Server not responding to /sac: "Could Not Login"

[Juuso Alasuutari]

I've installed Scalix CE 11.0.1 on Debian Etch, I can't login through the administration console at http://<host>/sac:

Could Not Login
The administration server is not responding.
You should check the server log files.

Indeed I can't get /etc/init.d/scalix-tomcat to start; the PID saved in /var/opt/scalix/<instance>/tomcat/tomcat.pid isn't running (so this isn't the known init script issue).

This is what I see in tomcat's log (revealing parts edited):

# tail -25 /var/opt/scalix/<instance>/tomcat/logs/catalina.2007-02-26.log
INFO: Port busy 8009 java.net.BindException: Address already in use
26-Feb-2007 18:22:46 org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on <name>/<ip>:<port>
26-Feb-2007 18:22:46 org.apache.jk.server.JkMain start
INFO: Jk running ID=1 time=0/83 config=null
26-Feb-2007 18:22:46 org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
26-Feb-2007 18:22:46 org.apache.catalina.startup.Catalina start
INFO: Server startup in 2702 ms
26-Feb-2007 18:22:46 org.apache.catalina.core.StandardServer await
SEVERE: StandardServer.await: create[8005]:
java.net.BindException: Address already in use
at java.net.PlainSocketImpl.socketBind(Native Method)
at java.net.PlainSocketImpl.bind(Unknown Source)
at java.net.ServerSocket.bind(Unknown Source)
at java.net.ServerSocket.<init>(Unknown Source)
at org.apache.catalina.core.StandardServer.await(StandardServer.java:372)
at org.apache.catalina.startup.Catalina.await(Catalina.java:615)
at org.apache.catalina.startup.Catalina.start(Catalina.java:575)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:275)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)

Any clues?

[kanderson]

is tomcat running more than once?

ps aux|grep java

Kev.

[Juuso Alasuutari]

is tomcat running more than once?

ps aux|grep java

After taking a closer look I noticed that tomcat was already running, but I had tried to start it nevertheless which screwed the .pid file. Now it seems to be up:

# ps aux|grep java
root 5936 4.5 23.6 325136 62004 ttyp0 Sl 11:34 0:07 /usr/local/lib/jre/bin/java -server -Xms128m -Xmx128m -Dscalix.instance=/var/opt/scalix/sv -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=/var/opt/scalix/sv/tomcat/conf/logging.properties -Djava.endorsed.dirs=/opt/scalix-tomcat/common/endorsed -classpath /usr/local/lib/jre/lib/tools.jar:/opt/scalix-tomcat/bin/bootstrap.jar:/opt/scalix-tomcat/bin/commons-logging-api.jar -Dcatalina.base=/var/opt/scalix/sv/tomcat -Dcatalina.home=/opt/scalix-tomcat -Djava.io.tmpdir=/var/opt/scalix/sv/tomcat/temp org.apache.catalina.startup.Bootstrap start
root 5974 0.0 0.2 3720 712 ttyp0 R+ 11:37 0:00 grep java
# cat /var/opt/scalix/sv/tomcat/tomcat.pid
5936

...but I'm still getting the "Could Not Login" from /sac. Also nothing's getting written to the tomcat logs on failed attempts. Where should I search next?

[ScalixSupport]

Hi!

Can you try to log in using the value next to "Authentication ID:" from the result of the command:

Code: Select all

omshowu -n sxadmin

Thanks,
SUbir

[Juuso Alasuutari]

I noticed I had some stuff missing from config files that the manual install guide tells to add. I corrected them and am now getting another error. (Seems that this is going forward in a way. ) Here's the response now:

Could Not Login
Could not fetch server list.
Possible problem with administration server

Hi!

