 03:37:59,425 DEBUG [org.apache.commons.beanutils.converters.ShortConverter] - Setting default value: 0
2020-10-18 03:37:59,425 DEBUG [org.apache.commons.beanutils.converters.ShortConverter] - Converting 'Integer' value '0' to type 'Short'
2020-10-18 03:37:59,425 DEBUG [org.apache.commons.beanutils.converters.ShortConverter] -     Converted to Short value '0'
2020-10-18 03:37:59,426 DEBUG [org.apache.commons.beanutils.converters.StringConverter] - Setting default value: 
2020-10-18 03:37:59,426 DEBUG [org.apache.commons.beanutils.converters.StringConverter] - Converting 'String' value '' to type 'String'
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Z@257e0093
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'boolean[]' value '[Z@257e0093' to type 'boolean[]'
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a boolean[]
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [B@7400de1b
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'byte[]' value '[B@7400de1b' to type 'byte[]'
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a byte[]
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [C@34f454f1
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'char[]' value '[C@34f454f1' to type 'char[]'
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a char[]
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [D@7baaff6f
2020-10-18 03:37:59,431 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'double[]' value '[D@7baaff6f' to type 'double[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a double[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [F@2e851211
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'float[]' value '[F@2e851211' to type 'float[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a float[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [I@5c87e1dc
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'int[]' value '[I@5c87e1dc' to type 'int[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a int[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [J@4a427561
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'long[]' value '[J@4a427561' to type 'long[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a long[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [S@663faac1
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'short[]' value '[S@663faac1' to type 'short[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a short[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.math.BigDecimal;@602c298d
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'BigDecimal[]' value '[Ljava.math.BigDecimal;@602c298d' to type 'BigDecimal[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a BigDecimal[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.math.BigInteger;@346ad55
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'BigInteger[]' value '[Ljava.math.BigInteger;@346ad55' to type 'BigInteger[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a BigInteger[]
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Boolean;@5af62921
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Boolean[]' value '[Ljava.lang.Boolean;@5af62921' to type 'Boolean[]'
2020-10-18 03:37:59,432 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Boolean[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Byte;@4104f91c
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Byte[]' value '[Ljava.lang.Byte;@4104f91c' to type 'Byte[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Byte[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Character;@4065d0f0
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Character[]' value '[Ljava.lang.Character;@4065d0f0' to type 'Character[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Character[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Double;@76fff1ac
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Double[]' value '[Ljava.lang.Double;@76fff1ac' to type 'Double[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Double[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Float;@1d2b7173
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Float[]' value '[Ljava.lang.Float;@1d2b7173' to type 'Float[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Float[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Integer;@7b81b7d3
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Integer[]' value '[Ljava.lang.Integer;@7b81b7d3' to type 'Integer[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Integer[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Long;@150d1a03
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Long[]' value '[Ljava.lang.Long;@150d1a03' to type 'Long[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Long[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Short;@1c76eb9f
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Short[]' value '[Ljava.lang.Short;@1c76eb9f' to type 'Short[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Short[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.String;@5a10b18b
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'String[]' value '[Ljava.lang.String;@5a10b18b' to type 'String[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a String[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.lang.Class;@2cd9aa35
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Class[]' value '[Ljava.lang.Class;@2cd9aa35' to type 'Class[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Class[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.util.Date;@51f960af
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Date[]' value '[Ljava.util.Date;@51f960af' to type 'Date[]'
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Date[]
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.util.Calendar;@7af8531c
2020-10-18 03:37:59,433 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'Calendar[]' value '[Ljava.util.Calendar;@7af8531c' to type 'Calendar[]'
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a Calendar[]
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.io.File;@25bb2921
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'java.io.File[]' value '[Ljava.io.File;@25bb2921' to type 'java.io.File[]'
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a java.io.File[]
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.sql.Date;@4452b7a1
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'java.sql.Date[]' value '[Ljava.sql.Date;@4452b7a1' to type 'java.sql.Date[]'
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a java.sql.Date[]
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.sql.Time;@5e344b9c
