Bulk import from csv results in 401 unauthorized

Hello everybody, I’ve just installed Passbolt and I’m trying to bulk import my passwords from a csv file created following Keepass structure.

If the file contains few tenth of passwords the import succedes, but during a bulk import of hundreds of passwords the import fails with 401 unauthorized. During the bulk import I see the progress bar encrypting password, creating folders, staring import then, at a random point, error.

I’ve tried splitting the csv but I have to do some manual “post processing” to merge passwords in right folders and however, after 2-3 files the next import fails with 401. And I have to login again, drop the last half-imported file and reimport it.

In the logs I only see 200 becoming 401

10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 200 3274 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 200 3281 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 200 4917 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 401 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 401 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 401 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 401 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.>
10.205.2.1 - - [30/Dec/2023:06:08:00 +0000] "POST /resources.json?api-version=v2&contain%5Bpermission%5D=1&contain%5Bfavorite%5D=1 HTTP/2.0" 401 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.>

This is my setup:

  • OS: Debian 12
  • Passbolt: 4.4.2-1-ce-non-root on docker container
  • Docker: docker-ce 24.0.6
  • Database: MariaDB 10.11.3 on host system

Many thanks