OD admin GUI login errors - OD 7.4.x with TS 7.4.1 on Linux vm rh 6.5.

Hi,

Have TS and OD ( including odadmin) running on Linux vm. (versions in subject line).

Verified that access service is working.

Also on researching the forum and a post by nipper started the order of starting odadmin matters - So did access service start, then od server start and then odadmin.

The UI comes up. However when trying to login, gets an error

Failed to locate Access Service ; nested exception is: java.net.ConnectException: Connection refused

OdAdmin home is under /iw-home/../AdminServer/odadmin

the logs and config folders are under odadmin folder.

Looking at the logs and particularly - odadmin_servletd.log, i see the following:

>>>>>>>>>>>>>>>>>>>>>>>>>>>>..

In ASClientSetup.locateAccessService()
Got property adminHome: /iw-home/AdminServer
URL string http://<SERVER>:12973/iw/services/csf/1.2/accessservice
Call locator for CSF Access service
Back from locate Access Service call

Call Access Service to get its version

**ERROR** RemoteException
** Message: ; nested exception is:
java.net.ConnectException: Connection refused
2015-05-26 12:48:25 - Authentication error: user=myUser; domain=null; role=od-admin
localHostName: SERVER
Get Access Service hostname from framework.properties file
Using Access Service hostname: <SERVER>
Get Access Service port number from framework.properties file
Using Access Service port number: 12973
Get Access Service transport type from framework.properties file
Using Access Service transport type: http
Get Access Service authen server from framework.properties file
Using Access Service authen server: localservice
Get Access Service login life time from framework.properties file
Using Access Service login life time(milliseconds): 86400000
Get Access Service user locale from framework.properties file
Using Access Service user locale: en_US
iwov_auth_<SERVER>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>..

As we can see it states connection refused when trying to check for od version.

Now before logging a ticket with support wanted to check if anybody has seen these issues and can help.

Also, pleeeaaaseeee,,, dont ask me to re-install Smiley Happy .

Additionally, in the same location as odadmin_servletd.log there is a file named as "localhost_log.2015-05-26.txt" with actual date.

and a warning there shows:

2015-05-26 12:31:50 StandardContext[/iw/opendeploy]Using default value for DeployAdmin.rmiPort2: 25071
2015-05-26 12:31:50 StandardContext[/iw/opendeploy]starting reporting server
2015-05-26 12:31:51 StandardContext[/iw/opendeploy]WARN: Event reporting client password file not configured for secure RMI.
2015-05-26 12:31:51 StandardContext[/iw/opendeploy]reporting server started

not sure if that is causing the "connection refused" and it is related or not.

Looked into /iw-home/AdminServer/httpd/iwwebapps/opendeploy/WEB-INF/conf and the file framework.properties and it has proper entries.

DeployAdmin.ASHostname=<ServerName> ** is fully qualified too.
DeployAdmin.ASPort=12973
DeployAdmin.ASTransport=http
DeployAdmin.ASAuthenSvc=localservice
DeployAdmin.ASContextLifeTime=86400000
DeployAdmin.ASUserLocale=en_US

authenticator.builder.class=com.interwoven.opendeploy.ui.ODAccessSvcAuthenBuilder
authenticator.login.jsp=/framework/login.jsp
policy.builder.class=com.interwoven.framework.policy.AccessPolicyBuilder
policy.default.name=allow
application.class=com.interwoven.framework.base.Application
navigation.system=tree
navigation.root=opendeploy

That is all the information I can dig up. Really appreciate if any of you can help.

Thanks.

Find more posts tagged with

Comments

Rick Poulin

witness_content wrote:

URL string http://<SERVER>:12973/iw/services/csf/1.2/accessservice
Call locator for CSF Access service
Back from locate Access Service call

Call Access Service to get its version

**ERROR** RemoteException
** Message: ; nested exception is:
java.net.ConnectException: Connection refused

From the server itself, verify that you can "curl http://<SERVER>:12973/iw/services/csf/1.2/accessservice" and also check that port 12973 is actually listening via netstat. It probably isn't, so you'll need to check the access services log file and see why it failed to init properly.

witness_content

Hi rpoulin,

Thanks for looking into this and pointing to me.

The access service logs points to passphrase. Seems like an encrypted password issue for OD.

Location of log: /Interwoven/CSF/AccessService/log

there are 3 files:

iwauthen.log

AS_errors.log

AS_events.log

AS_Errors is empty

iwauthen shows the following in a section of the file:

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

[Tue May 26 12:31:16 2015] InitAuthenticationService::Retval : 0. Created service handle : 0xa300a10 for factory : 0xa0c1bb8. Service args are : <authenServiceConfig version="1.0">
<cookies>
<cookieType name="iwovf" keyFile="/Interwoven/OpenDeployNG/etc/passphrase" />
</cookies>
<local/>
</authenServiceConfig>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Does not seem like an error to me though.

tail of AS_Events.log shows following: ( again no error)

>>>>>>>>>>>>>>>>>>>.