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'java.sql.Time[]' value '[Ljava.sql.Time;@5e344b9c' to type 'java.sql.Time[]'
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a java.sql.Time[]
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.sql.Timestamp;@66ec93f5
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'java.sql.Timestamp[]' value '[Ljava.sql.Timestamp;@66ec93f5' to type 'java.sql.Timestamp[]'
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a java.sql.Timestamp[]
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Setting default value: [Ljava.net.URL;@1a625c28
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] - Converting 'java.net.URL[]' value '[Ljava.net.URL;@1a625c28' to type 'java.net.URL[]'
2020-10-18 03:37:59,434 DEBUG [org.apache.commons.beanutils.converters.ArrayConverter] -     No conversion required, value is already a java.net.URL[]
2020-10-18 03:37:59,471 DEBUG [org.apache.commons.configuration2.io.FileLocatorUtils] - Loading configuration from the context classpath (vectr.properties)
2020-10-18 03:37:59,473 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'graphQL'
2020-10-18 03:37:59,830 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'gqlFilterMap'
2020-10-18 03:37:59,832 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoHost'
2020-10-18 03:37:59,839 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoPort'
2020-10-18 03:37:59,840 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoUserDecoded'
2020-10-18 03:37:59,896 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoPassDecoded'
2020-10-18 03:37:59,898 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'utf8'
2020-10-18 03:37:59,900 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoPass'
2020-10-18 03:37:59,901 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoUser'
2020-10-18 03:37:59,902 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'jwtValidationUrl'
2020-10-18 03:37:59,903 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'apiKeyValidationUrl'
2020-10-18 03:37:59,904 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'manualBackupPath'
2020-10-18 03:37:59,905 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mongoAddress'
2020-10-18 03:37:59,987 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'vectrDbImplementation'
2020-10-18 03:38:00,229 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'setDBImplementation'
2020-10-18 03:38:00,230 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'vectrService'
2020-10-18 03:38:00,387 DEBUG [org.reflections.Reflections] - going to scan these urls:
jar:file:/usr/local/tomcat/webapps/sra-purpletools-rest/WEB-INF/lib/sra-purpletools-dbmigrations-5.7.0.jar!/
2020-10-18 03:38:00,459 INFO [org.reflections.Reflections] - Reflections took 71 ms to scan 1 urls, producing 4 keys and 53 values 
2020-10-18 03:38:00,475 DEBUG [org.reflections.Reflections] - expanded subtype java.util.AbstractMap -> java.util.HashMap
2020-10-18 03:38:00,475 DEBUG [org.reflections.Reflections] - expanded subtype java.util.Map -> java.util.AbstractMap
2020-10-18 03:38:00,475 DEBUG [org.reflections.Reflections] - expanded subtype java.util.Map -> java.util.HashMap
2020-10-18 03:38:00,475 DEBUG [org.reflections.Reflections] - expanded subtype java.lang.Cloneable -> java.util.HashMap
2020-10-18 03:38:00,475 DEBUG [org.reflections.Reflections] - expanded subtype java.io.Serializable -> java.util.HashMap
2020-10-18 03:38:00,476 DEBUG [org.reflections.Reflections] - expanded subtype java.lang.Comparable -> com.fasterxml.jackson.core.type.TypeReference
2020-10-18 03:38:00,573 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'assessmentResource'
2020-10-18 03:38:00,580 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'databaseManagementResource'
2020-10-18 03:38:00,585 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'migrationLogResource'
2020-10-18 03:38:00,585 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'assessmentGroupResource'
2020-10-18 03:38:00,588 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'rtaResource'
2020-10-18 03:38:00,589 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'taxiiResource'
2020-10-18 03:38:00,591 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'tempImportResource'
2020-10-18 03:38:00,592 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'killChainResource'
2020-10-18 03:38:00,594 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'vendorResource'
2020-10-18 03:38:00,596 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'blueProductResource'
2020-10-18 03:38:00,598 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'redProductResource'
2020-10-18 03:38:00,598 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'phaseResource'
2020-10-18 03:38:00,601 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'targetAssetResource'
2020-10-18 03:38:00,603 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'sourceIpResource'
2020-10-18 03:38:00,604 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'expectedDetectionLayerResource'
2020-10-18 03:38:00,611 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'testCaseResource'
2020-10-18 03:38:00,614 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'documentStorageResource'
2020-10-18 03:38:00,615 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'fileResource'
2020-10-18 03:38:00,615 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'dataImportResource'
2020-10-18 03:38:00,616 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'exportResource'
2020-10-18 03:38:00,617 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'timelineResource'
2020-10-18 03:38:00,619 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'reportingResource'
2020-10-18 03:38:00,631 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'detectionRuleResource'
2020-10-18 03:38:00,633 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'genericRuleResource'
2020-10-18 03:38:00,635 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'genericRuleSourceResource'
2020-10-18 03:38:00,637 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'analysisEngineRuleResource'
2020-10-18 03:38:00,639 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'dataSourceResource'
2020-10-18 03:38:00,640 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'taggingResource'
2020-10-18 03:38:00,641 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'organizationResource'
2020-10-18 03:38:00,642 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'heatmapResource'
2020-10-18 03:38:00,644 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'mitreIdResource'
2020-10-18 03:38:00,645 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'graphqlResource'
