Error: Authentication Exception

273 views

Skip to first unread message

Michael

unread,

Apr 18, 2024, 11:01:42 AM4/18/24

to Wazuh | Mailing List

Hello guys,
I am running a single-node wazuh server 4.7.3 on Ubuntu 22.04.4 LTS since several months.
However after manually upgrading some Ubuntu packages (openssh server/client, python3 update manager), I got an internal Wazuh App Error.
I deinstalled the Wazuh server package completely using bash wazuh-install.sh -u, rebooted the system and reinstalled using bash wazuh-install.sh -a. Everything was successfully installed, however when calling the web dashboard it gives this error:

{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."}

Filebeat test output gives me:
filebeat test output
elasticsearch: https://127.0.0.1:9200...
  parse url... OK
  connection...
    parse host... OK
    dns lookup... OK
    addresses: 127.0.0.1
    dial up... OK
  TLS...
    security: server's certificate chain verification is enabled
    handshake... OK
    TLS version: TLSv1.2
    dial up... OK
  talk to server... OK
  version: 7.10.2 tail -f /var/log/syslog | grep -i -E "error|warn"
Apr 18 14:02:03 vps-4991 opensearch-dashboards[54590]: {"type":"error","@timestamp":"2024-04-18T12:02:03Z","tags":["connection","client","error"],"pid":54590,"level":"error","error":{"message":"139793866901440:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 46\n","name":"Error","stack":"Error: 139793866901440:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 46\n","code":"ERR_SSL_SSLV3_ALERT_CERTIFICATE_UNKNOWN"},"message":"139793866901440:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 46\n"}
Apr 18 14:02:03 vps-4991 opensearch-dashboards[54590]: {"type":"log","@timestamp":"2024-04-18T12:02:03Z","tags":["error","http","server","OpenSearchDashboards"],"pid":54590,"message":"Error: Authentication Exception\n    at SecurityClient.authinfo (/usr/share/wazuh-dashboard/plugins/securityDashboards/server/backend/opensearch_security_client.ts:118:13)\n    at runMicrotasks (<anonymous>)\n    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n    at /usr/share/wazuh-dashboard/plugins/securityDashboards/server/auth/types/authentication_type.ts:208:18\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:112:22)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"}
Apr 18 14:02:03 vps-4991 opensearch-dashboards[54590]: {"type":"error","@timestamp":"2024-04-18T12:02:03Z","tags":[],"pid":54590,"level":"error","error":{"message":"Internal Server Error","name":"Error","stack":"Error: Internal Server Error\n    at HapiResponseAdapter.toInternalError (/usr/share/wazuh-dashboard/src/core/server/http/router/response_adapter.js:80:19)\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:151:34)\n    at runMicrotasks (<anonymous>)\n    at processTicksAndRejections (node:internal/process/task_queues:96:5)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"},"url":"https://hids.tail3b5c7.ts.net/app/wazuh","message":"Internal Server Error"}Some kind of "Authenthication Exception". What could be the problem?
Any help would be appreciated.

Michael

unread,

Apr 18, 2024, 11:01:42 AM4/18/24

to Wazuh | Mailing List

Hi guys,

I am running a single-node wazuh server 4.7.3 on Ubuntu 22.04.4 LTS since several months.

However after manually upgrading some Ubuntu packages (openssh server/client, python3 update manager) using apt, I got an internal Wazuh App Error.
I deinstalled the Wazuh server package completely using bash wazuh-install.sh -u, rebooted the system and reinstalled using bash wazuh-install.sh -a. Everything was successfully installed, however when calling the web dashboard it gives the error:

{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."}