By: Mihir Bhusawalkar named 09 May 2022 at 6:15 a.m. CDT

26 Responses
Mihir Bhusawalkar gravatar
Hello, I have configured Janssen setup on ubuntu 20.X on my vmware workstation. I am getting this error(500) for both of the modules,when I try to access menu driven interface. Any solution on the below problem mentioned below? I have also attached an image for better understanding. Thanks, Mihir **root@ub:~# /opt/jans/jans-cli/config-cli.py An Unhandled error raised: (500) Reason: Server Error HTTP response headers: HTTPHeaderDict({'Date': 'Mon, 09 May 2022 11:08:14 GMT', 'Server': 'Apache/2.4.41 (Ubuntu)', 'X-Xss-Protection': '1; mode=block', 'X-Content-Type-Options': 'nosniff', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'Expires': 'Thu, 01 Jan 1970 00:00:00 GMT', 'Cache-Control': 'no-store', 'Pragma': 'no-cache', 'Content-Length': '0', 'Set-Cookie': 'X-Correlation-Id=fa70e2fe-8912-4d74-a080-3a823f01bba7; Secure; HttpOnly;HttpOnly', 'Connection': 'close'}) **Error is logged to /opt/jans/jans-cli/error.log root@ub:~# /opt/jans/jans-cli/scim-cli.py An Unhandled error raised: (500) Reason: Server Error HTTP response headers: HTTPHeaderDict({'Date': 'Mon, 09 May 2022 11:08:17 GMT', 'Server': 'Apache/2.4.41 (Ubuntu)', 'X-Xss-Protection': '1; mode=block', 'X-Content-Type-Options': 'nosniff', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'Expires': 'Thu, 01 Jan 1970 00:00:00 GMT', 'Cache-Control': 'no-store', 'Pragma': 'no-cache', 'Content-Length': '0', 'Set-Cookie': 'X-Correlation-Id=246b9719-636b-425b-9c9d-d54dd4e34f47; Secure; HttpOnly;HttpOnly', 'Connection': 'close'}) **Error is logged to /opt/jans/jans-cli/error.log**

By Devrim Yatar staff 09 May 2022 at 11:45 a.m. CDT

Devrim Yatar gravatar
Hi Please set `debug=true` in `/root/.config/jans-cli.ini` and send complete output, and logs

By Mihir Bhusawalkar named 10 May 2022 at 1:48 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Mustafa, Thank you for your assistance. I have set debug=true in /root/.config/jans-cli.ini and have attached output and logs. Please let me know if you need anything else.

By Devrim Yatar staff 10 May 2022 at 2:27 a.m. CDT

Devrim Yatar gravatar
Hi, This is openbanking setup. It uses mtls, `config-cli.py` has to be provided `--config-api-mtls-client-cert` and `--config-api-mtls-client-key` Regards.

By Michael Schwartz Account Admin 10 May 2022 at 9:17 a.m. CDT

Michael Schwartz gravatar
Can you confirm that the Auth Server is returning the OpenID configuration from https://(hostname)/.well-known/openid-configuration ? Also, do you see any errors in the Auth Server log or the web server log?

By Mihir Bhusawalkar named 11 May 2022 at 6:30 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Michael, Auth Server is returning the OpenID configuration from URL you mentioned. Also, I dont see errors in Auth server logs (/opt/jans/jetty/jans-auth/logs/jans-auth.log)

By Mihir Bhusawalkar named 12 May 2022 at 5:56 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Mustafa, While providing --config-api-mtls-client-cert(/opt/jans/jans-cli/config-cli.py --config-api-mtls-client-cert client.crt), I am getting SSL error. Please note that client.crt is my certificate file Output and logs are attached below.I will try to reinstall the jans setup again to check whether the same SSL error exists or not and let you know about it Regards, Mihir

By Devrim Yatar staff 12 May 2022 at 11:46 a.m. CDT

Devrim Yatar gravatar
Hi, I followed these instructions https://gluu.org/docs/openbanking/1.0.0/installvm/#mtls-configuration It worked for me. I provide server.key and server.crt, not client key. `/opt/jans/jans-cli/config-cli.py -CC server.crt -CK server.key` I have no issue connecting to server, but having trouble with static kid. I asked developers and waiting response.

By Michael Schwartz Account Admin 12 May 2022 at 12:09 p.m. CDT

Michael Schwartz gravatar
@Mihir Bhusawalkar -- are you using the open banking distribution? If you want to test Janssen, I suggest you use the VM images found on https://github.com/JanssenProject/jans/releases

By Mihir Bhusawalkar named 13 May 2022 at 6:46 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Michael, I cannot find any VM images for my ubuntu 20.X(VMware Workstation) in the URL https://github.com/JanssenProject/jans/releases All I can see is some assets section (PFA) in releases section. Can you please suggest what should I exactly use from releases please,in order to test janssen? Regards, Mihir

By Devrim Yatar staff 13 May 2022 at 11:53 a.m. CDT

Devrim Yatar gravatar
Hi Mihir, We have some issues executing CLI on openbanking installation. I am trying to fix. Once it is ready I will update. Regards.