2020-10-18 03:38:00,652 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'updateResource'
2020-10-18 03:38:00,653 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'configurationResource'
2020-10-18 03:38:00,654 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'logImportResource'
2020-10-18 03:38:00,655 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'attackLogResource'
2020-10-18 03:38:00,655 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'httpResponseHeaderInterceptor'
2020-10-18 03:38:00,663 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'securityFeature'
2020-10-18 03:38:00,669 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'exceptionMapper'
2020-10-18 03:38:00,669 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'validationExceptionMapper'
2020-10-18 03:38:00,670 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'validationProvider'
2020-10-18 03:38:00,706 DEBUG [org.jboss.logging] - Logging Provider: org.jboss.logging.Log4j2LoggerProvider
2020-10-18 03:38:00,707 INFO [org.hibernate.validator.internal.util.Version] - HV000001: Hibernate Validator 6.1.0.Final
2020-10-18 03:38:00,713 DEBUG [org.hibernate.validator.internal.engine.resolver.TraversableResolvers] - Cannot find javax.persistence.Persistence on classpath. Assuming non JPA 2 environment. All properties will per default be traversable.
2020-10-18 03:38:00,719 DEBUG [org.hibernate.validator.internal.xml.config.ValidationXmlParser] - Trying to load META-INF/validation.xml for XML based Validator configuration.
2020-10-18 03:38:00,721 DEBUG [org.hibernate.validator.internal.xml.config.ResourceLoaderHelper] - Trying to load META-INF/validation.xml via TCCL
2020-10-18 03:38:00,722 DEBUG [org.hibernate.validator.internal.xml.config.ResourceLoaderHelper] - Trying to load META-INF/validation.xml via Hibernate Validator's class loader
2020-10-18 03:38:00,722 DEBUG [org.hibernate.validator.internal.xml.config.ValidationXmlParser] - No META-INF/validation.xml found. Using annotation based configuration only.
2020-10-18 03:38:00,750 DEBUG [org.hibernate.validator.messageinterpolation.ResourceBundleMessageInterpolator] - Loaded expression factory via original TCCL
2020-10-18 03:38:00,912 DEBUG [org.hibernate.validator.internal.engine.ValidatorFactoryConfigurationHelper] - HV000252: Using org.hibernate.validator.internal.engine.DefaultPropertyNodeNameProvider as property node name provider.
2020-10-18 03:38:00,920 DEBUG [org.hibernate.validator.internal.engine.ValidatorFactoryConfigurationHelper] - HV000234: Using org.hibernate.validator.messageinterpolation.ResourceBundleMessageInterpolator as ValidatorFactory-scoped message interpolator.
2020-10-18 03:38:00,920 DEBUG [org.hibernate.validator.internal.engine.ValidatorFactoryConfigurationHelper] - HV000234: Using org.hibernate.validator.internal.engine.resolver.TraverseAllTraversableResolver as ValidatorFactory-scoped traversable resolver.
2020-10-18 03:38:00,920 DEBUG [org.hibernate.validator.internal.engine.ValidatorFactoryConfigurationHelper] - HV000234: Using org.hibernate.validator.internal.util.ExecutableParameterNameProvider as ValidatorFactory-scoped parameter name provider.
2020-10-18 03:38:00,920 DEBUG [org.hibernate.validator.internal.engine.ValidatorFactoryConfigurationHelper] - HV000234: Using org.hibernate.validator.internal.engine.DefaultClockProvider as ValidatorFactory-scoped clock provider.
2020-10-18 03:38:00,920 DEBUG [org.hibernate.validator.internal.engine.ValidatorFactoryConfigurationHelper] - HV000234: Using org.hibernate.validator.internal.engine.scripting.DefaultScriptEvaluatorFactory as ValidatorFactory-scoped script evaluator factory.
2020-10-18 03:38:00,920 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'validationInInterceptor'
2020-10-18 03:38:00,933 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'validationOutInterceptor'
2020-10-18 03:38:00,940 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Creating shared instance of singleton bean 'purpletools'
18-Oct-2020 03:38:01.130 INFO [main] org.apache.cxf.endpoint.ServerImpl.initDestination Setting the server's publish address to be /
2020-10-18 03:38:01,203 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.getAll
2020-10-18 03:38:01,215 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.getCollections
2020-10-18 03:38:01,218 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.getShareList
2020-10-18 03:38:01,222 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.getVectrImportSummary
2020-10-18 03:38:01,224 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaxiiResource.deleteTaxiiServer
2020-10-18 03:38:01,226 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaxiiResource.postObjectsToCollection
2020-10-18 03:38:01,233 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaxiiResource.editTaxiiServer
2020-10-18 03:38:01,235 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaxiiResource.confirmVectrImport
2020-10-18 03:38:01,246 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.downloadBundle
2020-10-18 03:38:01,249 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.getHighLevelDataSummary
2020-10-18 03:38:01,254 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaxiiResource.addTaxiiServer
2020-10-18 03:38:01,256 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaxiiResource.importStixTaxiiData
2020-10-18 03:38:01,260 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaxiiResource.getCanShareVectrData
2020-10-18 03:38:01,262 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TempImportResource.getMinimalTempAssessments
2020-10-18 03:38:01,266 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TempImportResource.getMinimalTempAssessmentGroups
2020-10-18 03:38:01,269 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TempImportResource.getMinimalTempTestCases
2020-10-18 03:38:01,272 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TempImportResource.copyTempImportToDb
2020-10-18 03:38:01,277 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TempImportResource.cleanupTempImport
2020-10-18 03:38:01,280 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TempImportResource.importStixFromFileToTempDb
2020-10-18 03:38:01,283 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TempImportResource.importAttackNavigatorLayerFromFile
2020-10-18 03:38:01,287 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TempImportResource.importAtomicRedFromFile
2020-10-18 03:38:01,289 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAll
2020-10-18 03:38:01,296 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentResource.order
2020-10-18 03:38:01,299 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAssessmentTestCases
2020-10-18 03:38:01,302 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAssessments
2020-10-18 03:38:01,304 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAssessmentInfo
2020-10-18 03:38:01,306 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAssessmentsByGroupId
2020-10-18 03:38:01,308 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAssessmentInfoFromGroup
2020-10-18 03:38:01,310 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getTimelineEnums
2020-10-18 03:38:01,312 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getAssessmentEnums
2020-10-18 03:38:01,315 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentResource.cloneAssessmentGroup
2020-10-18 03:38:01,316 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.getTemplateNames
2020-10-18 03:38:01,318 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentResource.get
2020-10-18 03:38:01,320 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentResource.delete
2020-10-18 03:38:01,323 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentResource.deleteData
2020-10-18 03:38:01,325 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentResource.update
2020-10-18 03:38:01,327 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentResource.create
2020-10-18 03:38:01,331 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentGroupResource.getAll
2020-10-18 03:38:01,333 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.order
2020-10-18 03:38:01,334 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentGroupResource.getAssessmentTemplates
2020-10-18 03:38:01,336 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.createReturnFull
2020-10-18 03:38:01,339 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.cloneReturnFull
2020-10-18 03:38:01,342 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentGroupResource.getUpdateConflictReport
2020-10-18 03:38:01,345 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentGroupResource.getAllAssessmentGroupInfo
2020-10-18 03:38:01,346 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.cloneAssessmentGroup
2020-10-18 03:38:01,348 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AssessmentGroupResource.get
2020-10-18 03:38:01,350 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.delete
2020-10-18 03:38:01,351 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.deleteData
2020-10-18 03:38:01,353 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.update
2020-10-18 03:38:01,355 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AssessmentGroupResource.create
2020-10-18 03:38:01,365 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on KillChainResource.getAll
2020-10-18 03:38:01,367 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on KillChainResource.order
2020-10-18 03:38:01,368 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on KillChainResource.get
2020-10-18 03:38:01,371 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on KillChainResource.delete
2020-10-18 03:38:01,373 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on KillChainResource.deleteData
2020-10-18 03:38:01,375 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on KillChainResource.update
2020-10-18 03:38:01,377 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on KillChainResource.create
2020-10-18 03:38:01,378 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on VendorsResource.getAll
2020-10-18 03:38:01,380 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on VendorsResource.order
2020-10-18 03:38:01,382 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on VendorsResource.get
2020-10-18 03:38:01,383 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on VendorsResource.delete
2020-10-18 03:38:01,385 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on VendorsResource.deleteData
2020-10-18 03:38:01,388 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on VendorsResource.update
2020-10-18 03:38:01,391 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on VendorsResource.create
2020-10-18 03:38:01,393 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on BlueProductResource.getAll
2020-10-18 03:38:01,397 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on BlueProductResource.getEnums
2020-10-18 03:38:01,399 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on BlueProductResource.get
2020-10-18 03:38:01,401 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on BlueProductResource.delete
2020-10-18 03:38:01,403 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on BlueProductResource.deleteData
2020-10-18 03:38:01,405 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on BlueProductResource.update
2020-10-18 03:38:01,407 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on BlueProductResource.create
2020-10-18 03:38:01,409 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on RedProductResource.getAll
2020-10-18 03:38:01,413 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on RedProductResource.getEnums
2020-10-18 03:38:01,415 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on RedProductResource.get
2020-10-18 03:38:01,417 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on RedProductResource.delete
2020-10-18 03:38:01,419 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on RedProductResource.deleteData
2020-10-18 03:38:01,421 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on RedProductResource.update
2020-10-18 03:38:01,423 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on RedProductResource.create
2020-10-18 03:38:01,425 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on PhaseResource.getAll
2020-10-18 03:38:01,428 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on PhaseResource.order
2020-10-18 03:38:01,433 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on PhaseResource.getActivePhases
2020-10-18 03:38:01,436 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on PhaseResource.getAssessmentActivePhases
2020-10-18 03:38:01,441 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on PhaseResource.getPhaseEnums
2020-10-18 03:38:01,445 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on PhaseResource.get
2020-10-18 03:38:01,448 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on PhaseResource.delete
2020-10-18 03:38:01,454 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on PhaseResource.deleteData
2020-10-18 03:38:01,456 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on PhaseResource.update
2020-10-18 03:38:01,459 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on PhaseResource.create
2020-10-18 03:38:01,460 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TargetAssetResource.getAll
