StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.
GNU General Public License v3.0
635 stars 150 forks source link

LOGIN_URL setting #115

Open inclementweather opened 7 years ago

inclementweather commented 7 years ago

Setting this to "/scirius/accounts/login" returns 404.

Django debug: ` Using the URLconf defined in scirius.urls, Django tried these URL patterns, in this order:

^rules/
^accounts/
^suricata/
^$
^(?P<path>app/.*)$
^(?P<path>status.*)$
^(?P<path>api.*)$
^(?P<path>plugins.*)$
^(?P<path>timelion/.*)$
^(?P<path>bundles/.*)$
^(?P<path>elasticsearch/.*)$
^kibana/(?P<path>.*)$
^evebox/(?P<path>.*)$
^(?P<path>ui/fonts.*)$
^(?P<path>es_admin.*)$

The current URL, scirius/accounts/login/, didn't match any of these. ` However if I do the same thing with STATIC_URL it works properly.

I'm trying to put Scirius behind a nginx reverse proxy at http://host/scirius/ however I don't know Django well enough to determine if there is another setting I should be changing.

I have tried FORCE_SCRIPT_NAME = '/scirius' but that doesn't affect the login url either.

pevma commented 7 years ago

not sure if you have seen it but this is the nginx conf for SELKS - https://github.com/StamusNetworks/SELKS/blob/master/scripts/SELKS3-SELKS4/SN-S3-S4-Upgrade.sh#L69 maybe it could help out?

inclementweather commented 7 years ago

Thanks. They are running Scirius at the root level though which works out of the box with the Scirius config.

When set to "/scirius/accounts/login/" it actually redirects to the right spot but that location doesn't match any of the regex views. I may just end up hacking at those until I can find the solution because all the nginx voodoo I've tried over the past few days can't seem to fix this.

`$ curl -I http://localhost:8000/accounts/login/ HTTP/1.0 302 FOUND Date: Fri, 01 Sep 2017 16:53:11 GMT Server: WSGIServer/0.1 Python/2.7.5 Vary: Cookie X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=utf-8 Location: http://localhost:8000/scirius/accounts/login/accounts/login/

$ curl -I http://localhost:8000/scirius/accounts/login/ HTTP/1.0 404 NOT FOUND Date: Fri, 01 Sep 2017 16:53:19 GMT Server: WSGIServer/0.1 Python/2.7.5 Vary: Cookie X-Frame-Options: SAMEORIGIN Content-Type: text/html`

pevma commented 7 years ago

Did you mange to figure it out?