Invalid Username and Password showing in wazuh UI

[Priyanka chauhan]

when I am logging in wazuh UI , it shows invalid username and password but when i reboot via cli ,username and password is working. plz someone tell why it is happening.and how can i resolve this issue.

When I have tried using curl command at CLI it is showing no living connection

[Federico Rodriguez]

Hi Priya!
I'll do my best to help you, but please explain a bit more of the context. Which Elastick stack versions are you using? Are you using Open Distro Security Plugin or X-Pack? Have you restarted Elastic service or something else? 

Also, could you please share the server response to this authenticated request?

curl -k -u <USERNAME>:<PASSWORD> https://<ELASTICSEARCH_IP>:9200/_cluster/health?pretty

[Federico Rodriguez]

I am using kibana version 7.10.2

wazuh 4.2.0

when I run this command it showed that no living connection

Yes we are using Open Distro Security plugin

today error is showing:

Could not connect to API with id: default: 3099 - ERROR3099 - Some Wazuh daemons are not ready yet in node "node01" (wazuh-modulesd->failed)

when i have disable redhat service in vulnerability and restart wazuh manager then i am logging into wazuh appUI

curl -k -u <USERNAME>:<PASSWORD> https://<ELASTICSEARCH_IP>:9200/_cluster/health?pretty

Hi,

this was a known issue that should be resolved:
https://github.com/wazuh/wazuh-kibana-app/issues/2194

Let me check me check the issue status and I'll be back to you ASAP. 
Any additional information you can provide will be useful, like if this issue started after an upgrade or any other context or steps you made to incur in the problem.

[Marek Szewczyk]

Hi, 

I have the same problem on a completely rebuilt latest WAZUH 4.3. 

Has anyone encountered such a problem? 

Greetings,

Marek

[GliderSnipping]

Yeah, I have it as well on 4.3.9.

wazuh-dashboard won't install without the -fd option

bash wazuh-install.sh --wazuh-dashboard dashboard -fd -i

with the -fd option, I get the following:

/etc/wazuh-dashboard/opensearch_dashboards.yml contains these 2 lines:

...

  #opensearch.username: kibanaserver
  #opensearch.password: kibanaserver

...

Even modifying them to match the passwords for kibanaserver in:

tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

and

systemctl restart wazuh-dashboard

still no joy...