Gluu login: temporary error 502

By: Johann Hoermann user 17 Jun 2022 at 9:04 a.m. CDT

15 Responses
Johann Hoermann gravatar
I used to login into Gluu Server CE by calling my url ``` https://gluub18.fritz.box/ ``` Gluu redirects to the login box at ``` https://gluub18.fritz.box/identity/login.htm ``` Now i am only getting a ``` 502. That's an error. The server encountered a temporary error and could not complete your request. Please try later again. ``` Reloading the page next day had the same behaviour. So i looked into the oxauth.log (i never looked there before) after booting the gluu server: [oxauth.log](https://pastebin.com/1V2u9LfW "oxauth.log") ``` Line 21.-24. : Scheduler class: 'org.quartz.core.QuartzScheduler' - running locally. NOT STARTED. Currently in standby mode. Number of jobs executed: 0 ``` astonishes me. ``` curl -kLv https://gluub18.fritz.box/oxauth ``` gives back this: [curl.oxauth](https://pastebin.com/reDbrQEA "curl.oxauth") Is there a chance to fix that temporary error and get back a login box? Regards, Johann
Gluu 4.3 Ubuntu 18.0
closed

Answers

By Michael Schwartz Account Admin 17 Jun 2022 at 9:37 a.m. CDT

Copy
Michael Schwartz gravatar
Did you restart the server? Also, ssh to the box and check the disk space : ``` # df - h ``` Make sure opendj is starting ok and running. ``` # ps -ef | grep java ``` Also see if the oxauth or oxtrust logs give you any hint.

By Johann Hoermann user 17 Jun 2022 at 9:16 p.m. CDT

Copy
Johann Hoermann gravatar
Yes, Server is restarted. Disk space is fine: ``` # df -h Filesystem Size Used Avail Use% Mounted on /dev/vda1 54G 16G 36G 30% / -- snip -- ``` opendj started ok: ``` # service opendj status ● opendj.service - OpenDJ Directory Service -- snip -- Active: active (running) since Sat 2022-06-18 03:15:48 CEST; 39min ago -- snip -- ``` The complete opendj status is here: [opendj.status](https://pastebin.com/Gf5VW8et "opendj.status") oxauth.log is silent. ##### oxtrust.log shows an error: ``` 2022-06-18 01:31:14,749 ERROR [Thread-160] [org.gluu.oxtrust.service.StatusCheckerTimer] (StatusCheckerTimer.java:183) - Can not download ssl certificate java.net.ConnectException: Connection timed out (Connection timed out) ``` The complete oxtrust.log is here: [oxtrust.log]( "oxtrust.log") During Server-Setup i just generated the Gluu Server Certificate which can be accessed from outside: ``` $ openssl s_client -connect gluub18.fritz.box:https CONNECTED(00000003) depth=0 C = DE, ST = BY, L = Muenchen, O = Hoermann Solutions, CN = gluub18.fritz.box, emailAddress = trash@discard.email -- snip -- ``` Which certificate is oxtrust trying to download? Regards, Johann

By Mobarak Hosen Shakil staff 18 Jun 2022 at 12:02 a.m. CDT

Copy
Mobarak Hosen Shakil gravatar
Hi Johan, **Which certificate you have generated manually during setup?** > During Server-Setup i just generated the Gluu Server Certificate which can be accessed from outside It's not require to generate manual certificate during installation.

By Johann Hoermann user 18 Jun 2022 at 3:16 a.m. CDT

Copy
Johann Hoermann gravatar
You are right Mobarak: It was not me but the ./setup.py which generated the server certificate. I just gave the hostname and other stuff when i was asked for by ./setup.py. Anyway, i could login into the Gluu Server ``` https://gluub18.fritz.box ``` for a couple of days, until that error 502 was coming up. Do you think an upgrade to Gluu Server 4.4 might fix the problem? Regards, Johann

By Mobarak Hosen Shakil staff 19 Jun 2022 at 9:57 p.m. CDT

Copy
Mobarak Hosen Shakil gravatar
I'm not sure that upgrading will fix the problem. It's better to fix the problem first, then upgrade the latest one. Can you please check the status of `identity` and `oxauth`? ``` systemctl status identity systemctl status oxauth ```

By Johann Hoermann user 20 Jun 2022 at 8:31 a.m. CDT

Copy
Johann Hoermann gravatar
Status log of both services: [identity-oxauth.status](https://pastebin.com/zEy3B6mk "identity-oxauth.status") Do you like to see the jetty.log file?