2020-10-18 03:38:01,462 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TargetAssetResource.order
2020-10-18 03:38:01,464 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TargetAssetResource.getTargetAssetEnums
2020-10-18 03:38:01,466 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TargetAssetResource.get
2020-10-18 03:38:01,468 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TargetAssetResource.delete
2020-10-18 03:38:01,471 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TargetAssetResource.deleteData
2020-10-18 03:38:01,473 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TargetAssetResource.update
2020-10-18 03:38:01,476 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TargetAssetResource.create
2020-10-18 03:38:01,478 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on SourceIpResource.getAll
2020-10-18 03:38:01,480 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on SourceIpResource.order
2020-10-18 03:38:01,482 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on SourceIpResource.getEnums
2020-10-18 03:38:01,484 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on SourceIpResource.get
2020-10-18 03:38:01,486 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on SourceIpResource.delete
2020-10-18 03:38:01,488 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on SourceIpResource.deleteData
2020-10-18 03:38:01,490 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on SourceIpResource.update
2020-10-18 03:38:01,492 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on SourceIpResource.create
2020-10-18 03:38:01,494 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ExpectedDetectionLayersResource.getAll
2020-10-18 03:38:01,500 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ExpectedDetectionLayersResource.order
2020-10-18 03:38:01,503 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ExpectedDetectionLayersResource.cloneFromGold
2020-10-18 03:38:01,505 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ExpectedDetectionLayersResource.get
2020-10-18 03:38:01,507 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ExpectedDetectionLayersResource.delete
2020-10-18 03:38:01,509 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ExpectedDetectionLayersResource.deleteData
2020-10-18 03:38:01,511 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ExpectedDetectionLayersResource.update
2020-10-18 03:38:01,513 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ExpectedDetectionLayersResource.create
2020-10-18 03:38:01,518 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.getAll
2020-10-18 03:38:01,520 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.order
2020-10-18 03:38:01,522 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.getTestCaseEnums
2020-10-18 03:38:01,524 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.getBadTestCases
2020-10-18 03:38:01,526 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.getOrphanedTestCases
2020-10-18 03:38:01,529 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.getTestCases
2020-10-18 03:38:01,531 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.getAllIconLocations
2020-10-18 03:38:01,534 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.cloneFromGoldTestCases
2020-10-18 03:38:01,536 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.deprecateCheck
2020-10-18 03:38:01,543 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.deprecate
2020-10-18 03:38:01,546 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TestCaseResource.get
2020-10-18 03:38:01,552 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.delete
2020-10-18 03:38:01,559 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.deleteData
2020-10-18 03:38:01,564 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.update
2020-10-18 03:38:01,567 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TestCaseResource.create
2020-10-18 03:38:01,570 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DocumentStorageResource.getDocument
2020-10-18 03:38:01,572 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DocumentStorageResource.getListByIds
2020-10-18 03:38:01,574 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DocumentStorageResource.updateTemplateDoc
2020-10-18 03:38:01,577 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DocumentStorageResource.getList
2020-10-18 03:38:01,580 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DocumentStorageResource.deleteRecord
2020-10-18 03:38:01,582 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on FileResource.uploadYmlFile
2020-10-18 03:38:01,586 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on FileResource.uploadAnyFile
2020-10-18 03:38:01,588 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on FileResource.deleteTempFile
2020-10-18 03:38:01,591 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on FileResource.uploadJsonFile
2020-10-18 03:38:01,594 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataImportResource.getVectrImportSummary
2020-10-18 03:38:01,596 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataImportResource.getVectrImportDiff
2020-10-18 03:38:01,598 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataImportResource.getVectrFileShareData
2020-10-18 03:38:01,600 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataImportResource.getImportFileType
2020-10-18 03:38:01,602 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataImportResource.getImportJSON
2020-10-18 03:38:01,604 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ExportResource.getStixifiedVectrShareBundle
2020-10-18 03:38:01,609 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.getAll
2020-10-18 03:38:01,613 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.getTimelineEnums
2020-10-18 03:38:01,616 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.getAssessmentTimelineEvents
2020-10-18 03:38:01,619 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.getPhaseTimelineEvents
2020-10-18 03:38:01,623 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.getTimelineEventById
2020-10-18 03:38:01,626 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TimelineResource.previewDelete
2020-10-18 03:38:01,633 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.getTestCaseTimelineEvents
2020-10-18 03:38:01,639 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TimelineResource.get
2020-10-18 03:38:01,642 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TimelineResource.delete
2020-10-18 03:38:01,645 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TimelineResource.deleteData
2020-10-18 03:38:01,647 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TimelineResource.update
