Cherokee admin doesn't log in

Discussion in 'Server Operation' started by jrfk2, Jul 25, 2012.

  1. jrfk2

    jrfk2 New Member

    I am on RHEL 6.2 and installed cherokee 1.2.101-3.el6 (x86_64) and I launch the cherokee-admin as root and it says its running on http:127.0.0.1:9090 and gies me the password to use ..

    I point my firefox 10.0.6 at that localhost address and I get prompted for the userid / password .. and then it just spins and never logs in .. eventually getting error 500

    Is there any way to find to what's going on?
     
  2. falko

    falko Super Moderator Howtoforge Staff

    Please check the Cherokee logs in the /var/log/ directory.

    I wonder if it might be a firewall problem. Can you post the output of
    Code:
    iptables -L
    ?
     
  3. jrfk2

    jrfk2 New Member

    I have tried with the firewall down and have added a custom port for 9090 for tcp .. so wonder if its a linux permission thing .. there was nothing in the error_log and just nomal server stuff in the access_log.

    I am *thinking* port 9090 is OK becuase I do get prompted for the admin/pw .. so I think its happening after that validation

    What folder(s) might it be trying to access to show the admin stuff so I can check permissions?

    here's the iptables stuff:

    Chain INPUT (policy DROP)
    target prot opt source destination
    ACCEPT udp -- anywhere anywhere udp dpts:msgsrvr:8792
    ACCEPT tcp -- anywhere anywhere tcp dpts:msgsrvr:8792
    ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds
    ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn
    ACCEPT udp -- anywhere anywhere udp dpt:netbios-dgm
    ACCEPT udp -- anywhere anywhere udp dpt:netbios-ns
    ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
    ACCEPT udp -- anywhere anywhere udp dpt:bootps
    ACCEPT tcp -- anywhere anywhere tcp dpt:domain
    ACCEPT udp -- anywhere anywhere udp dpt:domain
    ACCEPT all -- anywhere anywhere
    ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED
    REJECT tcp -- anywhere anywhere tcp dpt:auth reject-with icmp-port-unreachable
    ACCEPT tcp -- anywhere anywhere tcp dpt:cfengine
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT tcp -- anywhere anywhere tcp dpt:vnc-server
    ACCEPT tcp -- anywhere anywhere tcp dpt:5901
    ACCEPT tcp -- anywhere anywhere tcp dpt:https
    ACCEPT tcp -- anywhere anywhere tcp dpt:5656
    ACCEPT udp -- anywhere anywhere udp dpts:avt-profile-1:avt-profile-2
    ACCEPT tcp -- anywhere anywhere tcp dpts:avt-profile-1:avt-profile-2
    ACCEPT udp -- anywhere anywhere udp dpt:20830
    ACCEPT tcp -- anywhere anywhere tcp dpt:20830
    ACCEPT tcp -- anywhere anywhere tcp dpts:sip:na-localise
    ACCEPT udp -- anywhere anywhere udp dpts:sip:na-localise
    ACCEPT tcp -- anywhere anywhere tcp dpt:12080
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain
    ACCEPT udp -- anywhere anywhere state NEW udp dpt:domain
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https
    ACCEPT tcp -- anywhere anywhere tcp dpt:21100
    ACCEPT tcp -- anywhere anywhere tcp dpt:dc
    ACCEPT udp -- anywhere anywhere udp dpt:wizard
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
    ACCEPT ah -- anywhere anywhere
    ACCEPT esp -- anywhere anywhere
    ACCEPT udp -- anywhere anywhere state NEW udp dpt:isakmp
    ACCEPT 254 -- anywhere anywhere
    ACCEPT icmp -- anywhere anywhere icmp router-advertisement
    ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
    ACCEPT icmp -- anywhere anywhere icmp time-exceeded
    ACCEPT icmp -- anywhere anywhere icmp echo-reply
    ACCEPT icmp -- anywhere anywhere icmp source-quench
    ACCEPT icmp -- anywhere anywhere icmp echo-request
    ACCEPT icmp -- anywhere anywhere icmp parameter-problem
    DROP icmp -- anywhere anywhere icmp any
    ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
    ACCEPT tcp -- anywhere anywhere tcp dpt:tproxy
    ACCEPT tcp -- anywhere anywhere tcp dpt:virtual-places
    ACCEPT udp -- anywhere anywhere state NEW udp dpt:52311
    ACCEPT tcp -- anywhere anywhere tcp dpts:30000:30005
    DROP tcp -- anywhere anywhere tcp dpts:bootps:bootpc
    DROP udp -- anywhere anywhere udp dpts:bootps:bootpc
    DROP tcp -- anywhere anywhere tcp dpt:netbios-ns
    DROP udp -- anywhere anywhere udp dpt:netbios-ns
    DROP tcp -- anywhere anywhere tcp dpt:netbios-dgm
    DROP udp -- anywhere anywhere udp dpt:netbios-dgm
    DROP tcp -- anywhere anywhere tcp dpt:netbios-ssn
    DROP udp -- anywhere anywhere udp dpt:netbios-ssn
    DROP tcp -- anywhere anywhere tcp dpts:tcpmux:ftp-data
    DROP tcp -- anywhere anywhere tcp dpt:sunrpc
    DROP tcp -- anywhere anywhere tcp dpts:snmp:snmptrap
    DROP tcp -- anywhere anywhere tcp dpt:efs
    DROP tcp -- anywhere anywhere tcp dpts:6348:6349
    DROP tcp -- anywhere anywhere tcp dpts:6345:gnutella-rtr
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpts:apc-9950:9959
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:9960
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:webcache
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pcsync-https
    ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:websm
    LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 LOG level info prefix `FIREWALL: '
    LOG udp -- anywhere anywhere limit: avg 3/min burst 5 LOG level info prefix `FIREWALL: '
    DROP all -- anywhere anywhere

    Chain FORWARD (policy DROP)
    target prot opt source destination
    ACCEPT all -- anywhere xxx.xxx.xxx.0/24 state RELATED,ESTABLISHED
    ACCEPT all -- xxx.xxx.xxx.0/24 anywhere
    ACCEPT all -- anywhere anywhere
    REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
    REJECT all -- anywhere anywhere reject-with icmp-port-unreachable

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
     
  4. falko

    falko Super Moderator Howtoforge Staff

    So it can't be a firewall problem. Maybe the problem is related to your browser. Did you try other browsers as well?
     

Share This Page