By Mihir Bhusawalkar named 16 May 2022 at 2:22 a.m. CDT

Mihir Bhusawalkar gravatar
Hi Mustafa, Thank you for your assistance. I will be waiting for your reply. Regards, Mihir

By Devrim Yatar staff 24 May 2022 at 8:56 a.m. CDT

Devrim Yatar gravatar
Hi Mihir, I made a series of changes on jans ob setup to make CLI works. I wrote changes to ob developers, when they agree on the changes I will raise a PR, and let you know how to install ob with CLI. Rgards.

By Mihir Bhusawalkar named 26 May 2022 at 2:43 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Mustafa, I have done some research. If we install the last section(install.py ) from this URL (https://github.com/JanssenProject/jans/wiki/Installation-Guide#dynamic-download), then it does not give me error 500 or any other error even after couple of days. Also, When I install this (install.py), It seems that less number of menu items are displayed in jans-cli section.Not sure if its a beta version I have installed or not. PFA for better understanding. Also, thank you for your assistance. I will be waiting for your reply related new installation of OB with CLI. Regards, Mihir

By Devrim Yatar staff 27 May 2022 at 7:08 a.m. CDT

Devrim Yatar gravatar
Hi, We use same installer for both Jans and Jans OB. Menu items displayed in CLI depends on plugins installed. I spent this week enabling CLI on Jans OB. I made some progress, but waiting developers to confirm. Here is how you can install for testing purposes only 1) Download installer ``` wget https://raw.githubusercontent.com/JanssenProject/jans/main/jans-linux-setup/jans_setup/install.py ``` 2) Execute as ``` python3 install.py --profile=openbanking --setup-branch=jans-linux-setup-openbanking-fixes ``` When it first prompts `Do you acknowledge that use of the Janssen Server is under the Apache-2.0 license? [N|y] :` enter **N** and execute the following commands 3) Extract cert from jwksUri ``` python3 -c 'import requests; req = requests.get("https://ox.gluu.org/icrby8xcvbcv/ob/ob-gluu-test.jwks"); print("-----BEGIN CERTIFICATE-----\n{}\n-----END CERTIFICATE-----".format(req.json()["keys"][0]["x5c"][0]))' > /opt/jans/jans-setup/openbanking/static/ob-gluu-test.crt ``` 4) Execute setup with the following options ``` python3 /opt/jans/jans-setup/setup.py -ob-key-fn=/opt/jans/jans-setup/openbanking/static/ob-gluu-test.key -ob-cert-fn=/opt/jans/jans-setup/openbanking/static/ob-gluu-test.crt -static-kid=ob-gluu-test -jwks-uri=https://ox.gluu.org/icrby8xcvbcv/ob/ob-gluu-test.jwks --disable-ob-auth-script -ob-alias=ob-gluu-test ``` When it prompts `Use external key? [Y|n] :` enter **y**, and accept default values as follows ``` Use external key? [Y|n] : y Openbanking Key File [/opt/jans/jans-setup/openbanking/static/ob-gluu-test.key] : Openbanking Certificate File [/opt/jans/jans-setup/openbanking/static/ob-gluu-test.crt] : Openbanking Key Alias [ob-gluu-test] : ``` 5) Configure apache for mtls as explained here https://github.com/JanssenProject/jans/wiki/Open-Banking-Configuration#mtls-configuration This is only for testing. Let me know if you experience any issues. Actually this will be part of how jans-OB will be installed. Later on I will add a section for creating private key and certs. Regards.

By Devrim Yatar staff 27 May 2022 at 7:21 a.m. CDT

Devrim Yatar gravatar
And execute CLI with the following args ``` /opt/jans/jans-cli/config-cli.py -CC client.crt -CK client.key ``` Please use full path for crt and key if not in existing directory.

By Devrim Yatar staff 30 May 2022 at 1:10 p.m. CDT

Devrim Yatar gravatar
Hi I simplified setup procedure: ``` python3 install.py --profile=openbanking --args="-ob-key-fn=/opt/jans/jans-setup/openbanking/static/ob-gluu-test.key -static-kid=ob-gluu-test -jwks-uri=https://ox.gluu.org/icrby8xcvbcv/ob/ob-gluu-test.jwks --disable-ob-auth-script -ob-alias=ob-gluu-test" ``` Please enter defaults to here (press just enter), it will download certificate from jwksUri ``` Use external key? [Y|n] : y Openbanking Key File [/opt/jans/jans-setup/openbanking/static/ob-gluu-test.key] : Openbanking Certificate File [/root/obsigning.pem] : Openbanking Key Alias [ob-gluu-test] : ``` You can execute CLI as `` /opt/jans/jans-cli/config-cli.py -CC /opt/jans/jans-setup/output/CA/client.crt -CK /opt/jans/jans-setup/output/CA/client.key ```

