Unable to start the webserver

[danje57]

Hi,

I've juste installed the tool

apt-get install postgresql
sudo pip3 install psycopg2

cd install
sudo su - postgres
createuser vulnmanager
psql -c "\password vulnmanager"
createdb -O vulnmanager vulnmanager
exit

Then I tried to start the web server:

cd /opt/Vulnerability-management/sbin
python3.4 webserver.py

But seems that Postgresql is not found by the server
"Unable to connect to PostgreSQL. Is it running on localhost:5432?"

netstat -an | grep "5432"

`tcp6 0 0 ::1:5432 :::* LISTEN

unix 2 [ ACC ] STREAM LISTENING 13010 /var/run/postgresql/.s.PGSQL.5432
`

[PidgeyL]

in ./lib/Config.py, line 85, can you change that to except Exception as e and add a print(e) after?
I'll have a look

[danje57]

This is the result:

`FATAL: password authentication failed for user "vulnmanager"
FATAL: password authentication failed for user "vulnmanager"

Traceback (most recent call last):
File "../sbin/webserver.py", line 29, in
import lib.database.VulnManager as vmdb
File "/opt/Vulnerability-management/sbin/../lib/database/VulnManager/init.py", line 24, in
exec(code)
File "", line 12, in
File "/opt/Vulnerability-management/sbin/../lib/objects/init.py", line 4, in
from .User import User
File "/opt/Vulnerability-management/sbin/../lib/objects/User.py", line 18, in
from lib.database.Users import getUser, checkPass
File "/opt/Vulnerability-management/sbin/../lib/database/Users.py", line 17, in
conn = conf.getVMpsqlConnection()
File "/opt/Vulnerability-management/sbin/../lib/Config.py", line 88, in getVMpsqlConnection
return conn
UnboundLocalError: local variable 'conn' referenced before assignment
`

[PidgeyL]

Seems like you used the wrong password. What's your current set-up? (no need to disclose passwords ofc, just distinct between the default "vulnmanager" and your own password

[danje57]

I followed the instructions:

apt-get install postgresql
sudo pip3 install psycopg2

cd install
sudo su - postgres
createuser vulnmanager
psql -c "\password vulnmanager"
createdb -O vulnmanager vulnmanager
exit

Then as posgres user I started the webserver.py and that's it.

I don't configure anything else.

[danje57]

I don't know If I need to write my password in the webserver.py
I don't see any variable for that.

[PidgeyL]

I just remembered, this looks familiar.
Are you running it on the same machine you have your postgresql server on?
If so, you need to enable "local log-in" (see step in README): If you run the vulnerability manager on the same server as the postgresql server, change local all postgres peer to local all postgres md5" in the /etc/postgresql//main/pg_hba.conf file

[danje57]

Yes of course sorry, I've done this change, but the result is the same.

[danje57]

This is where the configuration has been changed:

# Database administrative login by Unix domain socket
local all postgres md5

[PidgeyL]

Is that line also on # "local" is for Unix domain socket connections only, IPv4 local connections, and IPv6 local connections?

[danje57]

This is the complete extract:

# Database administrative login by Unix domain socket
local all postgres md5

# TYPE DATABASE USER ADDRESS METHOD

# "local" is for Unix domain socket connections only
local all all peer
# IPv4 local connections:
host all all 127.0.0.1/32 md5
# IPv6 local connections:
host all all ::1/128 md5
# Allow replication connections from localhost, by a user with the
# replication privilege.
#local replication postgres peer
#host replication postgres 127.0.0.1/32 md5
#host replication postgres ::1/128 md5

I've also tried to change peer to md5 for the local, but it's the same thing :-/

[PidgeyL]

And you did this step as well? psql -c "\password vulnmanager" and set the password to vulnmanager (you can change this later on, or change the passwords in the install script)
I'm not sure what's wrong then. Can you redo this step, to make sure there is no typo?
When you execute this command, it will ask for a password. You can give the default password "vulnmanager".
I quickly checked, and saw that I currently do not support alternative passwords (reason being, I did not find a safe way to store them yet...), I'll add that to my to-do list

[danje57]

Ok, I've done all steps and I provided the default password.

Now I've another error:

root@vfeed:/opt/Vulnerability-management# python3.4 install/createPostgresDB.py
Traceback (most recent call last):
File "install/createPostgresDB.py", line 233, in <module>
createTables(conn)
File "install/createPostgresDB.py", line 89, in createTables
name text NOT NULL UNIQUE);""")
psycopg2.ProgrammingError: relation "components" already exists

[PidgeyL]

This is because the database is already partially filled. Please drop the database and re-run the set-up scripts

[danje57]

unfortunaltely I've this error :-/

root@vfeed:/opt/Vulnerability-management/install# python3.4 createPostgresDB.py
created tables
Traceback (most recent call last):
File "createPostgresDB.py", line 235, in <module>
addForeignKeys(conn)
File "createPostgresDB.py", line 205, in addForeignKeys
cur.execute("""ALTER TABLE Tickets ADD FOREIGN KEY(team_id)REFERENCES Teams(id)""") psycopg2.ProgrammingError: column "team_id" referenced in foreign key constraint does not exist`

[PidgeyL]

Seems like I forgot to commit my last changes (several months ago...). Apologies...
Can you try again with the latest commit?