Fresh installation of ElasticSearch 5.0.2 requires authentication - why? - security

I am prompted for a user name and password after installing v5.0.2 - both for localhost:9200 and Kibana.
In reading the notes her: https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html I tried executing the PUT commands through Fiddler but got 401 on each request - still needs auth.
I haven't set any user names or passwords and the only help online I can find relates to having installed Shield, which I have not installed.
Looking at https://www.elastic.co/guide/en/x-pack/5.0/setting-up-authentication.html#built-in-users, I am unable to issue requests to set the user names and passwords as authentication is required.
Suggestions please.

Try the default user and password:
user: elastic
password: changeme
This might be because xpack has users and roles . you can set up these in xpack.
read here :https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html

Related

Jmeter Windows Authentication error - 401

I am trying to record an internal website for which i need to enter credentials that is not same as the windows credential. Later on the same test needs to be run for more than one user. i know how to use the csv file to pass the parameters - username and password.
For Windows Authentication i have added Authorization manager.
From Fiddler i checked it was NTLM authentication(though i am not sure yet) and i did enter the values for NTLM authentication in Authorization Manager.
Now when i try and record the internal website - i cannot even go to homepage after the windows credentials, it keeps on spinning.
When i check the Authorization Manager, i find an extra line added for kerberos Authentication as shown in Picture:
My query here is:
1)why is it recording it as kerberos
2)where is it saving the username and password
3)why is it not loading the website- always keeps spinning and i have to stop it
4)I have tried Kerberos settings and then record, but its not working either , could it be i am using the wrong values in the kerb5.conf file , how do i debug.
Kind of stuck at the moment.
Thanks for help!
If you're uncertain what authentication is being used under the hood - just ask around, application developers or network administrators should be aware of the external authentication scheme. You can also try using a 3rd-party tool like Kerberos Authentication Tester
I don't think you can record and replay Windows authentication so it makes sense to start recording some time after the login screen as long as you can login using JMeter
Looking into JMeter source
// if HEADER_AUTHORIZATION contains "Basic"
// then set Mechanism.BASIC_DIGEST, otherwise Mechanism.KERBEROS
In case of Kerberos credentials are saved directly in the HTTP Authorization Manager in form of ${AUTH_LOGIN} and ${AUTH_PASSWORD}, real credentials are not stored anywhere
Most probably your application doesn't receive valid authentication context therefore it cannot proceed
Add sun.security.krb5.debug=true line to system.properties file (lives in "bin" folder of your JMeter installation), JMeter restart will be required to pick the property up.
More information:
Windows Authentication with Apache JMeter
JAAS and Java GSS-API Tutorials

Openstack glance sync error

I am working on the OpenStack glance. after I entered the command
su -s /bin/sh -c "glance-manage db_sync" glance
beside the deprecated messages, I get lots of other errors that are relevant to python errors and *Access denied for user 'glance'#'x.x.x.x'"*error.
I have used the OpenStack document for Ubuntu step by step.
This is the source address: https://docs.openstack.org/glance/pike/install/install-ubuntu.html
How should I fix the permission error?
The error has to do with connecting to the DB with user 'glance'#'x.x.x.x'. See if you can access your DB (probably MySQL) with the same username + password that you have configured in Glance.
[database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS#controller/glance
Verify the user + password used in your connection settings.
If you are able to connect with the user + password then you need to look into your grants for the user. See which grants you have setup:
mysql> show grants;
Setup grants using a wildcard if you don't want to use specific IP addresses.
The older guides have the steps listed, while the newer guides do not:
https://docs.openstack.org/ocata/install-guide-ubuntu/glance-install.html
GRANT ALL PRIVILEGES ON glance.* TO 'glance'#'%' IDENTIFIED BY 'GLANCE_DBPASS';

How do I log into phpMyAdmin after receiving this error... #2003 Cannot log in to the MySQL server

I am installing phpMyAdmin on a CentOs server and I have installed it successfully, from what I can tell. I can at least travel to the index page where it asks for my username and password. When I try to log in with any combination of default usernames and passwords, I receive this error #2003 Cannot log in to the MySQL server.
I followed this guide (http://www.krizna.com/centos/how-install-phpmyadmin-centos-6/) to help me install phpMyAdmin. From researching this, I am under the impression that after you log in with the default username:root and password:null, you will be able to change the username and password. I tried changing the config.inc.php value AllowNoPassword to TRUE, but that also didn't seem to help. How do I set a username and password so I can successfully log into phpMyAdmin?
I figured out the issue. Only some of the required software was installed on the server when I was assigned to the project. After installing mysql-server, I was able to change the root password for mysql. I changed the config file for phpmyadmin to receive the log in data through html not cookies or config. Everything works great now, I hope this helps at least one other individual.

Windows Authentication prompt username field autopopulates and cannot be changed

I have a website that uses Windows Authentication to authenticate its users. Normally when a user accesses the site on an IE browser the username field is populated with the computers domain name and user name. This is usually incorrect and the user enters the correct username and their password and can access the site.
I have a user now on Windows 7 IE8(I beleive) and the username field in the credential prompt is being autopopulated with domain\userName except the username is incorrect and we cannot change it. The user is unable to log into the site because of this. Has anyone experienced this before? Does anyone know why the username field cannot be changed? Solutions I have tried:
Clearing cache and stored form data/passwords etc
Site is in users trusted sites. So I had the user change the settings to "Prompt for username and password" but the prompt still comes up with the username autopopulated and does not let her change it.
I have never run into this before. Our users do not have any issue logging in, its just this one corporate location that was just set up and is running Windows 7(Rest of the company is under Windows XP) If it matters this is a sharepoint 2010 web application
Any help on this would be greatly appreciated as I have an entire group of users with this problem. Im willing to bet this would not be an issue in a different browser but they need to be able to use IE for application compatibility reasons.
Thanks!
I was able to fix it by doing the following:
Go to Start, Control Panel, User Accounts, then click Manage Your Credentials, and look for the credentials to your site, if they are there Modify and “Remove from vault” ( I suppose you could Edit them to the correct credentials but I just removed it and it did not prompt her).
She had the wrong credentials stored there. Im not sure why clearing the cache and passwords from the internet options didnt work but this did.
I had this problem with a user where the domain stored with the credentials could not be changed. This is the only item online I could find even close to my problem. The user saw "user-pcdomain\localusername" auto entered in the form. He tried to correct it with "workdomain\workusername" but got a message saying "Please enter a user name and password". Eventually we realized that his system was sending "user-pcdomain\workdomain" as his username. I've never seen a login misfire like that.
In his case he did not have his credentials stored but needed to add credentials - "workdomain\workusername" - for all of the domains he needed to access.
The point is - to expand on the answer - that IE or Windows 7 or both will store credentials incorrectly on rare occasions and the solution is be creative about adding\editing\remove credentials with Manage Your Credentials

Changing eDirectory Password From Linux Machine

I have Configured LDAP Authentication for my Linux Machines. The LDAP Server is Novell eDirectory. The LDAP Users are able to login into the machine. But when i am issuing passwd command it is asking LDAP password then asking to give me new password. After that i am getting a message saying that all the authentication tokens are successfully updated.
But when i try to login with the new password into the machine it is not allowing but when i tried with the old password it is allowing me to loign. Even the eDirectory password also didn't got changed?
What's wrong i am doing?
Thanks and regards,
Sunny.
Do you have access to the eDirectory server you are pointing at? If so, go to iMonitor (https://serverIP:8030/nds/trace) and login, and then in Trace settings (box in the bar with tick marks, and lightning bolts) and clear all, and then enable LDAP tracing.
Refresh and go to Trace Live, then do the password change and look at the trace event from the LDAP server perspective. Likely something will be revealed there.

Resources