Knowledge Base & Discussion Forum

OBS unable to send reports when https is enforced in tomcat

Discuss technical questions on AhsayOBS

Moderator: Support Team

OBS unable to send reports when https is enforced in tomcat

Postby coconet » Wed Jan 27, 2016 7:21 pm

We have a strange problem with our OBS v6.27 server, that still has to run a few more weeks until our CBS v7 is ready to be deployed (hopefully the next release will fix a few of the remaining issues). Anyway back to the problem:

Last week we have discovered that our "enforce ssl" settings for the OBS webserver had some issues and started to correct them. Once we thought we had corrected them, we suddenly received a lot of error messages from OBS every hour when it tried (and failed) to send reports to customers.

Server settings and background information:
*) Our OBS has its tomcat configured to listen on ports 8080 (http) and 8443 (https), this has been the case for a long time.
*) Our firewall redirects requests on ports 80 and 443 at the external IP used for our backup server, to the internal IP and ports 8080 and 8443 respectively. For that reason the tomcat http connector (port 8080) has its redirect port set to 443 instead of 8443, otherwise the redirect to https/ssl would not work for our customers. We are aware that this means the redirect to https is not working inside our network, but this is of no concern to us.
*) on the OBS admin Console under [Manage System] -> [Server Configuration] we had the [Host Name] set to "localhost" without specifying a port. (why this has been working until yesterday, we do not know)
*) now that the "<security-constraint>" in both the ROOT/WEB-INF/ and OBS/WEB-INF/ directories has been set with "<url-pattern>/*</url-pattern>", every (external) access to the OBS web interface is properly redirected to the https connector.

However, now OBS was unable to send reports, generating the following type of errors:
Code: Select all
[info][ers][Report.getReport] Cannot get report from 127.0.0.1:80
[info][ers][Report.getReport] Cannot get report from localhost
[info][ers][Report.getReport] Cannot get report from <internalObsIP>:80
[error][system][Thread][ERS][BackupReport][BackupReport.send] Error sending backup job report for User='<userName>' BackupSet='<ID>' BackupJob='2016-01-26-10-00-00'
[Report.getReport] Error getting report from all available IP addresses !!


So searching the forum, following the advice for this type of error from the Knowledge Base and knowing that the internal redirect from http on port 8080 to https on port 8443 is not working, I changed the [Host Name] to "localhost:8443", thinking that this would solve our problem.

However, now I get the following errors instead:
Code: Select all
[info][ers][Report.getReport] Cannot get report from 127.0.0.1:8443
[info][ers][Report.getReport] Cannot get report from localhost:8443
[info][ers][Report.getReport] Cannot get report from <internalObsIP>:8443
[error][system][Thread][ERS][BackupReport][BackupReport.send] Error sending backup job report for User='<userName>' BackupSet='<ID>' BackupJob='2016-01-26-10-00-00'
[Report.getReport] Error getting report from all available IP addresses !!


So it appears OBS is unable to retrieve reports from itself using https? As a temporary fix I have removed the security constraint from the web.xml files (to allow http access again) and changed the [Host Name] to "localhost:8080" and now OBS is able to send reports again.


Can anybody tell us how to set up OBS to generate reports in an environment where https is enforced?
Alternatively: what kind of url-pattern would we have to use to exclude the files necessary for reports from the security-constraint?

Best regards from Austria,
Marcus
coconet
 
Posts: 34
Joined: Fri Jul 18, 2014 12:10 am

Re: OBS unable to send reports when https is enforced in tomcat

Postby coconet » Fri Jan 29, 2016 6:07 pm

Has nobody ever experienced this problem?

Either I'm the only one who is trying to run OBS in a https only environment, or nobody else has this problem (which would imply that I'm doing something wrong)...
coconet
 
Posts: 34
Joined: Fri Jul 18, 2014 12:10 am

Re: OBS unable to send reports when https is enforced in tomcat

Postby sjoffin » Thu Mar 03, 2016 10:59 pm

Hi,

I have the same issue. OBS 6.27 too, on linux server.

Our OBS is binding 80&443, 80 is redirected to 443.

There is a reverse-proxy between our OBS and 90% of OBM clients.

But 100% of reports cannot be sended...

I submitted a ticket to the Ahsay support, they didnt find the issue and asked me to update OBS at last version (i was on 6.25).

But it still not working, i cannot receive Backup, Restore or Setting change reports from users accounts.
sjoffin
 
Posts: 1
Joined: Thu Mar 03, 2016 6:42 pm

Re: OBS unable to send reports when https is enforced in tomcat

Postby Dede » Fri Aug 25, 2017 10:59 pm

Hi guys did you manage to sort this one out, i am currently on the same predicament
Thanks in Advance
Dede
 
Posts: 8
Joined: Fri Nov 27, 2009 9:31 pm

Re: OBS unable to send reports when https is enforced in tomcat

Postby Richard Au » Tue Aug 29, 2017 2:32 pm

Dede wrote:Hi guys did you manage to sort this one out, i am currently on the same predicament
Thanks in Advance


For more information regarding this issue, can you please contact our support to verify on this? Please submit your case through our ticket system at https://ahsay.com/jsp/en/contact/kbQuestion.jsp
Richard Au
Ahsay Forum Support Team
User avatar
Richard Au
 
Posts: 192
Joined: Wed Aug 31, 2016 10:43 am


Return to AhsayOBS

Who is online

Users browsing this forum: No registered users and 2 guests