2020-10-18 03:38:01,650 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TimelineResource.create
2020-10-18 03:38:01,652 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getDownloadReportTypeEnums
2020-10-18 03:38:01,654 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getWebUIReportingDataForAssessmentGroup
2020-10-18 03:38:01,657 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getWebUIReportingDataForAssessment
2020-10-18 03:38:01,659 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getWebUIReportingDataForTestCase
2020-10-18 03:38:01,661 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.downloadReport
2020-10-18 03:38:01,664 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getPhaseDetectionBreakdownPieData
2020-10-18 03:38:01,666 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getDetectionBreakdownPieData
2020-10-18 03:38:01,669 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.getGroupDetectionBreakdownPieData
2020-10-18 03:38:01,674 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.dumpCampaigns
2020-10-18 03:38:01,679 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ReportingResource.downloadEvidenceFiles
2020-10-18 03:38:01,681 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DetectionRuleResource.getAll
2020-10-18 03:38:01,684 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DetectionRuleResource.order
2020-10-18 03:38:01,687 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DetectionRuleResource.get
2020-10-18 03:38:01,690 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DetectionRuleResource.delete
2020-10-18 03:38:01,693 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DetectionRuleResource.deleteData
2020-10-18 03:38:01,695 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DetectionRuleResource.update
2020-10-18 03:38:01,699 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DetectionRuleResource.create
2020-10-18 03:38:01,701 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AnalysisEngineRuleResource.getAll
2020-10-18 03:38:01,704 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AnalysisEngineRuleResource.get
2020-10-18 03:38:01,707 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AnalysisEngineRuleResource.delete
2020-10-18 03:38:01,710 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AnalysisEngineRuleResource.deleteData
2020-10-18 03:38:01,712 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AnalysisEngineRuleResource.update
2020-10-18 03:38:01,715 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AnalysisEngineRuleResource.create
2020-10-18 03:38:01,717 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on GenericRuleResource.getAll
2020-10-18 03:38:01,722 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on GenericRuleResource.get
2020-10-18 03:38:01,725 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleResource.delete
2020-10-18 03:38:01,728 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleResource.deleteData
2020-10-18 03:38:01,731 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleResource.update
2020-10-18 03:38:01,733 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleResource.create
2020-10-18 03:38:01,736 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on GenericRuleSourceResource.getAll
2020-10-18 03:38:01,739 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on GenericRuleSourceResource.get
2020-10-18 03:38:01,742 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleSourceResource.delete
2020-10-18 03:38:01,744 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleSourceResource.deleteData
2020-10-18 03:38:01,746 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleSourceResource.update
2020-10-18 03:38:01,752 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on GenericRuleSourceResource.create
2020-10-18 03:38:01,755 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataSourceResource.getAll
2020-10-18 03:38:01,757 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on DataSourceResource.get
2020-10-18 03:38:01,760 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DataSourceResource.delete
2020-10-18 03:38:01,762 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DataSourceResource.deleteData
2020-10-18 03:38:01,765 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DataSourceResource.update
2020-10-18 03:38:01,770 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on DataSourceResource.create
2020-10-18 03:38:01,773 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, db_backup, global_write] on DatabaseManagementResource.backup
2020-10-18 03:38:01,774 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - API Key authentication supported on DatabaseManagementResource.backup
2020-10-18 03:38:01,777 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, global_read] on DatabaseManagementResource.getAll
2020-10-18 03:38:01,780 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, db_restore, global_write] on DatabaseManagementResource.restore
2020-10-18 03:38:01,780 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - API Key authentication supported on DatabaseManagementResource.restore
2020-10-18 03:38:01,783 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, global_write] on DatabaseManagementResource.migrate
2020-10-18 03:38:01,787 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, global_read] on DatabaseManagementResource.checkVersion
2020-10-18 03:38:01,789 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, global_write] on DatabaseManagementResource.update
2020-10-18 03:38:01,792 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, global_write] on DatabaseManagementResource.delete
2020-10-18 03:38:01,794 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [db_management, global_write] on DatabaseManagementResource.create
2020-10-18 03:38:01,796 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on MigrationLogResource.getRecentMigrationLog
2020-10-18 03:38:01,799 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getAll
2020-10-18 03:38:01,802 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaggingResource.deleteCheck
2020-10-18 03:38:01,804 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getDefunct
2020-10-18 03:38:01,807 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.cleanDefunct
2020-10-18 03:38:01,809 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getTaggedTestCases
2020-10-18 03:38:01,811 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getTaggedCampaigns
2020-10-18 03:38:01,815 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getTaggedAssessments
2020-10-18 03:38:01,817 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getTaggedTestCasesForAssessmentIds