By Mobarak Hosen Shakil staff 20 Jun 2022 at 9 p.m. CDT

Copy
Mobarak Hosen Shakil gravatar
Thanks for the resources. I see both of them are running. That error might be because of server overload or network issue. - How many services are running? - What is the memory size of VM? - Kindly check that [VM Requirements](https://gluu.org/docs/gluu-server/4.4/installation-guide/#system-requirements) was fulfilled. Regards ~ Shakil

By Mobarak Hosen Shakil staff 29 Jun 2022 at 6:10 p.m. CDT

Copy
Mobarak Hosen Shakil gravatar
Closing this ticket. Please reopen if require.

By Johann Hoermann user 01 Jul 2022 at 2:01 p.m. CDT

Copy
Johann Hoermann gravatar
24 [gluu-services](https://pastebin.com/R3eq8Vam "gluu-services") are running, gluu-specific are six services ``` # free -m total used free shared buff/cache available Mem: 3944 2162 384 1 1397 1554 Swap: 2614 0 2614 ``` VM Requirements: i increased the RAM up to 12 GB and the cpu units up to 4 ``` # free -m total used free shared buff/cache available Mem: 12007 2934 7619 1 1453 8812 Swap: 2614 0 2614 ``` Network: ``` # ip a -- snip -- 2: enp1s0: -- snip -- inet 192.168.1.236/24 brd 192.168.1.255 scope global dynamic enp1s0 -- snip -- ``` testing the network: ``` # curl http://google.com -I HTTP/1.1 301 Moved Permanently Location: http://www.google.com/ Content-Type: text/html; charset=UTF-8 -- snip -- ``` Error 502 remains: ``` The server encountered a temporary error and could not complete your request. ```

By Mobarak Hosen Shakil staff 18 Jul 2022 at 8:26 p.m. CDT

Copy
Mobarak Hosen Shakil gravatar
Hi Johann, I see you have enough resources to test the gluu-server. Did you see any further error at logs?

By Johann Hoermann user 19 Jul 2022 at 2:28 p.m. CDT

Copy
Johann Hoermann gravatar
Fresh booting the idp, there is some mess with shibboleth. oxtrust.log at the beginning: [Shibboleth attribute registry reload](https://pastebin.com/QrBUdmzG "Shibboleth attribute registry reload") Can shibboleth be disabled at CLI fo trying a login without having shibboleth loaded? Because shibboleth is not an essential part of the gluu server, as far as i understand.

By Michael Schwartz Account Admin 19 Jul 2022 at 2:53 p.m. CDT

Copy
Michael Schwartz gravatar
Inside the container, the idp service is started like any other service. So just make sure that doesn't autostart.

By Johann Hoermann user 20 Jul 2022 at 12:53 p.m. CDT

Copy
Johann Hoermann gravatar
By guessing the problem might be a network issue you where right Shakil: Me fool did hardcode the lan ip of the gluub18 Gluu-Server in /etc/hosts some weeks ago and forgot about it. Some days later i moved to my other office with an - of course - different LAN IP. /etc/hosts stayed so the login request resulted in a [connection timeout](https://pastebin.com/vM163NMY "connection timeout"). Removing the /etc/hosts-entry solved the problem. Sorry about wasting your time guys. Is there a link where i can donate? Could not find one at gluu.org ... Regards, Johann

By Mobarak Hosen Shakil staff 21 Jul 2022 at 3:20 a.m. CDT

Copy
Mobarak Hosen Shakil gravatar
Hi Johann, feeling better that it's fixed now. We always try our best to give support to the community users and no charges for that. We only charge for priority-based services where we commit to giving the best solution ASAP. You will find more details [here](https://gluu.org/open-source-support/) . Thank you, Regards ~ Shakil

By Johann Hoermann user 21 Jul 2022 at 3:28 p.m. CDT

Copy
Johann Hoermann gravatar
:-)

Post an answer