Community

Unable to authenticate using ProfitBricks CLI

Hi everyone-

I'm looking to get started with the ProfitBricks CLI (https://github.com/profitbricks/profitbricks-cli/) however it appears the module and authentication is getting blocked by our corporate firewall. When using the command "profitbricks setup" and entering the credentials, I am receiving the error "Invalid user name or password. Please try again!". I know that the credentials are correct as I was able to do this same process from another machine not on the corporate network and works just fine.

Is anyone aware how I might be able to track/log the error message / communication / response so we can investigate with our IT teams?

 
  • One thing I noticed by running Wireshark that isn't really mentioned anywhere is how the communication works between the CLI and ProfitBricks (this was done on a non-corporate network for testing)

    Summary of findings: - I see my machine --> going to the DNS to look up api.profitbricks.com - Responses going to 185.48.116.14 and coming back - Port 443 being used - Protocol TCP + TLSv1.2

    Still need to work with our IT and third party vendor to have the changes allowed for this particular use-case.

  • **bold**
  • _italics_
  • `code`
  • ```code block```
  • # Heading 1
  • ## Heading 2
  • > Quote
 

Hello,

You could try using curl from the system\location that is having trouble and take a look at the http headers and response to see if that provides a clue as to what is going on. As an example:

curl -v -u your_email_address@domain.tld https://api.profitbricks.com/rest/v2/datacenters

should return something like:

Enter host password for user 'removed':
* About to connect() to api.profitbricks.com port 443 (#0)
*   Trying 185.48.116.14...
* Connected to api.profitbricks.com (185.48.116.14) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
    CApath: none
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
*       subject: CN=*.profitbricks.com,OU=System Administration,O=ProfitBricks GmbH,L=Berlin,ST=Berlin,C=DE
*       start date: Jul 09 00:00:00 2015 GMT
*       expire date: Sep 06 23:59:59 2017 GMT
*       common name: *.profitbricks.com
*       issuer: CN=thawte SSL CA - G2,O="thawte, Inc.",C=US
* Server auth using Basic with user 'removed'
> GET /rest/v2/datacenters HTTP/1.1
> Authorization: Basic removed
> User-Agent: curl/7.29.0
> Host: api.profitbricks.com
> Accept: */*
>
< HTTP/1.1 200 OK
...

Sincerely,

Eric