By Mihir Bhusawalkar named 31 May 2022 at 2:36 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Mustafa, Thank you for your assistance. I will try these steps and let you know the outcome. Regards, Mihir

By Mihir Bhusawalkar named 02 Jun 2022 at 2:53 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Mustafa, I am getting error while executing this command (python3 install.py --profile=openbanking --setup-branch=jans-linux-setup-openbanking-fixes). It fails to install the required packages. Please note that If I just execute(python3 install.py --profile openbanking), it will install all the required packages without giving any type of error.But I think this will install different set of packages PFA for better clarification. Regards, Mihir Bhusawalkar

By Devrim Yatar staff 02 Jun 2022 at 2:58 a.m. CDT

Devrim Yatar gravatar
Hi, Just use `python3 install.py --profile=openbanking` We merged changes in main

By Mihir Bhusawalkar named 02 Jun 2022 at 6:40 a.m. CDT

Mihir Bhusawalkar gravatar
Hello, I have followed these steps uptil now. Steps: 1) Download installer wget https://raw.githubusercontent.com/JanssenProject/jans/main/jans-linux-setup/jans_setup/install.py 2) Execute as python3 install.py --profile openbanking When it first prompts Do you acknowledge that use of the Janssen Server is under the Apache-2.0 license? [N|y] : enter N and execute the following commands 3) Extract cert from jwksUri python3 -c 'import requests; req = requests.get("https://ox.gluu.org/icrby8xcvbcv/ob/ob-gluu-test.jwks"); print("-----BEGIN CERTIFICATE-----\n{}\n-----END CERTIFICATE-----".format(req.json()["keys"][0]["x5c"][0]))' > /opt/jans/jans-setup/openbanking/static/ob-gluu-test.crt 4) simplified setup procedure: python3 install.py --profile=openbanking --args="-ob-key-fn=/opt/jans/jans-setup/openbanking/static/ob-gluu-test.key -static-kid=ob-gluu-test -jwks-uri=https://ox.gluu.org/icrby8xcvbcv/ob/ob-gluu-test.jwks --disable-ob-auth-script -ob-alias=ob-gluu-test" 5) Please enter defaults to here (press just enter), it will download certificate from jwksUri Use external key? [Y|n] : y Openbanking Key File [/opt/jans/jans-setup/openbanking/static/ob-gluu-test.key] : Openbanking Certificate File [/root/obsigning.pem] : Openbanking Key Alias [ob-gluu-test] : 6) You can execute CLI as `` /opt/jans/jans-cli/config-cli.py -CC /opt/jans/jans-setup/output/CA/client.crt -CK /opt/jans/jans-setup/output/CA/client.key Please let me know if I have missed something.I have completed installation successfully.Will let you know if error occurs again after few days Regards, Mihir Bhusawalkar

By Devrim Yatar staff 03 Jun 2022 at 1:43 p.m. CDT

Devrim Yatar gravatar
Hi Sorry for confusion. One of our developer also verified that this procedure works https://github.com/JanssenProject/jans/wiki/Gluu-OB-Testing-Installation Regards.

By Mihir Bhusawalkar named 06 Jun 2022 at 6:29 a.m. CDT

Mihir Bhusawalkar gravatar
Hi, The installation works properly without giving any sort of error.I am able to access scim-cli and config-cli modules using client.crt and client.key. For scim.cli: (/opt/jans/jans-cli/scim-cli.py -CC /opt/jans/jans-setup/output/CA/client.crt -CK /opt/jans/jans-setup/output/CA/client.key) for config.cli : (/opt/jans/jans-cli/config-cli.py -CC /opt/jans/jans-setup/output/CA/client.crt -CK /opt/jans/jans-setup/output/CA/client.key) I am not able to query User Resources in scim-cli module which retrieves users information. In my case,I'm trying to fetch Admin's information which is failing. Also, I am not able to create a local user using scim-cli. Both of the problems mentioned above have the type of error. I have attached errors below.PFA for better understanding. Regards, Mihir

By Devrim Yatar staff 07 Jun 2022 at 6:18 a.m. CDT

Devrim Yatar gravatar
Hi, scim is not available for openbanking installation. I am not sure why we disabled for openbanking. I will ask developers. For jans installation it works good.

By Mihir Bhusawalkar named 07 Jun 2022 at 6:51 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Devrim, Thank you for your assistance. I will be waiting for your reply. Regards, Mihir

By Devrim Yatar staff 10 Jun 2022 at 1:41 p.m. CDT

Devrim Yatar gravatar
Hi Mihir, We won't include scim in openbanking installation. Our leader says *In Open Banking ecosystem, we are not the IDP that holds the user data.* Regards.

By Mihir Bhusawalkar named 13 Jun 2022 at 2:24 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Devrim, Thank you for your help. Regards, Mihir