globaleaks / globaleaks-whistleblowing-software

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
https://www.globaleaks.org
Other
1.25k stars 275 forks source link

no login possible after update #4299

Open nicogithub22 opened 3 weeks ago

nicogithub22 commented 3 weeks ago

What version of GlobaLeaks are you using?

I was using 4.14.8 and updatet with These commands:

wget https://deb.globaleaks.org/install-globaleaks.sh
chmod +x install-globaleaks.sh
./install-globaleaks.sh

What browser(s) are you seeing the problem on?

All

What operating system(s) are you seeing the problem on?

Windows

Describe the issue

After I executed the above script, Globaleaks was updated but when I try to log in to the Admin GUI page nothing happens. I am not logged in. But I do not get an error message, wrong password for example. Maybe someone has a hint?

Proposed solution

-reboot ubuntu system -tried different browsers and users

evilaliv3 commented 3 weeks ago

Thank you @nicogithub22

Actually the update from release 4 to 5 does not include differences in the backend so it should not have any difference in the authentication process.

Do you have screenshots or videos where you can show the malfunction?

What if you try to recover your access using the account recovery keys?

evilaliv3 commented 2 weeks ago

@nicogithub22 : do you have any update?

nicogithub22 commented 2 weeks ago

I tried to log in with the recovery key, but that didn't work either. Then I clicked on Forgot password, but that didn't work either. When I click on the “submit” or “login” button, a loading circle appears briefly in the middle and then nothing happens. I think something is not being processed in the backend.

Can I provide any logs?

evilaliv3 commented 2 weeks ago

Thank you @nicogithub22

would you please install release 5.0.25 and retry with the password reset procedure using the account recovery key?

nicogithub22 commented 2 weeks ago

Thank you @evilaliv3

Unfortunately, the update did not bring about any change. I still cannot log in to the frontend of Globaleaks. No matter what I try, normal login or forgotten password. There is always only a short loading circle and nothing more.

evilaliv3 commented 2 weeks ago

Thank you @nicogithub22

This is actually very strange. If you could pass me a link to the platform i may give it a look.

nicogithub22 commented 2 weeks ago

Yes, very strange for me too. Here is the LINK: meldestelle.gett-group.com I can also give you my username and password, then you can also try with it, it doesn't work at the moment anyway.

Thanks a lot for your time.

evilaliv3 commented 2 weeks ago

You are welcome.

Actually i see that your setup features an Apache proxy. I tried to perform a login with wrong credentials and a password reset. Both fails because the proxy reply on behalf of globaleaks blocking the connections to globaleaks.

What is the reason of this proxy server?

nicogithub22 commented 2 weeks ago

This is because we run a VM with Linux internally and make it publicly available via our firewall. We have not changed anything in the design.

evilaliv3 commented 2 weeks ago

If you try to look at the network console of your browser, you will se that apache is blocking the connections to globaleaks.

It's not globaleaks.

nicogithub22 commented 2 weeks ago

ah, I've seen it. I'll have a look in the firewall tomorrow.

nicogithub22 commented 2 weeks ago

I did not find it in the firewall. Perhaps something has been changed in your version. Regarding HTTP headers?

Can you do anything with the error message? 2024-11-14 11_11_39-Christian Herr _ GETT Gerätetechnik GmbH _ n minkley@gett-group com _ Microsoft

Otherwise would there be a possibility to make a backup of the data and import it into a new instance?