I built a new OpenVAS server using the instructions (https://greenbone.github.io/docs/latest/22.4/source-build/index.html#openvasd )
I created a user, but I cannot login as that user. When I enter the username and password, the screen flashes but I’m not able to login.
/usr/sbin/gvmd --create-user=OpenVASUser --role=Admin
User created with password ‘c2ebb759-a141-4b0d-93a4-8e6113e0bd83’.
I see this in /var/log/gvm/gvmd.log
md main:MESSAGE:2024-10-19 19h04.12 utc:158636: Greenbone Vulnerability Manager version 22.4.1 (DB revision 250)
md manage: INFO:2024-10-19 19h04.12 utc:158636: Creating user.
however, I also see this in the log. This appeared yesterday, but I don’t see this message repeating now:
md manage:WARNING:2024-10-18 21h12.39 utc:67443: init_manage_open_db: sql_open failed
I did the steps to set up postgres listed here:
Building the Greenbone Community Edition from source requires knowledge about: Using a terminal, Shell programming basics, Installing software via apt or dnf, Using a C compiler, Using CMake and ma...
User GVM can connect to the postgres database:
sudo -u gvm bash
bash-4.4$ psql gvmd
psql (10.23)
Type “help” for help.
gvmd=>
psql gvmd -c “grant dba to gvm;”
NOTICE: role “gvm” is already a member of role “dba”
GRANT ROLE
user gvm can select * from the users table in the gvmd database, which shows an OpenVASUser exists
the password is a crypted string, not the literal password output when the user was created.
I see this message in /var/log/gvm/gsad.log.
gsad gmp:MESSAGE:2024-10-19 19h06.22 GMT:62137: Authentication success for ‘OpenVASUser’ from x.x.x.x
Though I was not able to login as OpenVASUser
This is what I see if I open developer tools in Chrome and try to login:
tail gsad.log
gsad gmp:MESSAGE:2024-10-21 13h04.55 GMT:62137: Authentication success for ‘OpenVASUser’ from 35.191.22.115
gsad gmp:MESSAGE:2024-10-21 13h06.08 GMT:62137: Authentication success for ‘OpenVASUser’ from 130.211.2.231
gsad gmp:MESSAGE:2024-10-21 13h10.32 GMT:62137: Authentication success for ‘OpenVASUser’ from 35.191.21.211
gsad gmp:MESSAGE:2024-10-21 13h11.07 GMT:62137: Authentication success for ‘OpenVASUser’ from 35.191.21.209
/usr/share/gvm/gsad/web/locales/ was owned by root
ran
sudo chown gvm:gvm -R /usr/share/gvm/
but no change. Still see the
https://openvas-v2.lite-portal.com/locales/gsa-en-US.json 404 (Not Found)
error when I load the page.
That file is indeed missing:
ls -l /usr/share/gvm/gsad/web/locales/
total 192
-rw-r–r–. 1 gvm gvm 11681 Jan 11 2023 gsa-ar.json
-rw-r–r–. 1 gvm gvm 121846 Jan 11 2023 gsa-de.json
-rw-r–r–. 1 gvm gvm 3 Jan 11 2023 gsa-fr.json
-rw-r–r–. 1 gvm gvm 11919 Jan 11 2023 gsa-pt_BR.json
-rw-r–r–. 1 gvm gvm 3 Jan 11 2023 gsa-ru.json
-rw-r–r–. 1 gvm gvm 3 Jan 11 2023 gsa-tr.json
-rw-r–r–. 1 gvm gvm 3 Jan 11 2023 gsa-zh_CN.json
-rw-r–r–. 1 gvm gvm 30407 Jan 11 2023 gsa-zh_TW.json
but I don’t see it here either:
however, that file does not exist on our existing older OpenVAS installation, and I see that same error in developer tools on that website, though I am able to login.