Minemeld show Error when login "ERROR CHECKING CREDENTIALS: Timeout"

[iThreatHunt]

I clone VM Minemeld. Then I change IP & Hostname on Cloned Minemeld VM.

When I login on WEB GUI. It show message: "ERROR CHECKING CREDENTIALS: Timeout"

How I resolved this issue? What log for investigate?

Thank you

[lmori]

Hi @iThreatHunt,

you should log into the SSH console and check if your system is not overloaded:

- check if all the minemeld components are running "sudo -u minemeld mm-console status"

- check memory and CPU load and disk

- check the log of the API (/opt/minemeld/log/minemeld-web.log)

With this information we can investigate further

Thanks,

luigi

[iThreatHunt]

@lmori

I can't use command

# sudo -u minemeld mm-console status
sudo: mm-console: command not found

/opt/minemeld/log/minemeld-web.log

[2017-11-09 16:16:27 ICT] [11719] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd
[2017-11-09 16:16:27 ICT] [11719] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd
[2017-11-09 16:16:56 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11719)
[2017-11-09 16:16:56 +0000] [11719] [INFO] Worker exiting (pid: 11719)
[2017-11-09 16:16:56 +0000] [11750] [INFO] Booting worker with pid: 11750
[2017-11-09 16:16:56 ICT] [11750] [INFO] MMLogger started
/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead.
.format(x=modname), ExtDeprecationWarning
[2017-11-09 16:16:57 ICT] [11750] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True}
[2017-11-09 16:16:57 ICT] [11750] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd
[2017-11-09 16:16:57 ICT] [11750] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd
[2017-11-09 16:17:26 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11750)
[2017-11-09 16:17:26 +0000] [11750] [INFO] Worker exiting (pid: 11750)
[2017-11-09 16:17:26 +0000] [11770] [INFO] Booting worker with pid: 11770
[2017-11-09 16:17:27 ICT] [11770] [INFO] MMLogger started
/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead.
.format(x=modname), ExtDeprecationWarning
[2017-11-09 16:17:27 ICT] [11770] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True}
[2017-11-09 16:17:27 ICT] [11770] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd
[2017-11-09 16:17:27 ICT] [11770] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd
[2017-11-09 16:17:56 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11770)
[2017-11-09 16:17:56 +0000] [11770] [INFO] Worker exiting (pid: 11770)
[2017-11-09 16:17:56 +0000] [11786] [INFO] Booting worker with pid: 11786
[2017-11-09 16:17:57 ICT] [11786] [INFO] MMLogger started
/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead.
.format(x=modname), ExtDeprecationWarning
[2017-11-09 16:17:57 ICT] [11786] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True}
[2017-11-09 16:17:57 ICT] [11786] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd
[2017-11-09 16:17:57 ICT] [11786] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd
[2017-11-09 16:18:26 +0000] [4481] [CRITICAL] WORKER TIMEOUT (pid:11786)
[2017-11-09 16:18:26 +0000] [11786] [INFO] Worker exiting (pid: 11786)
[2017-11-09 16:18:27 +0000] [11799] [INFO] Booting worker with pid: 11799
[2017-11-09 16:18:27 ICT] [11799] [INFO] MMLogger started
/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/flask/exthook.py:71: ExtDeprecationWarning: Importing flask.ext.login is deprecated, use flask_login instead.
.format(x=modname), ExtDeprecationWarning
[2017-11-09 16:18:27 ICT] [11799] [INFO] Config loaded: {'MINEMELD_LOCAL_LIBRARY_PATH': '/opt/minemeld/local/library', 'USERS_DB': 'wsgi.htpasswd', 'MINEMELD_LOCAL_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes', 'SUPERVISOR_URL': 'unix:///var/run/minemeld/minemeld.sock', 'API_USERS_ATTRS': {}, 'MINEMELD_PROTOTYPE_PATH': '/opt/minemeld/local/prototypes/:/opt/minemeld/prototypes/current', 'MINEMELD_PIP_PATH': '/opt/minemeld/engine/current/bin/pip', 'FEEDS_ATTRS': {'siem_local_output': {'tags': ['feedti']}}, 'MINEMELD_TRACED_PURGE_PATH': '/opt/minemeld/engine/current/bin/mm-traced-purge', 'API_AUTH_ENABLED': True, 'FEEDS_AUTH_ENABLED': True, 'MINEMELD_LOG_DIRECTORY_PATH': '/opt/minemeld/log', 'FEEDS_USERS_ATTRS': {'fwuser': {'tags': ['feedti']}}, 'MINEMELD_7Z_PATH': '/usr/bin/7z', 'MINEMELD_RESTORE_PATH': '/opt/minemeld/engine/current/bin/mm-restore', 'MINEMELD_LOCAL_PATH': '/opt/minemeld/local', 'MINEMELD_GIT_PATH': '/usr/bin/git', 'SNS_ENABLED': True}
[2017-11-09 16:18:27 ICT] [11799] [INFO] USERS_DB loaded from /opt/minemeld/local/config/api/wsgi.htpasswd
[2017-11-09 16:18:27 ICT] [11799] [INFO] FEEDS_USERS_DB loaded from /opt/minemeld/local/config/api/feeds.htpasswd

[iThreatHunt]

@lmori

System Heath: Good

web.log in attachments

[Saravananna]

Am also facing the same issue in centos 7.4 

[lmori]

Please, could you set SELinux in permissive mode and check the system audit log for possible denies?

Luigi