Updating Filebeat credentials when trying to install Wazuh dashboard

[c-bordon]

It was detected that when the central components are installed individually, at the time of installing Wazuh dashboard, the validation that is done when updating the password is incomplete since it only validates that if Filebeat is installed it enters, the problem is that this should only happen in the cases of installing Wazuh manager.

wazuh-packages/unattended_installer/passwords_tool/passwordsFunctions.sh

Lines 48 to 66 in 11c56bc

	if [ "${nuser}" == "admin" ] || [ -n "${changeall}" ]; then
	if [ -n "${filebeat_installed}" ]; then
	file_username=$(grep "username:" /etc/filebeat/filebeat.yml | awk '{print $2}')
	file_password=$(grep "password:" /etc/filebeat/filebeat.yml | awk '{print $2}')
	if [ "$file_username" != "\${username}" ] || [ "$file_password" != "\${password}" ]; then
	common_logger -w "The user and password configured in the filebeat.yml file will be updated and stored in Filebeat Keystore."
	fi
	eval "echo ${adminpass} | filebeat keystore add password --force --stdin ${debug}"
	conf="$(awk '{sub("password: .*", "password: ${password}")}1' /etc/filebeat/filebeat.yml)"
	echo "${conf}" > /etc/filebeat/filebeat.yml
	eval "echo admin | filebeat keystore add username --force --stdin ${debug}"
	conf="$(awk '{sub("username: .*", "username: ${username}")}1' /etc/filebeat/filebeat.yml)"
	echo "${conf}" > /etc/filebeat/filebeat.yml
	common_logger "The filebeat.yml file has been updated to use the Filebeat Keystore username and password."
	passwords_restartService "filebeat"
	eval "/var/ossec/bin/wazuh-keystore -f indexer -k password -v ${adminpass}"
	passwords_restartService "wazuh-manager"
	fi
	fi

This corresponds to the password tool, and we must only execute the password change of the component that is being installed.

[CarlosALgit]

Update Report

I've tried the fix for this and I'm currently testing different types of installations.
I need to test the installation component by component, an AIO and in both rpm and deb package managers.
I also need to test if the change breaks the Wazuh Password tool when it's used alone.