Quantcast

Authentication failed - wsman client connection with server

classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Authentication failed - wsman client connection with server

George Varghese
Hi,

I had installed openwsman server & wsman commandline client into my machine. My problem is I can't connect wsman client with openwsman server.

I have created digest_auth.passwd file. I have copied here configuration file snippets,


#ssl_port = 5986
#ssl_cert_file = /etc/openwsman/servercert.pem
#ssl_key_file = /etc/openwsman/serverkey.pem
digest_password_file = /etc/openwsman/digest_auth.passwd
#basic_password_file = /etc/openwsman/simple_auth.passwd

-----
openwsman server listen to port 5985.

Please see the last few line logs of server..

Jul 10 11:51:36 [1632]      Working on IPv4 port 5985
Jul 10 11:51:36 [1632] Using Digest Authorization
Jul 10 11:51:36 [1632] Using Basic Authorization libwsman_pam_auth.so
Jul 10 11:51:36 [1632] Initializing http server
Jul 10 11:51:36 [1632] init_ctx: initialized context 0x28b78
Jul 10 11:51:36 [1632] Registered CIM Indication Listener: /cimindicationlistener/*
Jul 10 11:51:36 [1632] Using Digest Authorization for /cimindicationlistener:
Jul 10 11:51:36 [1632] Using Basic Authorization libwsman_pam_auth.so for /cimindicationlistener
Jul 10 11:51:36 [1632] Using Digest Authorization for /wsman:
Jul 10 11:51:36 [1632] Using Basic Authorization libwsman_pam_auth.so for /wsman
Jul 10 11:51:36 [1632] shttpd_listen: added socket 3

--

Then I trying to connect it with wsman command line client for identify reponse..
$wsman identify -h localhost -u admin --password test --port 5985

But I can't connect it with server..

Please help me.

Regards,
George


Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

Klaus Kaempf
* George <[hidden email]> [Jul 10. 2013 08:27]:
> Hi,
>
> I had installed openwsman server & wsman commandline client into my machine.
> My problem is I can't connect wsman client with openwsman server.
>
> I have created digest_auth.passwd file. I have copied here configuration
> file snippets,

How did you create the digest_auth.passwd file ? Did you use the
'htdigest' tool as advised here ?
https://github.com/Openwsman/openwsman/wiki/configuration-file-options


Klaus
--
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5, 90409 Nürnberg, Germany

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Openwsman-devel mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/openwsman-devel
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

gyani
In reply to this post by George Varghese


please post the output of the command that you are running . Is it only connectivity problem because of firewall setting or some authorization problem.

$wsman identify -h localhost -u admin --password test --port 5985

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

Klaus Kaempf
* gyani <[hidden email]> [Jul 10. 2013 09:42]:
>
>
> please post the output of the command that you are running . Is it only
> connectivity problem because of firewall setting or some authorization
> problem.
>
> $wsman identify -h localhost -u admin --password test --port 5985
>

wsman also has a debug option, add '-d 6' set it to full debug.

Klaus
--
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5, 90409 Nürnberg, Germany

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Openwsman-devel mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/openwsman-devel
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

George Varghese
I had used htdigest tool for creating digest file.

htdigest -c digest_auth.passwd OPENWSMAN admin

see the file contents in digest_auth.passwd,

admin:OPENWSMAN:57a1b94c48d4bf6a9ff031519b9469d9

--

see the logs of wsman with debug options,

--

# wsman -d 6 identify -h localhost -u admin --password test --port 5985
Jul 10 13:40:11  cl->authentication.verify_peer: 1
Jul 10 13:40:11  *****set post buf len = 238******
* About to connect() to localhost port 5985 (#0)
*   Trying 127.0.0.1... * connected
* Connected to localhost (127.0.0.1) port 5985 (#0)
> POST /wsman HTTP/1.1
Host: localhost:5985
Accept: */*
Content-Type: application/soap+xml;charset=UTF-8
User-Agent: WS-Management for all
Content-Length: 238

< HTTP/1.1 401 Unauthorized
< WWW-Authenticate: Basic realm="OPENWSMAN"
< WWW-Authenticate: Digest qop="auth", realm="OPENWSMAN", nonce="1373443811"
< Connection: Close
<
Jul 10 13:40:11  write_handler: recieved 135 bytes, all = 135

* Closing connection #0
Jul 10 13:40:11  Digest authentication is used
* About to connect() to localhost port 5985 (#0)
*   Trying 127.0.0.1... * connected
* Connected to localhost (127.0.0.1) port 5985 (#0)
* Server auth using Digest with user 'admin'
> POST /wsman HTTP/1.1
Authorization: Digest username="admin", realm="OPENWSMAN", nonce="1373443811", uri="/wsman", cnonce="MDE2MjY2", nc=00000001, qop="auth", response="4262b1536be80b83fdde5b2d1b6128f0"
Host: localhost:5985
Accept: */*
Content-Type: application/soap+xml;charset=UTF-8
User-Agent: WS-Management for all
Content-Length: 238

< HTTP/1.1 401 Unauthorized
< WWW-Authenticate: Basic realm="OPENWSMAN"
* Ignoring duplicate digest auth header.
< WWW-Authenticate: Digest qop="auth", realm="OPENWSMAN", nonce="1373443812"
< Connection: Close
<
* Closing connection #0
* Issue another request to this URL: 'http://localhost:5985/wsman'
* About to connect() to localhost port 5985 (#0)
*   Trying 127.0.0.1... * connected
* Connected to localhost (127.0.0.1) port 5985 (#0)
* Server auth using Digest with user 'admin'
> POST /wsman HTTP/1.1
Authorization: Digest username="admin", realm="OPENWSMAN", nonce="1373443811", uri="/wsman", cnonce="MDE2MjY2", nc=00000002, qop="auth", response="51c43ce93bc37dcd25a0d34c59418524"
Host: localhost:5985
Accept: */*
Content-Type: application/soap+xml;charset=UTF-8
User-Agent: WS-Management for all
Content-Length: 238

< HTTP/1.1 401 Unauthorized
< WWW-Authenticate: Basic realm="OPENWSMAN"
* Authentication problem. Ignoring this.
< WWW-Authenticate: Digest qop="auth", realm="OPENWSMAN", nonce="1373443812"
< Connection: Close
<
Jul 10 13:40:12  write_handler: recieved 135 bytes, all = 135

* Closing connection #0
Jul 10 13:40:12  Digest authentication is used
Jul 10 13:40:12  Invoking Auth request callback
Authentication failed, please retry
User name:


Regards,
George
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

gyani
As you are using Digest in server try this .It may help

$ wsman -d 6 identify -a Digest -h localhost -u admin --password test --port 5985
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

George Varghese
I tried it.  But authentication error still exists..
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

George Varghese
I have commented the following things in /etc/openwsman.conf file..
referring https://github.com/Openwsman/openwsman/wiki/configuration-file-options 

#
# Authentication backend for BASIC authentication. Default is to read a configuration file defined with 'basic_password_file'
#

#basic_authenticator = libwsman_pam_auth.so
#basic_authenticator_arg = openwsman


after that the connection problem solved. Thank you.

Regards,
George
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Authentication failed - wsman client connection with server

Klaus Kaempf
* George Varghese <[hidden email]> [Jul 10. 2013 12:17]:

> I have commented the following things in /etc/openwsman.conf file..
> referring
> https://github.com/Openwsman/openwsman/wiki/configuration-file-options 
>
> #
> # Authentication backend for BASIC authentication. Default is to read a
> configuration file defined with 'basic_password_file'
> #
>
> #basic_authenticator = libwsman_pam_auth.so
> #basic_authenticator_arg = openwsman
>
>
> after that the connection problem solved. Thank you.

Great, thanks for the feedback. Still wsman should output a proper
error message, I'm digging into this now.

Klaus
--
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5, 90409 Nürnberg, Germany

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Openwsman-devel mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/openwsman-devel
Loading...