2020-10-18 03:38:01,820 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.getEnums
2020-10-18 03:38:01,823 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on TaggingResource.get
2020-10-18 03:38:01,825 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaggingResource.update
2020-10-18 03:38:01,828 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaggingResource.delete
2020-10-18 03:38:01,831 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on TaggingResource.create
2020-10-18 03:38:01,833 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on OrganizationResource.getAll
2020-10-18 03:38:01,837 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on OrganizationResource.get
2020-10-18 03:38:01,839 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on OrganizationResource.delete
2020-10-18 03:38:01,842 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on OrganizationResource.deleteData
2020-10-18 03:38:01,844 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on OrganizationResource.update
2020-10-18 03:38:01,847 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on OrganizationResource.create
2020-10-18 03:38:01,850 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on HeatmapResource.getHeatmapColorKeys
2020-10-18 03:38:01,852 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on HeatmapResource.campaignNavigatorLayer
2020-10-18 03:38:01,855 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on HeatmapResource.testCaseNavigatorLayer
2020-10-18 03:38:01,857 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on HeatmapResource.getAssessmentHeatmap
2020-10-18 03:38:01,859 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on HeatmapResource.getTestCaseHeatmap
2020-10-18 03:38:01,865 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on GraphqlResource.graphqlGet
2020-10-18 03:38:01,867 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on GraphqlResource.graphqlPost
2020-10-18 03:38:01,870 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on UpdateResource.versionCheck
2020-10-18 03:38:01,872 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ConfigurationResource.getConfigForType
2020-10-18 03:38:01,875 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on ConfigurationResource.updateValue
2020-10-18 03:38:01,877 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on ConfigurationResource.getValue
2020-10-18 03:38:01,879 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on LogImportResource.logImportUpload
2020-10-18 03:38:01,882 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on LogImportResource.logImportConfirm
2020-10-18 03:38:01,884 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AttackLogResource.getContents
2020-10-18 03:38:01,887 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_read] on AttackLogResource.get
2020-10-18 03:38:01,889 DEBUG [com.sra.purpletools.rest.auth.SecurityFeature] - Registering RBAC permission(s) [global_write] on AttackLogResource.delete
2020-10-18 03:38:01,898 DEBUG [org.springframework.jndi.JndiTemplate] - Looking up JNDI object with name [java:comp/env/spring.liveBeansView.mbeanDomain]
2020-10-18 03:38:01,899 DEBUG [org.springframework.jndi.JndiLocatorDelegate] - Converted JNDI name [java:comp/env/spring.liveBeansView.mbeanDomain] not found - trying original name [spring.liveBeansView.mbeanDomain]. javax.naming.NameNotFoundException: Name [spring.liveBeansView.mbeanDomain] is not bound in this Context. Unable to find [spring.liveBeansView.mbeanDomain].
2020-10-18 03:38:01,899 DEBUG [org.springframework.jndi.JndiTemplate] - Looking up JNDI object with name [spring.liveBeansView.mbeanDomain]
2020-10-18 03:38:01,899 DEBUG [org.springframework.jndi.JndiPropertySource] - JNDI lookup for name [spring.liveBeansView.mbeanDomain] threw NamingException with message: Name [spring.liveBeansView.mbeanDomain] is not bound in this Context. Unable to find [spring.liveBeansView.mbeanDomain].. Returning null.
2020-10-18 03:38:01,906 INFO [org.springframework.web.context.ContextLoader] - Root WebApplicationContext initialized in 3417 ms
2020-10-18 03:38:02,020 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBXmlRootElementProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,021 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBXmlRootElementProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,027 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBElementProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,027 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBElementProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,033 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBXmlTypeProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,034 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBXmlTypeProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,041 DEBUG [org.jboss.resteasy.resteasy_jaxrs.i18n] - Provider : org.jboss.resteasy.plugins.providers.DocumentProvider,  Method : DocumentProvider
2020-10-18 03:38:02,042 DEBUG [org.jboss.resteasy.resteasy_jaxrs.i18n] - Provider : org.jboss.resteasy.plugins.providers.DocumentProvider,  Method : DocumentProvider
2020-10-18 03:38:02,047 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBXmlSeeAlsoProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,048 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.JAXBXmlSeeAlsoProvider,  Method : AbstractJAXBProvider
2020-10-18 03:38:02,054 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.CollectionProvider,  Method : CollectionProvider
2020-10-18 03:38:02,055 DEBUG [org.jboss.resteasy.plugins.providers.jaxb.i18n] - Provider : org.jboss.resteasy.plugins.providers.jaxb.CollectionProvider,  Method : CollectionProvider
18-Oct-2020 03:38:02.069 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deployment of web application archive [/usr/local/tomcat/webapps/sra-purpletools-rest.war] has finished in [7,935] ms
18-Oct-2020 03:38:02.069 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/usr/local/tomcat/webapps/ROOT]
18-Oct-2020 03:38:02.081 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deployment of web application directory [/usr/local/tomcat/webapps/ROOT] has finished in [12] ms
18-Oct-2020 03:38:02.084 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"]
18-Oct-2020 03:38:02.105 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["https-openssl-apr-8443"]
18-Oct-2020 03:38:02.113 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [36944] milliseconds
2020-10-18 03:38:10,254 DEBUG [com.sra.purpletools.servlet.filters.IndexCacheControlFilter] - URL: https://10.0.0.1/sra-purpletools-webui/app/

