Race condition when adding multiple agents quickly about wazuh-api HOT 9 CLOSED

Hi @rossengeorgiev,

This is a known issue commented in wazuh/wazuh#176.

The reason why this is happening is because the API call to add agents without using authd is not prepared for massive calls. We're working on this issue but I recommend you to use authd while we fix it.

When authd is activated, the API uses it. The steps to enable authd are explained in the Wazuh docs.

Best regards,
Marta

from wazuh-api.

Hi, authd is not ideal for managing keys, especially when looking into creating automated and dynamic deployments. A working API that has a granular access control would be extremely useful. This issue should really be high priority bug and blocking for v3,0. Current documentation should also be updated to mention that there is race condition.

from wazuh-api.

Hi @rossengeorgiev ,

we will fix the race condition in the API, but for now, we recommend to use authd.

If you enable authd, each request to the API related to register/remove agent will be "forwarded" to authd. Does it work for you?.

especially when looking into creating automated and dynamic deployments

What is your use case?.

Thanks.

from wazuh-api.

Hi @jesuslinares, thanks for clarifying. I didn't realize wazuh-api could make use of authd. I will look into giving that a try. My use case is large redundant deployment using saltstack. It will be monitoring a large number of hosts. My goal is to automate as many of the tasks as possible.

from wazuh-api.

Enabling authd seems to work.

from wazuh-api.

@jesuslinares any chance there could be conf switch to force the use of authd only? I fear that if authd dies for whatever reason it might turn into a mess.

from wazuh-api.

You are totally right. We are going to include that option in the next version.

For now, you can change the code.

• Go to /var/ossec/api/framework
• Remove the if-else section and use only "authd" functions.
  • https://github.com/wazuh/wazuh-api/blob/stable/framework/wazuh/agent.py#L260
  • https://github.com/wazuh/wazuh-api/blob/stable/framework/wazuh/agent.py#L391

Thanks so much.

from wazuh-api.

Hello @rossengeorgiev,

As you suggested, a new parameter has been added in API configuration to force the use of authd (see #43 and wazuh/wazuh#305). This will be added in Wazuh 3.1.

We're not closing this issue since the original bug is not yet fixed.

Best regards,
Marta

from wazuh-api.

Hello again,

This bug has been fixed in wazuh/wazuh#306.

Best regards,
Marta

from wazuh-api.