View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0001602 | bareos-core | webui | public | 2024-02-25 01:48 | 2024-02-27 13:23 |
Reporter | jsi | Assigned To | bruno-at-bareos | ||
Priority | normal | Severity | major | Reproducibility | always |
Status | closed | Resolution | no change required | ||
Platform | amd64 | OS | Gentoo Linux | OS Version | current |
Product Version | 23.0.1 | ||||
Summary | 0001602: Bareos WebUI unable to login after upgrade to 23.0.1 | ||||
Description | After upgrade to Bareos 23.0.1 I had to compile the webui separately since there was no new ebuild for webui 23.0.1. I tried disabling TLS, but it seems that the webui still tries to connect via TLS. (See config and trace files below) I launched | ||||
Steps To Reproduce | - Upgrade Bareos via Portage to 23.0.1 - Pull source from Github and checkout - master - Release/23.0.1 - Release/23.0.0 (doesn't matter) Compile the webui separately: cd /usr/src/bareos/webui cmake --install-prefix=/usr . make install Try to login and get "Sorry, cannot authenticate. Wrong username, password or SSL/TLS handshake failed." | ||||
Additional Information | Launched bareos-dir with "bareos-dir -fd200" to catch the error when I try to login via webconsole: areos-dir (200): dird/scheduler_private.cc:163-0 Scheduler: WaitForJobsToRun is sleeping for 60 seconds. Next job: JSIIT-LSRV00-System.bareos-dir (100): lib/bsock.cc:85-0 Construct BareosSocket bareos-dir (100): lib/try_tls_handshake_as_a_server.cc:47-0 Error occured when trying to peek cleartext hello bareos-dir (100): lib/bsock.cc:137-0 Destruct BareosSocket *╰─➤ cat /etc/bareos/bareos-dir.d/console/admin.conf* # # Restricted console used by bareos-webui # Console { Name = "jsi" Password = "test" Profile = "webui-admin" # changed the password to "test" for testing-purpose... # As php does not support TLS-PSK, # and the director has TLS enabled by default, # we need to either disable TLS or setup # TLS with certificates. # # For testing purposes we disable it here TLS Enable = No } */etc/bareos-webui/directors.ini contains the following:* ; TLS verify peer ; Possible values: true or false tls_verify_peer = false ; Server can do TLS ; Possible values: true or false server_can_do_tls = false ; Server requires TLS ; Possible values: true or false server_requires_tls = false ; Client can do TLS ; Possible values: true or false client_can_do_tls = false ; Client requires TLS ; Possible value: true or false client_requires_tls = false | ||||
Tags | No tags attached. | ||||
admin.conf (350 bytes)
# # Restricted console used by bareos-webui # Console { Name = "jsi" Password = "some.secret" Profile = "webui-admin" # As php does not support TLS-PSK, # and the director has TLS enabled by default, # we need to either disable TLS or setup # TLS with certificates. # # For testing purposes we disable it here TLS Enable = No } directors.ini (2,291 bytes)
; ; Bareos WebUI Configuration File ; ; File: /etc/bareos-webui/directors.ini ; ;------------------------------------------------------------------------------ ; Section localhost-dir ;------------------------------------------------------------------------------ [localhost-dir] ; Enable or disable section. Possible values are "yes" or "no", the default is "yes". enabled = "yes" ; Fill in the IP-Address or FQDN of you director. ; E.g. alice.example.com, 127.0.0.1 or [::1] diraddress = "localhost" ; Default value is 9101 dirport = 9101 ; Set catalog to explicit value if you have multiple catalogs ;catalog = "MyCatalog" ; Set the console name and password for a dedicated pam console. ; Make sure, that "UsePamAuthentication = yes" is set in the ; counterpart Director console configuration. ;pam_console_name = "username" ;pam_console_password = "password" ; TLS verify peer ; Possible values: true or false tls_verify_peer = false ; Server can do TLS ; Possible values: true or false server_can_do_tls = false ; Server requires TLS ; Possible values: true or false server_requires_tls = false ; Client can do TLS ; Possible values: true or false client_can_do_tls = false ; Client requires TLS ; Possible value: true or false client_requires_tls = false ; Path to the certificate authority file ; E.g. ca_file = "/etc/bareos/tls/BareosCA.crt" ;ca_file = "" ; Path to the cert file which needs to contain the client certificate and the key in PEM encoding ; E.g. ca_file = "/etc/bareos/tls/restricted-named-console.pem" ;cert_file = "" ; Passphrase needed to unlock the above cert file if set ;cert_file_passphrase = "" ; Allowed common names ; E.g. allowed_cns = "host1.example.com" ;allowed_cns = "" ;------------------------------------------------------------------------------ ; Section another-host-dir ;------------------------------------------------------------------------------ [another-host-dir] enabled = "no" diraddress = "192.168.120.1" dirport = 9101 ;catalog = "MyCatalog" ;pam_console_name = "username" ;pam_console_password = "password" ;tls_verify_peer = false ;server_can_do_tls = false ;server_requires_tls = false ;client_can_do_tls = false ;client_requires_tls = false ;ca_file = "" ;cert_file = "" ;cert_file_passphrase = "" ;allowed_cns = "" |
|
You missed the TLS Require = No |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2024-02-25 01:48 | jsi | New Issue | |
2024-02-25 01:48 | jsi | File Added: admin.conf | |
2024-02-25 01:48 | jsi | File Added: directors.ini | |
2024-02-27 13:23 | bruno-at-bareos | Assigned To | => bruno-at-bareos |
2024-02-27 13:23 | bruno-at-bareos | Status | new => closed |
2024-02-27 13:23 | bruno-at-bareos | Resolution | open => no change required |
2024-02-27 13:23 | bruno-at-bareos | Note Added: 0005812 |