TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.46k stars 626 forks source link

[Question] Cannot authenticate to thehive 4.x after backup/restore to new server #2500

Open blainedw opened 2 days ago

blainedw commented 2 days ago

Request Type

Question

Work Environment

Question Answer
OS version (server) RedHat RHEL 8
OS version (client) Windows 10
Virtualized Env. True
Dedicated RAM 8 GB
vCPU 2
TheHive version 4.1.24
Package Type RPM
Database Cassandra
Index type Lucene
Attachments storage Local
Browser type & version MS Edge

Question

I used to backup and restore procedure to move the same version of thehive from old RHEL 7 box to a new RHEL 8 box. I copied over the same configuration from the old box. The transfer went without a hitch and the new install starts up fine but I'm unable to authenticate using LDAP or local authentication. (I can't logon with the super admin account either). Am I missing something?

blainedw commented 1 day ago

Here is the error from LDAP which takes a long time to come about. I took out the account to spare the innocent ;)

2024-12-02 12:51:24,304 [WARN] from org.janusgraph.graphdb.transaction.StandardJanusGraphTx in application-akka.actor.default-dispatcher-12 [000014aa|46ea7cea] Query requires iterating over all vertices [(_label = User AND login = XXXXX@domain.com)]. For better performance, use indexes 2024-12-02 12:51:39,437 [WARN] from org.thp.thehive.services.TOTPAuthSrv in application-akka.actor.default-dispatcher-15 [000014a9|] local fails: org.thp.scalligraph.AuthenticationError: Authentication failure 2024-12-02 12:51:39,437 [WARN] from org.thp.thehive.services.TOTPAuthSrv in application-akka.actor.default-dispatcher-15 [000014a9|] ldap fails: org.thp.scalligraph.NotFoundError: User XXXXX not found 2024-12-02 12:51:39,437 [INFO] from org.thp.scalligraph.AccessLogFilter in application-akka.actor.default-dispatcher-15 [000014a9|] 127.0.0.1 POST /api/login took 30524ms and returned 401 65 bytes