New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

alterioc — Tue, 07 May 2019 02:28:21 GMT

We have been running Minemeld on Ubuntu 18.04LTS, but since that OS is EOL I am working on a replacement server running CentOS 7. The server was built for me by the server team and was joined to the domain. I use my AD credentials to ssh to the server and then use sudo on the install commands. I used the instructions in github and the install worked fine. But I can't log into the MineMeld webui. I get bad credentials. I tried admin with the default password minemeld but it failed. I'm guessing it's looking for the server admin creds which only the server admins know. But I also tried my AD creds that I use to login to the server over ssh (since I added my AD userid/pwd to the minemeld group per the install instructions on github). Those also failed. I also tried creating a local user account testmm01, changing the password, and adding it to the minemeld group -- no luck. Ideally I would like use my AD account for login to the webui and not have to use admin for anything. I tried restarting the minemeld service, to no avail. Is it possible to do what I'm trying to do? If so, what needs to be done so that the webui will accept my AD creds? Thank you.

$ sudo yum install -y wget git gcc python-devel libffi-devel openssl-devel zlib-dev sqlite-devel bzip2-devel
$ wget https://bootstrap.pypa.io/get-pip.py
$ sudo -H python get-pip.py
$ sudo -H pip install ansible
$ git clone https://github.com/PaloAltoNetworks/minemeld-ansible.git
$ cd minemeld-ansible
$ ansible-playbook -K -e "minemeld_version=master" -i 127.0.0.1, local.yml

$ sudo useradd testmm01

$ sudo passwd testmm01
$ sudo usermod -a -G minemeld testmm01

Re: New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

adam-w — Tue, 07 May 2019 10:14:00 GMT

Some time ago I have same problem. I dont remember exact cause, but after several hours of fighting I rebooted whole server, and default login credentials started to work...

But does anyone know, if it is possible to setup authentication to WEB UI based on RADIUS server, rather than local database?

Maby somewhere is some extension for that functionality?

Re: New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

alterioc — Wed, 08 May 2019 15:16:33 GMT

Thank you, Adam-w. I had restarted the minemeld service but didn't try rebooting. After a reboot I can login the ui with admin/minemeld.

I'm still wondering if/how we can enable AD authentication on the UI. Does anyone know if this is possible?

topic Re: New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds in General Topics

New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

Re: New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

Re: New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds