Skip to content
This repository has been archived by the owner on Sep 3, 2024. It is now read-only.

PROVIDER_AUTHORIZATION_ERROR with wazuh 4.3.10 OVA Deployment #61

Open
smbutler-ire opened this issue Feb 3, 2023 · 0 comments
Open

Comments

@smbutler-ire
Copy link

smbutler-ire commented Feb 3, 2023

Clean New install of Wazuh 4.3.10 OVA on Oracle VirtualBox
Wazuh using default config and IP: 192.168.0.207

using docker option for install and config

Starbase config.yml:
integrations:

name: graph-wazuh
instanceId: testInstanceId
directory: ./.integrations/graph-wazuh
gitRemoteUrl: https://github.com/JupiterOne/graph-wazuh.git
config:
  USERNAME: wazuh
  PASSWORD: wazuh
  MANAGER_URL: https://192.168.0.207:55000

storage:

engine: neo4j
config:
  username: neo4j
  password: devpass
  uri: bolt://192.168.0.207:7687
  database: neo4j

Build Process produces no errors

docker compose run starbase run returns:

09:39:20.892Z INFO Local: Starting execution with config... (compressionEnabled=false)
09:39:21.034Z WARN Local: Error occurred while validating integration configuration. Failed to access provider resource. This integration is likely misconfigured or has insuaccess the resource. Please ensure your integration's configuration settings are set up correctly. (errorCode="PROVIDER_AUTHORIZATION_ERROR", errorId="3836cbb6-ccf7-4650-84f5authorization failed at provided managerUrl: PROVIDER_API_ERROR Provider API failed at https://192.168.0.207:55000/security/user/authenticate: undefined undefined") (errorId=c85, code=PROVIDER_AUTHORIZATION_ERROR)
Error: Provider authorization failed at provided managerUrl: PROVIDER_API_ERROR Provider API failed at https://192.168.0.207:55000/security/user/authenticate: undefined und
at Object.validateInvocation (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/config.ts:71:11)
at processTicksAndRejections (internal/process/task_queues.js:95:5)
at executeWithContext (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/execution/executeIntegration.ts:222:7)
at timeOperation (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/metrics/index.ts:26:10)
at executeIntegrationLocally (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/execution/executeIntegration.ts:89
at Command. (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-cli/src/commands/collect.ts:81:23)
at Command.parseAsync (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-cli/node_modules/commander/lib/command.js:916:5)
Caused By: Error: Provider API failed at https://192.168.0.207:55000/security/user/authenticate: undefined undefined
at WazuhClient.makeRequest (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:229:13)
at processTicksAndRejections (internal/process/task_queues.js:95:5)
at WazuhClient.fetchAuth (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:127:44)
at WazuhClient.setRequestOptions (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:56:34)
at WazuhClient.configure (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:37:5)
at Object.validateInvocation (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/config.ts:60:5)
at executeWithContext (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/execution/executeIntegration.ts:222:7)
at timeOperation (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/metrics/index.ts:26:10)
at executeIntegrationLocally (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/execution/executeIntegration.ts:89
at Command. (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-cli/src/commands/collect.ts:81:23)
Caused by: Error: Provider API failed at https://192.168.0.207:55000/security/user/authenticate: undefined undefined
at WazuhClient.makeRequest (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:229:13)
at processTicksAndRejections (internal/process/task_queues.js:95:5)
at WazuhClient.fetchAuth (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:127:44)
at WazuhClient.setRequestOptions (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:56:34)
at WazuhClient.configure (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/wazuh/client.ts:37:5)
at Object.validateInvocation (/opt/jupiterone/starbase/.integrations/graph-wazuh/src/config.ts:60:5)
at executeWithContext (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/execution/executeIntegration.ts:222:7)
at timeOperation (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/metrics/index.ts:26:10)
at executeIntegrationLocally (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-runtime/src/execution/executeIntegration.ts:89
at Command. (/opt/jupiterone/starbase/.integrations/graph-wazuh/node_modules/@jupiterone/integration-sdk-cli/src/commands/collect.ts:81:23)
09:39:21.045Z INFO Local: Collected metric.
metric: {
"name": "duration-collect",
"unit": "Milliseconds",
"value": 153,
"timestamp": 1675417161044
}
info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.
$ /opt/jupiterone/starbase/node_modules/.bin/j1-integration neo4j push -i testInstanceId -d ./.integrations/graph-wazuh/.j1-integration -db neo4j
Beginning data upload to local neo4j
Data uploaded to local neo4j
open http://localhost:7474/browser/ to browse your Neo4J graph.
Done in 11.08s.

Testing Wazuh API via curl as per [API Guide] (https://documentation.wazuh.com/current/user-manual/api/getting-started.html)
Works correctly using same credentials as used in config.yml

@smbutler-ire smbutler-ire changed the title PROVIDER_AUTHORIZATION_ERROR with wazuh 4.3 OVA Deployment PROVIDER_AUTHORIZATION_ERROR with wazuh 4.3.10 OVA Deployment Feb 3, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant