CB Response: Authorization Error when Accessing Yara Management Console

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• When trying to access https://<servername>/connector/yara

  Unauthorized
  The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.
  In case you are allowed to request the document, please check your user-id and password and try again.

• /var/log/cb/integrations/cb-yara-manager/cb-yara-manager.log

  IOError: [Errno 2] No such file or directory: '/etc/cb/integrations/cb-yara-manager/auth.conf

Environment

• Carbon Black Response Console: 6.3.0 and higher
• Carbon Black Yara Manager: 1.1-7 and before

Cause

CB Yara Manager incorrectly processes the user session on newer versions of the console.

Resolution

1. Logon to the CB Response application server via SSH/Terminal
2. Update the cb-yara-manager

   yum update python-cb-yara-manager

3. Restart the cb-yara-manager

   service cb-yara-manager restart

4. Log into the CB Response Console
5. Verify you can access https://<servername>/connector/yara