Unable to log in to Expediton after upgrading

[GNeyrinck]

Hello,

After upgrading expedition, I'm no longer able to login to the tool using the GUI.

Via CLI I still can log in.

I had changed the admin password, and I'm sure I'm using the correct password, since I've been using this login prior to the upgrade of Expedition.

In the past I could reset the admin password via the PHP script in /home/userSpace/utils

But if I try to run this, I'm gettting another error:

sudo php /home/userSpace/utils/restoreAdmin.php

[sudo] password for expedition:

PHP Warning:  mysqli::__construct(): (HY000/2002): No such file or directory in /home/userSpace/utils/restoreAdmin.php on line 81

Connection failed: No such file or directoryexpedition@Expedition

74 $servername = "localhost";

75 $username = "root";

76 $password = "paloalto";

77

78 $colors = new Colors();

79

80 // Create connection

81 $conn = new mysqli($servername, $username, $password);

82

83 // Check connection

84 if ($conn->connect_error) {

85     die("Connection failed: " . $conn->connect_error);

86 }

87 echo $colors->getColoredString("\n".chr(0xE2).chr(0x9C).chr( 0x93)."\tConnected successfully to the database\n", "green");

88

89 $checkAdminExists = "SELECT id FROM pandbRBAC.users WHERE email='admin' and id=1;";

90 $result=$conn->query($checkAdminExists);

I'm out of options in how to solve this, without re-installing the tool again.

Anyone has a clue?

Regards,

Gerrit

[JohnMaki]

I am having a similar issue. I was unable to authenticate on our existing Expedition VM so i spun up a new one with the new process (Install Ubuntu the Expedition installer via wget) and same issue. No credentials work via GUI. I can access the console just fine. Ran apt-get update/upgrade no change.

[JohnMaki]

I ran the following:

tail -g /var/log/apache2/error.log.

[:error] [pid2111] [client 10.10.1.60:10857] PHP Fatal error: Database connection failed; Connection refused in /var/www/html/libs/database.php on line 24, referer: https://10.10.1.10/

Permissions issue on database maybe?

[dgildelaig]

To me, this sounds an issue related to upgrading expedition instead of updating.

The upgrade has updated all packages,including the MariaDB package, and broke dependencies that are required for the tool to work.

For this reason, there may be missing package functions that allow Expedition to interact with the database.

Does it make sense?

[GNeyrinck]

Hi,

I did as in:

https://live.paloaltonetworks.com/t5/Expedition-Discussions/Incorrect-User-or-Password-from-GUI/m-p/...

Try deleting the file

sudo rm -f /var/lib/mysql/tc.log

and afterwards, try starting mariadb again.

sudo service mysql start

Later, if MariaDB started correctly, just check if you can log into the GUI with your normal credentials. If it still fails, then try restorning the admin password with the CLI script

php /home/userSpace/utils/restore/restoreAdmin.php

Then I could log on again:

root@Expedition:/home/expedition# sudo php /home/userSpace/utils/restoreAdmin.php

✓ Connected successfully to the database

✓ Admin user found

✓ Admin password restored to:    'paloalto'