Hestia 1.4.3 - Authentication fails when action done using API key

xwtk · June 24, 2021, 8:12am

Generated from SSH using v-generate-api-key, my admin account is 2FA’d, allowed IP list is 127.0.0.1(localhost). Every time my php script tries to create a new user with the API key, it says Authentication Failed.

eris · June 24, 2021, 8:23am

Don’t provide username or password with autentication with api key

https://docs.hestiacp.com/admin_docs/api/rest_api.html#create-user-with-api-key

xwtk · June 24, 2021, 8:44am

Yep, I didnt, just hst_hash, etc. Etc.

eris · June 24, 2021, 8:47am

API should always skip 2FA checks any way

Did it contains an _ or - by accident. I know there are some issue in the past with it…

github.com

hestiacp/hestiacp/blob/71c1606a9dabea711ec5a04ff45397d71609bf56/web/api/index.php#L106-L114

    
      
          $key = '/usr/local/hestia/data/keys/' . basename($hst_hash);
          $v_ip = escapeshellarg(get_real_user_ip());
          exec(HESTIA_CMD ."v-check-api-key ".escapeshellarg($key)." ".$v_ip,  $output, $return_var);
          unset($output);
          // Check API answer
          if ( $return_var > 0 ) {
              echo 'Error: authentication failed';
              exit;
          }

This the check.

Check /var/log/hestia/auth.log if you see something in there

xwtk · June 24, 2021, 9:09am

Yes the API key did have an underscore. When I regenerated the new one didnt, but still gave the error

eris · June 24, 2021, 9:24am

I am not able to debug on your server… I am using the api year without any issue. Try to look where is going wrong

xwtk · June 25, 2021, 11:02am

So I have done a few things and it is “working” now, well, not really, whenever I try to test it just returns “2” and doesnt create the user.

eris · June 25, 2021, 11:10am

https://docs.hestiacp.com/admin_docs/api.html

xwtk · June 25, 2021, 11:18am

Hmm I provided everything but last name, it is just blank, also is PAM regulation applied when creating users thru API?