graylog-labs / graylog2-web-interface

[DEPRECATED]
https://www.graylog.org/
611 stars 174 forks source link

2nd graylog server not authenticating to 1st #932

Closed J-Camping closed 10 years ago

J-Camping commented 10 years ago

Im getting this on my 2nd graylog web server (You caused a org.graylog2.restclient.lib.APIException. API call failed GET http://@192.168.13.37:12900/system/notifications returned 401 Unauthorized body: ) 13.37 is the 1st graylog server all of the application secrets are the same and im getting this in the /var/log/graylog2-web/application.log 2014-10-13T21:40:06.889-04:00 - [ERROR] - from org.graylog2.restclient.models.UserService in play-akka.actor.default-dispatcher-10 Unauthorized to load user admin

this is on graylog2-web-interface v0.91.0-rc.1 it seems similar to issue 489

stacktrace org.graylog2.restclient.lib.ApiClientImpl$ApiRequestBuilder#execute (ApiClientImpl.java:404) org.graylog2.restclient.models.ClusterService#allSystemJobs (ClusterService.java:138) controllers.SystemController#index (SystemController.java:63) Routes$$anonfun$routes$1$$anonfun$applyOrElse$43$$anonfun$apply$127#apply (routes_routing.scala:1037) Routes$$anonfun$routes$1$$anonfun$applyOrElse$43$$anonfun$apply$127#apply (routesrouting.scala:1037) play.core.Router$HandlerInvoker$$anon$7$$anon$2#invocation (Router.scala:183) play.core.Router$Routes$$anon$1#invocation (Router.scala:377) play.core.j.JavaAction$$anon$1#call (JavaAction.scala:56) play.GlobalSettings$1#call (GlobalSettings.java:64) play.mvc.Security$AuthenticatedAction#call (Security.java:45) play.core.j.JavaAction$$anon$3#apply (JavaAction.scala:91) play.core.j.JavaAction$$anon$3#apply (JavaAction.scala:90) play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (FPromiseHelper.scala:82) play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (FPromiseHelper.scala:82) scala.concurrent.Future$$anonfun$flatMap$1#apply (Future.scala:251) scala.concurrent.Future$$anonfun$flatMap$1#apply (Future.scala:249) scala.concurrent.impl.CallbackRunnable#run (Promise.scala:32) play.core.j.HttpExecutionContext$$anon$2#run (HttpExecutionContext.scala:37) akka.dispatch.TaskInvocation#run (AbstractDispatcher.scala:42) akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask#exec (AbstractDispatcher.scala:386) scala.concurrent.forkjoin.ForkJoinTask#doExec (ForkJoinTask.java:260) scala.concurrent.forkjoin.ForkJoinPool$WorkQueue#runTask (ForkJoinPool.java:1339) scala.concurrent.forkjoin.ForkJoinPool#runWorker (ForkJoinPool.java:1979) scala.concurrent.forkjoin.ForkJoinWorkerThread#run (ForkJoinWorkerThread.java:107) Request information Method GET Query page=0 Referer http://hw-graylog-02.trailerpark.com:9000/login?destination=%2Fsystem%3Fpage%3D0 Connection keep-alive Accept text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/_;q=0.8 Cache-Control max-age=0 Accept-Language en-US,en;q=0.8 Accept-Encoding gzip,deflate,sdch User-Agent Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 Host hw-graylog-02.trailerpark.com:9000

J-Camping commented 10 years ago

ran the server in debug mode and saw this error:

2014-10-20 19:11:34,096 DEBUG: org.graylog2.security.realm.SessionAuthenticator - Invalid session ea82201f-60ec-48fb-9fe0-370bbe0a4565. Either it has expired or did not exist. 2014-10-20 19:11:34,096 DEBUG: org.apache.shiro.realm.AuthenticatingRealm - Looked up AuthenticationInfo [null] from doGetAuthenticationInfo 2014-10-20 19:11:34,096 DEBUG: org.apache.shiro.realm.AuthenticatingRealm - No AuthenticationInfo found for submitted AuthenticationToken [org.graylog2.security.SessionIdToken@a069471]. Returning null. 2014-10-20 19:11:34,096 DEBUG: org.apache.shiro.authc.pam.ModularRealmAuthenticator - Realm [org.graylog2.security.realm.AccessTokenAuthenticator@71dafb0b] does not support token org.graylog2.security.SessionIdToken@a069471. Skipping realm. 2014-10-20 19:11:34,096 DEBUG: org.apache.shiro.authc.pam.ModularRealmAuthenticator - Realm [org.graylog2.security.realm.LdapUserAuthenticator@5f97c992] does not support token org.graylog2.security.SessionIdToken@a069471. Skipping realm. 2014-10-20 19:11:34,096 DEBUG: org.apache.shiro.authc.pam.ModularRealmAuthenticator - Realm [org.graylog2.security.realm.PasswordAuthenticator@6632c145] does not support token org.graylog2.security.SessionIdToken@a069471. Skipping realm. 2014-10-20 19:11:34,096 DEBUG: org.apache.shiro.authc.pam.ModularRealmAuthenticator - Realm [org.graylog2.security.realm.GraylogSimpleAccountRealm@e2ecd6e] does not support token org.graylog2.security.SessionIdToken@a069471. Skipping realm. 2014-10-20 19:11:34,096 DEBUG: org.graylog2.security.ShiroAuthenticationFilter - Unable to authenticate user. org.apache.shiro.authc.AuthenticationException: No account information found for authentication token [org.graylog2.security.SessionIdToken@a069471] by this Authenticator instance. Please check that it is configured correctly.

J-Camping commented 10 years ago

Figured out that both graylog2 servers needed to use the same mongod server. Closing issue