Problem with logging as a guest

[Tomasz Kuter]

Hi there,

Today I installed newest version of RabbitMQ (3.7.2) on my Debian 9 server (localhost).
I installed esl-erlang_20.2.2-1~ubuntu~artful_amd64.deb first.

Unfortunately I cannot login as guest/guest to administration panel.

When I am checking RabbitMQ server status I am seeing following:

# service rabbitmq-server status
● rabbitmq-server.service - RabbitMQ broker
   Loaded: loaded (/lib/systemd/system/rabbitmq-server.service; enabled; vendor preset: enabled)
   Active: active (running) since Wed 2018-01-17 19:30:01 CET; 30s ago
 Main PID: 23994 (beam.smp)
   Status: "Initialized"
      CPU: 5.335s
   CGroup: /system.slice/rabbitmq-server.service
           ├─23994 /usr/lib/erlang/erts-9.2/bin/beam.smp -W w -A 64 -P 1048576 -t 5000000 -stbt db -zdbbl 128000 -
           ├─24079 /usr/lib/erlang/erts-9.2/bin/epmd -daemon
           ├─24223 erl_child_setup 1024
           ├─24255 inet_gethost 4
           └─24256 inet_gethost 4

sty 17 19:30:00 saphira rabbitmq-server[23994]:                     /var/log/rabbitmq/rabbit@saphira_upgrade.log
sty 17 19:30:00 saphira rabbitmq-server[23994]:               Starting broker...
sty 17 19:30:00 saphira rabbitmq-server[23994]: WARNING: module crypto not found, so not scanned for boot steps.
sty 17 19:30:01 saphira rabbitmq-server[23994]: WARNING: module crypto not found, so not scanned for boot steps.
sty 17 19:30:01 saphira rabbitmq-server[23994]: WARNING: module crypto not found, so not scanned for boot steps.
sty 17 19:30:01 saphira rabbitmq-server[23994]: WARNING: module crypto not found, so not scanned for boot steps.
sty 17 19:30:01 saphira rabbitmq-server[23994]: WARNING: module crypto not found, so not scanned for boot steps.
sty 17 19:30:01 saphira rabbitmq-server[23994]: systemd unit for activation check: "rabbitmq-server.service"
sty 17 19:30:01 saphira systemd[1]: Started RabbitMQ broker.
sty 17 19:30:02 saphira rabbitmq-server[23994]:  completed with 0 plugins.

And in the log file:

2018-01-17 19:43:24.272 [warning] <0.542.0> The on_load function for module crypto returned:
{error,{load_failed,"Failed to load NIF library /usr/lib/erlang/lib/crypto-4.2/priv/lib/crypto: 
'libcrypto.so.1.0.0: cannot open shared object file: No such file or directory'"}}
2018-01-17 19:48:52.853 [warning] <0.552.0> HTTP access denied: user 'guest' - invalid credentials

Can you help me?

[Luke Bakken]

Tomasz -

Could you run this command and provide the output?

# rabbitmqctl authenticate_user guest guest

Thanks -

Luke

[Tomasz Kuter]

Here you are:

# rabbitmqctl authenticate_user guest guest

Authenticating user "guest" ...
Error: failed to authenticate user "guest"

user 'guest' - invalid credentials

--
Tomasz

[Luke Bakken]

Tomasz -

Was this a 100% fresh install of RabbitMQ? Can you reset the guest user's password and re-try the authenticate_user command?

# rabbitmqctl change_password guest guest

# rabbitmqctl authenticate_user guest guest

[Michael Klishin]

The most common reason for authentication failures for "guest" is that guest can only

connect from localhost by default (since the credentials are well known) [1].

However, `rabbitmqctl authenticate_user` does not perform that check. So chances are

the password was indeed changed or the user was deleted entirely.

One more reason I can think of: `rabbitmqctl authenticate_user` will try all authentication backends

configured for the node. So if you use LDAP and the user guest does not exist or authentication queries for it fail,

so will rabbitmqctl authenticate_user [2][3].

