{"action":"created","issue":{"url":"https://api.github.com/repos/TheHive-Project/TheHive/issues/600","repository_url":"https://api.github.com/repos/TheHive-Project/TheHive","labels_url":"https://api.github.com/repos/TheHive-Project/TheHive/issues/600/labels{/name}","comments_url":"https://api.github.com/repos/TheHive-Project/TheHive/issues/600/comments","events_url":"https://api.github.com/repos/TheHive-Project/TheHive/issues/600/events","html_url":"https://github.com/TheHive-Project/TheHive/issues/600","id":329466546,"node_id":"MDU6SXNzdWUzMjk0NjY1NDY=","number":600,"title":"Error with Single Sign-On on TheHive with X.509 Certificates","user":{"login":"EricPE69","id":39956814,"node_id":"MDQ6VXNlcjM5OTU2ODE0","avatar_url":"https://avatars1.githubusercontent.com/u/39956814?v=4","gravatar_id":"","url":"https://api.github.com/users/EricPE69","html_url":"https://github.com/EricPE69","followers_url":"https://api.github.com/users/EricPE69/followers","following_url":"https://api.github.com/users/EricPE69/following{/other_user}","gists_url":"https://api.github.com/users/EricPE69/gists{/gist_id}","starred_url":"https://api.github.com/users/EricPE69/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EricPE69/subscriptions","organizations_url":"https://api.github.com/users/EricPE69/orgs","repos_url":"https://api.github.com/users/EricPE69/repos","events_url":"https://api.github.com/users/EricPE69/events{/privacy}","received_events_url":"https://api.github.com/users/EricPE69/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"To-om","id":23172576,"node_id":"MDQ6VXNlcjIzMTcyNTc2","avatar_url":"https://avatars3.githubusercontent.com/u/23172576?v=4","gravatar_id":"","url":"https://api.github.com/users/To-om","html_url":"https://github.com/To-om","followers_url":"https://api.github.com/users/To-om/followers","following_url":"https://api.github.com/users/To-om/following{/other_user}","gists_url":"https://api.github.com/users/To-om/gists{/gist_id}","starred_url":"https://api.github.com/users/To-om/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/To-om/subscriptions","organizations_url":"https://api.github.com/users/To-om/orgs","repos_url":"https://api.github.com/users/To-om/repos","events_url":"https://api.github.com/users/To-om/events{/privacy}","received_events_url":"https://api.github.com/users/To-om/received_events","type":"User","site_admin":false},"assignees":[{"login":"To-om","id":23172576,"node_id":"MDQ6VXNlcjIzMTcyNTc2","avatar_url":"https://avatars3.githubusercontent.com/u/23172576?v=4","gravatar_id":"","url":"https://api.github.com/users/To-om","html_url":"https://github.com/To-om","followers_url":"https://api.github.com/users/To-om/followers","following_url":"https://api.github.com/users/To-om/following{/other_user}","gists_url":"https://api.github.com/users/To-om/gists{/gist_id}","starred_url":"https://api.github.com/users/To-om/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/To-om/subscriptions","organizations_url":"https://api.github.com/users/To-om/orgs","repos_url":"https://api.github.com/users/To-om/repos","events_url":"https://api.github.com/users/To-om/events{/privacy}","received_events_url":"https://api.github.com/users/To-om/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2018-06-05T13:52:06Z","updated_at":"2018-06-05T15:20:15Z","closed_at":null,"author_association":"NONE","body":"Error with Single Sign-On on TheHive with X.509 Certificates\r\n\r\n### Request Type\r\nBug /\r\n\r\n### Work Environment\r\n\r\n| Question              | Answer\r\n|---------------------------|--------------------\r\n| OS version (server)       | SLES 12 SP2\r\n| OS version (client)       | Windows 7\r\n| TheHive version / git hash   | 3.0.9\r\n| Package Type              | Binary\r\n| Browser type & version    | Chrome 66, IE11\r\n\r\n\r\n### Problem Description\r\nI configure thehive as described in the documentation etwhen I try to logon by ssl I have the logon screen and in the log there are errors about certificate/pki:\r\n[warn] application - /applis/xagcla/pur/xagcla02/par/application.conf: 50: auth.type is deprecated, use auth.provider instead\r\n[error] s.TheHiveAuthSrv - Authentication module pki not found\r\n[info] play.api.Play - Application started (Prod)\r\n[info] p.c.s.AkkaHttpServer - Listening for HTTP on /0.0.0.0:9000\r\n[info] p.c.s.AkkaHttpServer - Listening for HTTPS on /0.0.0.0:9443\r\n[warn] application - /applis/xagcla/pur/xagcla02/par/application.conf: 5: play.crypto.secret is deprecated, use play.http.secret.key instead\r\n[warn] application - /applis/xagcla/pur/xagcla02/par/application.conf: 5: play.crypto.secret is deprecated, use play.http.secret.key instead\r\n[error] o.e.c.Authenticated - Authentication failure:\r\n        session: AuthenticationError User session not found\r\n        pki: AuthenticationError Certificate doesn't contain user information\r\n        key: AuthenticationError Authentication header not found\r\n        basic: AuthenticationError Authentication header not found\r\n        init: AuthenticationError Use of initial user is forbidden because users exist in database\r\n[info] o.e.ErrorHandler - GET /api/user/current returned 401\r\norg.elastic4play.AuthenticationError: Authentication failure\r\n        at org.elastic4play.controllers.Authenticated.$anonfun$getContext$4(Authenticated.scala:220)\r\n        at scala.concurrent.Future.$anonfun$flatMap$1(Future.scala:304)\r\n        at scala.concurrent.impl.Promise.$anonfun$transformWith$1(Promise.scala:37)\r\n        at scala.concurrent.impl.CallbackRunnable.run(Promise.scala:60)\r\n        at akka.dispatch.BatchingExecutor$AbstractBatch.processBatch(BatchingExecutor.scala:55)\r\n        at akka.dispatch.BatchingExecutor$BlockableBatch.$anonfun$run$1(BatchingExecutor.scala:91)\r\n        at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.java:12)\r\n        at scala.concurrent.BlockContext$.withBlockContext(BlockContext.scala:81)\r\n        at akka.dispatch.BatchingExecutor$BlockableBatch.run(BatchingExecutor.scala:91)\r\n        at akka.dispatch.TaskInvocation.run(AbstractDispatcher.scala:40)\r\n\r\n\r\n### Steps to Reproduce\r\nConfig in application.conf:\r\nhttps.port: 9443\r\nplay.server.https.keyStore {\r\n  path: \"/applis/yyyyy.jks\"\r\n  type: \"JKS\"\r\n  password: \"xxxxxxx\"\r\n}\r\nplay.server.https.trustStore {\r\n  path: \"/applis/yyyyy.jks\"\r\n  type: \"JKS\"\r\n  password: \"xxxxxxx\"\r\n}\r\n\r\nauth.method.pki = true # enable PKI authentication method\r\nauth.pki.certificateField = uid\r\nauth {\r\n        # \"type\" parameter contains the authentication provider(s). It can be multi-valued, which is useful\r\n        # for migration.\r\n        # The available auth types are:\r\n        # - services.LocalAuthSrv : passwords are stored in the user entity within ElasticSearch). No\r\n        #   configuration are required.\r\n        # - ad : use ActiveDirectory to authenticate users. The associated configuration shall be done in\r\n        #   the \"ad\" section below.\r\n        # - ldap : use LDAP to authenticate users. The associated configuration shall be done in the\r\n        #   \"ldap\" section below.\r\n        type = [pki,local]\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/TheHive-Project/TheHive/issues/comments/394750293","html_url":"https://github.com/TheHive-Project/TheHive/issues/600#issuecomment-394750293","issue_url":"https://api.github.com/repos/TheHive-Project/TheHive/issues/600","id":394750293,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NDc1MDI5Mw==","user":{"login":"To-om","id":23172576,"node_id":"MDQ6VXNlcjIzMTcyNTc2","avatar_url":"https://avatars3.githubusercontent.com/u/23172576?v=4","gravatar_id":"","url":"https://api.github.com/users/To-om","html_url":"https://github.com/To-om","followers_url":"https://api.github.com/users/To-om/followers","following_url":"https://api.github.com/users/To-om/following{/other_user}","gists_url":"https://api.github.com/users/To-om/gists{/gist_id}","starred_url":"https://api.github.com/users/To-om/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/To-om/subscriptions","organizations_url":"https://api.github.com/users/To-om/orgs","repos_url":"https://api.github.com/users/To-om/repos","events_url":"https://api.github.com/users/To-om/events{/privacy}","received_events_url":"https://api.github.com/users/To-om/received_events","type":"User","site_admin":false},"created_at":"2018-06-05T15:20:15Z","updated_at":"2018-06-05T15:20:15Z","author_association":"CONTRIBUTOR","body":"If you run the command `openssl s_client -connect <THE_HIVE_IP_ADDRESS>:9443` you should see a section `Acceptable client certificate CA names`.\r\nIf client certificate is not requested, you will see `No client certificate CA names sent`"}}
{"actor":{"display_login":"To-om"}}