<2015-05-22 20:50:20,441> - <INFO> - Websvc.HTTPMaxReadTime not specified. Using default value.
<2015-05-22 20:50:20,441> - <INFO> - For HTTP parameter HTTPMAXREADTIME_PROP, using: 40000
<2015-05-22 20:50:20,441> - <INFO> - Get HTTP parameter from Websvc.HTTPMaxReadTime property in websvc.cf g
<2015-05-22 20:50:20,441> - <INFO> - Websvc.HTTPMaxThreads not specified. Using default value.
<2015-05-22 20:50:20,442> - <INFO> - For HTTP parameter HTTPMAXTHREADS_PROP, using: 255
<2015-05-22 20:50:20,442> - <INFO> - Get HTTP parameter from Websvc.HTTPMinThreads property in websvc.cfg
<2015-05-22 20:50:20,442> - <INFO> - Websvc.HTTPMinThreads not specified. Using default value.
<2015-05-22 20:50:20,442> - <INFO> - For HTTP parameter HTTPMINTHREADS_PROP, using: 5
<2015-05-22 20:50:20,442> - <INFO> - Get HTTP parameter from Websvc.HTTPMaxIdleTime property in websvc.cf g
<2015-05-22 20:50:20,442> - <INFO> - Websvc.HTTPMaxIdleTime not specified. Using default value.
<2015-05-22 20:50:20,442> - <INFO> - For HTTP parameter HTTPMAXIDLTTIME_PROP, using: 2000
<2015-05-22 20:50:20,442> - <INFO> - Starting Web Server HTTP transport using hostname <SERVER>:12973, MaxReadTime: 40000, MaxThreads: 255, MinThreads: 5, MaxIdleTime: 2000
<2015-05-22 20:50:20,537> - <INFO> - Web Server HTTP transport started
<2015-05-22 20:50:20,537> - <INFO> - Get create HTTPS flag from Websvc.createHTTPSTransport property in websvc.cfg
<2015-05-22 20:50:20,537> - <INFO> - Using create HTTPS transport flag: no
<2015-05-22 20:50:20,537> - <INFO> - HTTPS transport will not be created.
<2015-05-22 20:50:20,537> - <INFO> -
*** Finished Web Server startup ***

<2015-05-22 20:50:20,537> - <INFO> - *** FINISHED STARTUP ***

>>>>>>>>>>>>>>>>>>>..

If anything in here does ring a bell, please advise. Also opening a ticket with HP support.

Thanks.

nipper

Did you run this command:

curl http://<SERVER>:12973/iw/services/csf/1.2/accessservice

I tend to turn off selinux and iptables, they could be getting in the way.

witness_content

Hello nipper,

Yes, I had done that and couldnt get much other than it did not work by providing the port number.

[dk]$ curl http://<SERVER>:12973/iw/services/csf/1.2/accessservice
curl: (7) couldn't connect to host

and without port number in URL, obviously it does not find the service at all.

[dk]$ curl http://<SERVER>/iw/services/csf/1.2/accessservice
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /iw/services/csf/1.2/accessservice was not found on this server.</p>
<hr>
<address>Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 Server at <SERVER> Port 80</address>
</body></html>
[dk]$

Besides the fact, I have another server where "curl" provides sames results as above, but dont have login issues.

Hence I did not point out anything related to curl in my earlier response. "assuming thats not the real issue".

Now y'all dont beat me for my assumption Smiley Happy .

Having stated that, may be the components installed on these 2 servers may be different set. They(HP) do state that you should not include Teamsite UI and od GUI. On this server it might have been installed already.

I did not find any document stating how do I remove the component that should not be there.

Thanks.

nipper

run this:

sudo service csf start

then try the curl.

If the curl doesn't work, then you get connection failed error. Not certain why the curl didn't work on the other servers, but maybe it is being blocked by iptables or selinux

witness_content

Accessservice is not accessible on that port through curl.

Further investigation, looks like AccessService is not running, (or atleast I cannot get a PID or grep on service for that).

However the AS_events.log file at /Interwoven/CSF/AccessService/log show.

Finished Startup. ( and no errors).

accessServiceHome/etc/websvc.cfg shows HTTP transport to be open on 12973 and looks like I cannot hit that port either through localhost or another host. So the issue.

Will get sys admins to help me open that port and verify.

witness_content

AccessService logs, although reported that it has started and "Finished Startup", infact were messaging wrong.

Had to read through /etc/init.d/iwaccess and it goes through a series of checks and finally this line below starts it: 327.

325 # Start the web server and Access Service

326 msg "Starting Web Server and Access Service."

327 nohup $ASHOME/lib/processas "$ASHOME" 1>>"$IW_LOGFILE" 2>&1

I ran this command from command line and watch the nohup.out. --- pointed to:

/server-config.wsdd com.interwoven.csf.webserver.CSFASMain

START ACCESS SERVICE

nohup: failed to run command `/Interwoven/CSF/AccessService/jre/bin/java': No such file or directory

Now, I am not sure why the "jre" folder under AccessService home was missing.

copied it over from another server where it was present and bingGO!

Thanks folks for pointing to look at accessservice. Helped me on the direction.