Docker installation - RBAC

[HA]

Hi,

We installed Wazuh in docker mode (version 4.3.6).

You would like to implement a multi config.

When trying to create a new user, the following error message appears...

3013 - Corrupted RBAC database

Error: 3013 - Corrupted RBAC database at createError (https://siem.simacpsf.cloud/1/bundles/plugin/wazuh/wazuh.plugin.js:2:31654) at settle (https://siem.simacpsf.cloud/1/bundles/plugin/wazuh/wazuh.plugin.js:8:15184) at XMLHttpRequest.onloadend

 (https://siem.simacpsf.cloud/1/bundles/plugin/wazuh/wazuh.plugin.js:2:29447)

Any idea to solve this issue ??

Regards,

HA

[Pablo Ariel Gonzalez]

Hello Hedi:

      Let me verify your error and I will answer you as soon as possible.

Thanks,

[Pablo Ariel Gonzalez]

Hi Hedi:

        To begin with, we are very happy that you are planning to implement the product, let's see this error so that you can continue with it.

I understand that to perform the installation you followed the official wazuh guide for docker, then you can select between a single-node or multi-node deployment. In addition, there is a section that indicates how it is possible to modify the default users if this would be useful for you.

Anyway if you want to create a new user this is also possible without any problem. Regarding the error that you have obtained, I would like to request some information from you to confirm what the cause is. It would be great if you could share with us the following information:

  * What is the available disk space of the wazuh container? (df ​​-h)

  * Are there error messages in the Wazuh log file? (grep -i error /var/ossec/logs/ossec.log ; grep -i error /var/ossec/logs/cluster.log)

  * Does the username and password that you want to create have any special characters?

With this information, we can identify the error and then find the solution.


Thanks,

[HA]

Hi,

We faced different issue with docker deployment (config file lost, pb with right, etc)...

So we decided to the AMI provided on AWS marketplace and it works much much better !

Regards,

HA

[Pablo Ariel Gonzalez]

Hi HA:

      Excellent, I'm glad you were able to move forward to continue using the product. In any case, if you later want to test the deployment in Docker again, we will gladly continue analyzing this problem.

I do not know if it has been analyzed and if it is a real possibility for its implementation. But if it is, Wazuh has a cloud service available. In Wazuh Cloud you only have to take care of deploying the agents on your computers and using the solution from the web portal. We take care of the administration, scaling, and maintenance of the solution. If you wish, you can access a trial to analyze if the solution suits your needs from here.

Thanks,