Can you try to log in using the value next to "Authentication ID:" from the result of the command:

Code: Select all

omshowu -n sxadmin

Thanks,
SUbir

This is what it says:

# omshowu -n sxadmin
omshowu : [OM 8040] The user can't be found, or has been deleted.

I do, however, have the user 'admin' (which is the one I'm trying to login as):

# omshowu -n admin
Authentication ID: admin
Globally Unique ID: 17000000007e2e54-08.88.731.01
User Name : Administrator /CN=Administrator
MailNode : <my mailnode>
Internet Address : unset
System Login : 60534
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Mail Account: Unlocked
Last Signon : 26.02.07 17:24:32
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
Recovery Folder visible : NO
User Class : Full
SIS URL : sxidx://<my fqdn>/07000000007e2e54-08.88.731.01

Here's what I have in /var/opt/scalix/<instance>/tomcat/logs/scalix-caa.log:

2007-02-27 14:49:21,820 ERROR [RbacAuthorizationHelper.authenticateUser:92] Exception:
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.InitialContext.<init>(Unknown Source)
at javax.naming.directory.InitialDirContext.<init>(Unknown Source)
at com.scalix.sac.ubermgr.ldap.LDAPQuery.initContext(LDAPQuery.java:87)
at com.scalix.sac.ubermgr.rbac.RbacAuthorizationHelper.authenticateUser(RbacAuthorizationHelper.java:63)
at com.scalix.sac.ubermgr.ldap.LDAPServiceHandler.Login(LDAPServiceHandler.java:114)
at com.scalix.sac.ubermgr.caa.RESService.authenticateAndAuthorizeUser(RESService.java:157)
at com.scalix.sac.ubermgr.caa.RESService.doRequest(RESService.java:83)
at com.scalix.caa.soap.SOAPDispatcherServlet.onMessage(SOAPDispatcherServlet.java:268)
at com.scalix.caa.soap.SAAJServlet.doPost(SAAJServlet.java:123)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)
at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)
at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:754)
at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:684)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:876)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Unknown Source)

[chris]

Juuso,

can you check that your sxqueryadmin (http://www.scalix.com/wiki/index.php?title=Manual_Installation#Creating_the_LDAP_Query_User) user is set up properly, and your psdata file (http://www.scalix.com/wiki/index.php?title=Manual_Installation#Configuring_Scalix_Ubermanager_Admin_Server) is also correct?

Thanks,

Chris

[Juuso Alasuutari]

Juuso,

can you check that your sxqueryadmin (http://www.scalix.com/wiki/index.php?title=Manual_Installation#Creating_the_LDAP_Query_User) user is set up properly, and your psdata file (http://www.scalix.com/wiki/index.php?title=Manual_Installation#Configuring_Scalix_Ubermanager_Admin_Server) is also correct?

Thanks,

Chris

Those seem to be in order. The psdata file contains my password and its owner and permissions are as they should. This is the user info for sxqueryadmin:

# omshowu -n sxqueryadmin
Authentication ID: sxqueryadmin@<my fqdn>
Globally Unique ID: 1b000000007e2e54-08.88.731.01
User Name : sxqueryadmin /CN=sxqueryadmin
MailNode : <my mailnode>
Internet Address : unset
System Login : 60535
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Mail Account: Unlocked
Last Signon : Never.
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
Recovery Folder visible : NO
User Class : Limited
SIS URL : sxidx://<my fqdn>/0b000000007e2e54-08.88.731.01

[chris]

psdata contains your password, or sxqueryadmin's password?

do an omshut/omrc, and an /etc/init.d/scalix-tomcat restart for good measure, but that error is normally caused by sxqueryadmin's password not being the same as the password in psdata.

if it still comes up, test but resetting both (ommodu -n $NAME -p $PASS && echo $PASS > /var/opt/scalix/<instance>/caa/scalix.res/config/psdata) and retest.

Chris

[Juuso Alasuutari]

psdata contains your password, or sxqueryadmin's password?

On the test server I'm running these are the same.

do an omshut/omrc, and an /etc/init.d/scalix-tomcat restart for good measure, but that error is normally caused by sxqueryadmin's password not being the same as the password in psdata.

if it still comes up, test but resetting both (ommodu -n $NAME -p $PASS && echo $PASS > /var/opt/scalix/<instance>/caa/scalix.res/config/psdata) and retest.

