nagvis
nagvis copied to clipboard
NagVis
Authentication fails for all users but admin
Have been banging my head on the wall trying to figure this out for some time now. Have Nagvis version 1.9.14 using the default SQLite3.7.17. Apache 2.4.6 (CentOS) PHP version 5.4.16 CentOS7 When I connect to the nagvis website, I get the username and password screen. I can login as admin and edit and create maps and such. I can edit/add/delete users. The users show up in the auth.db file and when I try and login as a user in that auth.db file, the login screen just goes right back to asking for username and password. No error. The nagvis-audit.log file shows that it connected and failed login. The nagvis-audit.log file also shows the correct user number that is in the auth.db file so I know it is reading the correct file, yet can not get it to work.
Did a tcpdump to make sure that the username and password were being sent correctly and they are. Short of thinking this is a bug, I am at a loss. Additionally, if I enter the wrong password for the users that are not working it will give an error of "Error: Authentication failed".
[root@CentOS7-LAB etc]# sqlite3 auth.db SQLite version 3.7.17 2013-05-20 00:56:22 Enter ".help" for instructions Enter SQL statements terminated with a ";" sqlite> select * from users; 1|admin|868103841a2244768b2dbead5dbea2b533940e20 2|guest|a4e74a1d28ec981c945310d87f8d7b535d794cd2 4|miket|2c23510cfe073a944383c6835a72b58165ce561d 5|mtrueblood|fdc92944a5acad93fa70690fd888bc50e961a029 6|troy|4df55749250d7d9d9b6b65cc48d0562687a2136f sqlite>
[root@CentOS7-LAB etc]# more ../var/nagvis-audit.log 2020-07-10 15:13:42 User logged in (admin / 1): CoreAuthModSQLite 2020-07-10 15:13:42 User logged in (admin / 1): CoreAuthModSQLite 2020-07-10 15:13:42 User logged in (admin / 1): CoreAuthModSQLite 2020-07-10 15:13:52 User logged in (miket / 4): CoreAuthModSQLite 2020-07-10 15:13:52 User logged in (miket / 4): CoreAuthModSQLite 2020-07-10 15:13:52 User logged in (miket / 4): CoreAuthModSQLite 2020-07-10 15:13:52 User logged in (miket / 4): CoreAuthModSQLite 2020-07-10 15:13:52 User login failed ( / -1): CoreAuthModSQLite 2020-07-10 15:13:52 User login failed ( / -1): CoreAuthModSQLite 2020-07-10 15:13:52 User login failed ( / -1): CoreAuthModSQLite 2020-07-10 15:14:12 User logged in (admin / 1): CoreAuthModSQLite
Looks like this: https://github.com/NagVis/nagvis/issues/204
I thought it was fixed in 1.9.15
I just updated to 1.9.20 and the issue is still the same. If I use a valid username(miket) and password, it just goes back the login screen with no error message but logs the "User login failed ( / -1): CoreAuthModSQLite". If I enter a username(miket) with a invalid password, it get an error message that says "Error: Authentication failed." and the audit log shows "login failed (miket / -1): CoreAuthModSQLite".
Seems as though it is not fixed.
