Cannot connect API from Dashboard after installation

[Juan Ignacio Contino]

Hi!

I've just followed the "assisted installation" for the 4.12 release on Debian 12 for all the components starting on:

https://documentation.wazuh.com/current/installation-guide/wazuh-indexer/installation-assistant.html

(I haven't changed anything about the procedure or the configuration of the components)

config.yml:

After that I went to the dashboard interface and got the following:

More clues:

• manager status
• storage in manager
  
• the indexer cluster status
  
• I got the same problem for the same procedure on wazuh 4.11 components
• The Debian version I'm using for all the components:
  
  
• The all-in-one installation was completed successfully for 4.11 and 4.12 wazuh releases on the Debian version I am using and everything is working fine

Please, can someone help me solve this problem? Thanks in advance.

[Olamilekan Abdullateef Ajani]

Hello,

The error "The API connections could be down or inaccessible" in Wazuh typically indicates a problem with the connection between the Wazuh dashboard and the Wazuh server API. This can be due to various reasons, including network issues, incorrect configuration, or the API server being down.

But your case, I see the error invalid credentials and also the wazuh-wui being down, this only means that there is a credential issue somewhere in the system, although you also mentioned you have not made any changes since you deployed.

The invalid credential in the Wazuh dashboard wazuh.yml configuration, where the wazuh-wui user configuration is set.

You can find this configuration at the end of the file in: /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml

On a basic installation, without changing passwords, you should see something like:

hosts: - default: url: https://localhost port: 55000 username: wazuh-wui password: wazuh-wui run_as: false

You can review the configuration in the file. OR better still,

We can trigger a reset on the wazuh-wui user account, please follow the process below:

Login to the wazuh instance via ssh, and run the commands below:

Download the password tool:

curl -so wazuh-passwords-tool.sh https://packages.wazuh.com/4.12/wazuh-passwords-tool.sh

Then reset the wazuh-wui account:
sudo bash wazuh-passwords-tool.sh -A -au wazuh-wui -ap new password-here

Please note:  The password must have a length between 8 and 64 characters and contain at least one upper case letter, one lower case letter, a number and one of the following symbols: .*+?-. If no password is specified, the script will generate a random one.

Ref:
https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html

[Juan Ignacio Contino]

Thank you very much for the answer!

As it can be seen the credentials in the file are configured correctly after installation

That was before I performed the procedure you suggested to reset the credentials, while I was having the reported issue.

After the procedure:

It returns the help message, as if the command was incorrect... The variable "?" confirms it

I'm probably doing something wrong, but after reading the documentation, your answer, and trying a few times, I can't figure out what it is.

[Olamilekan Abdullateef Ajani]

Hello,

I apologize for the mixup, I gave you the procedure to change an admin user. To change the wazuh-wui password, please use the command below instead.

Download the password tool:

curl -so wazuh-passwords-tool.sh https://packages.wazuh.com/4.12/wazuh-passwords-tool.sh

Then reset the wazuh-wui account:

bash wazuh-passwords-tool.sh --api -u wazuh-wui -p new-wazuh-wui-password --admin-user wazuh --admin-password current-wazuh-password

new-wazuh-wui-password: you supply the new wazuh-wui password

current-wazuh-password: the wazuh user password.

Please note:  The password must have a length between 8 and 64 characters and contain at least one upper case letter, one lower case letter, a number and one of the following symbols: .*+?-. If no password is specified, the script will generate a random one.

You can find the current password from the install-files.tar from the setup using the command: sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

Ref:
https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html