Unfortunately even resetting the password didn't help. :/ I also did 'omshut; omrc; /etc/init.d/scalix-tomcat restart' afterwards, but no luck.

BTW: Thanks for all the help so far, I hope we can figure this out eventually.

[chris]

trailing space?

[Juuso Alasuutari]

trailing space?

Nope...

[unficyp]

Same Problem here.

Everything works,except for SAC.

[chris]

Ok guys, I'm going to need to try to reproduce this, but won't be able to do that before the weekend. I know we have people who have successfully installed with the Manual Installation Instructions, so we'll need to try to find the misstep.

As a bit of background, the sxqueryadmin user is used for querying the LDAP directory in situations where there is not yet a successfully logged on user. So the account and credentials absolutely need to be correct.

Could you, just as an excercise, try setting his password to, for example, xxx to ensure no misspellings or whatever, and try again?

Another thing, please make sure that the account isn't expired or anything like that. Try logging in with the user for example (omlogon on the CLI)

Thanks,

Chris

[unficyp]

playing with scalix:

Code: Select all

lx03:/var/opt/scalix/l3/tomcat/logs # ommodu -n sxadmin -p xxx
ommodu: The user was modified successfully
lx03:/var/opt/scalix/l3/tomcat/logs # omlogon -h 10.1.1.103 -u sxadmin -p xxx

Connected to lx03

Logged on as sxadmin /lx03,office

lx03:/var/opt/scalix/l3/tomcat/logs # omlogoff
lx03:/var/opt/scalix/l3/tomcat/logs # ommodu -o sxqueryadmin -p xxx
ommodu: The user was modified successfully
lx03:/var/opt/scalix/l3/tomcat/logs # omlogon -h 10.1.1.103 -u sxqueryadmin -p xxx

Connected to lx03

The username or password is incorrect. Note that passwords are case sensitive. Try again.
User's mail account is locked - signon refused

lx03:/var/opt/scalix/l3/tomcat/logs # omshowu -n syqueryadmin
omshowu : [OM 8040] The user can't be found, or has been deleted.

lx03:/var/opt/scalix/l3/tomcat/logs # omshowu -n sxqueryadmin
Authentication ID: sxqueryadmin@lx03.office.gnc.at
Globally Unique ID: 011000008fc49154-3.1.1.01
User Name : sxqueryadmin /CN=sxqueryadmin
MailNode : lx03,office
Internet Address : sxqueryadmin-lx03@gnc.at
System Login : 60534
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Mail Account: Unlocked
Last Signon : Never.
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
Recovery Folder visible : NO
User Class : Limited
SIS URL : sxidx://lx03.office.gnc.at/23c000008fc49154-301.1.1.01
lx03:/var/opt/scalix/l3/tomcat/logs # ommodu -o "sxqueryadmin/lx03" -k
ommodu: The user was modified successfully
lx03:/var/opt/scalix/l3/tomcat/logs # omlogon -h 10.1.1.103 -u sxqueryadmin -p xxx

Connected to lx03

The username or password is incorrect. Note that passwords are case sensitive. Try again.
User's mail account is locked - signon refused

lx03:/var/opt/scalix/l3/tomcat/logs # omshowu -n sxqueryadmin
Authentication ID: sxqueryadmin@lx03.office.gnc.at
Globally Unique ID: 011000008fc49154-3.1.1.01
User Name : sxqueryadmin /CN=sxqueryadmin
MailNode : lx03,office
Internet Address : sxqueryadmin-lx03@gnc.at
System Login : 60534
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : C
Mail Account: Unlocked
Last Signon : Never.
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
Recovery Folder visible : NO
User Class : Limited
SIS URL : sxidx://lx03.office.gnc.at/23c000008fc49154-301.1.1.01


why does omlogon tell me that sxqueryadmin is locked when i unlocked the account usecs ago ?

EDIT:
omldapsearch -D cn=sxqueryadmin,o=scalix -w xxx cn=*
seems to work

[Technica]

I have the EXACT same problem and can't get past where you are with this.
FC5 and Scalix 11.0.2