I removed /var/data/ /var/lib/docker re-installed docker went through the install steps again with only alphanumeric passwords and the exact hostname I'm using to get to the server in my browser as the environment variable value for 'HOSTNAME' and I still get the same error. I tried rebooting the server with identical results:

Application Not Authorized to Use CAS

The application you attempted to authenticate to is not authorized to use CAS. This usually indicates that the application is not registered with CAS, or its authorization policy defined in its registration record prevents it from leveraging CAS functionality, or it's malformed and unrecognized by CAS. Contact your CAS administrator to learn how you might register and integrate your application with CAS.
thebleucheese commented 3 years ago

The application does look deployed correctly from those logs. Are you including the port as specified in the .env file as well?

At the top of the .env file you should see something like this:

# .env file

VECTR_HOSTNAME=sravectr.internal
VECTR_PORT=8081

Using this as an example, you would need to browse to https://sravectr.internal:8081 to reach the VECTR application and authenticate.

Additionally, sravectr.internal would need to be resolvable from the browser - typically this is done by adding an entry in the /etc/hosts file mapping sravectr.internal 127.0.0.1 if you're planning on hosting on the same machine where you'll be accessing the application.

That VECTR_HOSTNAME must match the base URL you intend to use with your browser as the application's authentication service performs a redirect. An IP address won't work.

ag-michael commented 3 years ago

This is hosted in the cloud, I think that's cause of all these issues. I did try all the things you said but the problem is the domain needs to resolve to the same IP both from within the container and within the browser. I did all I can to avoid exposing the app to the public internet (ssh tunnel,etc...) but none of that worked. When I did expose it to the internet it worked just now. I did include the port (domain:443 which gets converted to just 'domain').

I think the solution might be to enforce this in /etc/hosts within the container. Even if I set the domain to point to the internal IP in the host,the container won't see that. Fairly new to docker so I'll try to figure out how/if I can do that or if I could somehow manage with IP whitelisting over the public internet (very undesirable).

Edit:The default password '11_ThisIsTheFirstPassword_11' isn't working for the admin account either now, will need to troubleshoot this more :( .

thebleucheese commented 3 years ago

The most likely cause of the password not working is an issue with the Mongo DB auth credentials.

If you change the MongoDB init password in the .env file at any point after starting up the application you will need to completely erase the data directory or change that value back to what it was previously set. Similarly, any time you rebuild a VECTR instance with a different .env file you must remember to erase the data directory in case it's trying to reuse prior data on the host OS. (usually /var/data/sandbox1)

This is a limitation of the MongoDB Docker container published by Mongo team and there's unfortunately not much we can do to remedy the situation.

As far as domain resolution - there are a few options. You can add an extra_hosts entry in docker-compose.yml. There is some information here: https://github.com/SecurityRiskAdvisors/VECTR/issues/79 with detailed documentation here https://docs.docker.com/compose/compose-file/compose-file-v2/#extra_hosts

additionally if you're using a load balancer or proxy there's another ENV variable VECTR_EXTERNAL_HOSTNAME https://github.com/SecurityRiskAdvisors/VECTR/issues/58

It may be worth holding off on some of the connectivity issue resolution. A lot of the challenges you're encountering are due to CAS and in the next release (6.x, likely out end of this week or early next) we'll be replacing CAS with a custom authentication solution that is less complex.

f1r3walled commented 3 years ago

Hey! Just to reinforce and to be straight to the point because I suffered a lot with "Application Not Autorized to use CAS" error, as well, until I get it solved. I hope it helps in addition to the previous comments from the other guys. I'm using a Cloud VPS, too.

  1. I created an "A Record" called "vectr", under my existing domain;
  2. The "VECTR_HOSTNAME" at /opt/vectr/.env has the value "vectr.mydomainname.com";
  3. The file /etc/hostname has the value "vectr";
  4. I added the lines "127.0.0.1 vectr.mydomainname.com"; "127.0.0.1 vectr" and "My VPS public IP vectr" to the file /etc/hosts.

Cheers!

ag-michael commented 3 years ago

@thebleucheese I tried deleting /var/data/ /var/lib/docker/ reinstalling everything without changing the .env file. the default password still did not work for me but this sounds like a different issue. Unfortunately I wont' have time to pursue this for a while anyways. Hopefully when the new version comes out I can give it a go.

@f1r3walled Unfortunately I was not in a position where I could edit the DNS record further (due to this being a demo/poc). I didn't know about the docker extra_hosts variable, if I can get the password working I'll try that route.

carlvonderheid commented 3 years ago

6.0.0 is now released. Would recommend trying to use that and opening a new thread if you're still having issues. Thanks!

ag-michael commented 3 years ago

@carlvonderheid 6.0.1 works flawlessly, thank you!