TheHive/Cortex 2.3.2 - REST Error 500

[splunkreal]

Hello,

can't load Settings page: "Something went wrong!" Configuration page failed to load (ERR0002)

Splunk Enterprise 9.1.1 (clustered) / standalone Splunk 9.0.4

Addon version 2.3.2 or 3.3 (same error)

Log:

07-11-2024 11:05:34.421 +0200 ERROR AdminManagerExternal [25211 TcpChannelThread] - Unexpected error "<class 'splunktaucclib.rest_handler.error.RestError'>" from python handler: "REST Error [500]: Internal Server Error -- Traceback (most recent call last):\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/splunktaucclib/rest_handler/handler.py", line 117, in wrapper\n for name, data, acl in meth(self, *args, **kwargs):\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/splunktaucclib/rest_handler/handler.py", line 338, in _format_all_response\n self._encrypt_raw_credentials(cont["entry"])\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/splunktaucclib/rest_handler/handler.py", line 368, in _encrypt_raw_credentials\n change_list = rest_credentials.decrypt_all(data)\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/splunktaucclib/rest_handler/credentials.py", line 289, in decrypt_all\n all_passwords = credential_manager._get_all_passwords()\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/solnlib/utils.py", line 153, in wrapper\n return func(*args, **kwargs)\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/solnlib/credentials.py", line 341, in _get_all_passwords\n return self._get_clear_passwords(passwords)\n File "/OPT/splunk/etc/apps/TA-thehive-cortex/bin/ta_thehive_cortex/aob_py3/solnlib/credentials.py", line 324, in _get_clear_passwords\n clear_password += field_clear[index]\nTypeError: can only concatenate str (not "NoneType") to str\n". See splunkd.log/python.log for more details.

Thanks for your help.

[splunkreal · Accepted solution]

Following advice from developer, I renamed passwords.conf from another addon TA-WALLIX_Bastion/default/passwords.conf and now Configuration finally opening

[JLange]

This resolved it (issue with another app). A similar thing happened to me, the Splunk App for SOAR's configuration page was not loading all buttons on the configuration page. 

We discovered that there was a passwords.conf file (in another app) that was not set correctly. It was pushed from another Splunk instance (the password was already hashed) which interfered with the passwords.conf in the Splunk App for SOAR. The splunkd error logs were essentially 1:1 which is how I found your post. 

If anyone else stumbles upon this post (with similar errors), be sure to check the passwords.conf configurations - even in other apps. Hope this helps!

[splunkreal]

@JLange  you're welcome 🙂