1. http://www.rabbitmq.com/access-control.html

2. https://github.com/rabbitmq/rabbitmq-cli/blob/master/lib/rabbitmq/cli/ctl/commands/authenticate_user_command.ex#L28

3. https://github.com/rabbitmq/rabbitmq-server/blob/master/src/rabbit_access_control.erl#L51

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-users+unsubscribe@googlegroups.com.
To post to this group, send email to rabbitmq-users@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

MK

Staff Software Engineer, Pivotal/RabbitMQ

[Tomasz Kuter]

Luke,

This was fresh installation and I am using it locally.

# rabbitmqctl change_password guest guest

Changing password for user "guest" ...
Error:
{:undef, [{:crypto, :hash, [:sha256, <<64, 129, 167, 213, 103, 117, 101, 115, 116>>], []}, {:rabbit_password, :hash, 2, [file: 'src/rabbit_password.erl', line: 34]}, {:rabbit_auth_backend_internal, :change_password_sans_validation, 3, [file: 'src/rabbit_auth_backend_internal.erl', line: 288]}, {:rpc, :"-handle_call_call/6-fun-0-", 5, [file: 'rpc.erl', line: 197]}]}

I encountered problem at the beginning when I was trying to install RabbitMQ with no Erlang in the system.
So I got following messages (translated from Polish):

# dpkg -i rabbitmq-server_3.7.2-1_all.deb
Wybieranie wcześniej niewybranego pakietu rabbitmq-server.
(Odczytywanie bazy danych ... 314205 plików i katalogów obecnie zainstalowanych.)
Preparing package to unpack rabbitmq-server_3.7.2-1_all.deb ...
Unpacking package rabbitmq-server (3.7.2-1) ...
dpkg: problemy z zależnościami uniemożliwiają skonfigurowanie pakietu rabbitmq-server:
 rabbitmq-server zależy od erlang-nox (>= 1:19.3) | esl-erlang (>= 1:19.3); jednakże:
  Package erlang-nox is not installed.
  Package esl-erlang is not installed.

dpkg: błąd przetwarzania pakietu rabbitmq-server (--install):
 problemy z zależnościami - pozostawianie nieskonfigurowanego
Przetwarzanie wyzwalaczy pakietu systemd (232-25+deb9u1)...
Przetwarzanie wyzwalaczy pakietu man-db (2.7.6.1-2)...
Errors occurred when processing:
 rabbitmq-server

After that I downloaded and installed:
dpkg -i esl-erlang_20.2.2-1~ubuntu~artful_amd64.deb

and then
dpkg -i rabbitmq-server_3.7.2-1_all.deb

--
Tomasz Kuter

[Michael Klishin]

Your Erlang/OTP installation is missing the crypto package, so the SHA-256 hashing function
is not available.

See at the top of http://www.rabbitmq.com/ssl.html (regardless of whether you plan to use TLS).

> >> *# rabbitmqctl authenticate_user guest guestAuthenticating user "guest"
> >> ...Error: failed to authenticate user "guest"user 'guest' - invalid
> >> credentials*

> --
> You received this message because you are subscribed to the Google Groups "rabbitmq-users"
> group.

> To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
> To post to this group, send an email to rabbitm...@googlegroups.com.

[Tomasz Kuter]

There is something wrong with latest version of RabbitMQ Server in Debian 9 (stretch)

So I downloaded earlier version from GitHub: rabbitmq-server_3.6.14-1_all.deb
https://github.com/rabbitmq/rabbitmq-server/releases?after=v3.7.0-rc.2

Installed standard version of Erlang with erlang-crypto

And now I have working RabbitMQ Server (can log in as guest:guest and I am not getting any errors in logs).

Currently I do not have time to test it with version 3.7.2, because of differences of Erlang version in my system - I have 1:19.2.1

--
Best regards,
Tomasz

[Michael Klishin]

According to [1], Stretch has 3.6.6. There were no changes to the restrictions

put on the guest account when it comes to remote connections or any substantial changes related to TLS between 3.6.6 and 3.7.2.

MK

1. https://packages.debian.org/stretch/rabbitmq-server

To post to this group, send email to rabbitm...@googlegroups.com.