By: Adrian Drummond user 09 Oct 2015 at 3:39 a.m. CDT

8 Responses
Adrian Drummond gravatar
Hello, I'm trying to access the Gluu Client after using these instructions for setup: http://www.gluu.org/docs/articles/mod-auth-oidc/centos-installation/ I cannot connect to the server at port 44443. I think that the server is not listening on this port. This is the contents of my dynamic.conf file: GLUU.[root@ec2-52-11-141-236 conf.d]# cat dynamic.conf <VirtualHost *:44443> # ServerName ec2-52-11-141-236.us-west-2.compute.amazonaws.com DocumentRoot /var/www/html OIDCMetadataDir /var/www/html/metadata OIDCClientSecret secret OIDCRedirectURI https://ec2-52-11-141-236.us-west-2.compute.amazonaws.com:44443/dynamic/fake_redirect_uri OIDCCryptoPassphrase secret OIDCSSLValidateServer Off <Location /dynamic/> AuthType openid-connect Require valid-user </Location> SSLEngine On SSLCertificateFile /etc/pki/tls/certs/localhost.crt SSLCertificateKeyFile /etc/pki/tls/private/localhost.key </VirtualHost> GLUU.[root@ec2-52-11-141-236 conf.d]# I can access the folder on port 443, but not on port 44443 I also created a video describing the problem. Help please. :-) ![My video on youtube](https://youtu.be/ThvbtPn9XrU "enter image title here")

By Adrian Drummond user 09 Oct 2015 at 1:02 p.m. CDT

Adrian Drummond gravatar
The video processing on youtube.com is now complete and the video can now be viewed. https://www.youtube.com/playlist?list=PLX6sen8jMcfDGpc3l_-MTefDgrB1vfNf3 Adrian

By Victor de Oliveira user 09 Oct 2015 at 1:29 p.m. CDT

Victor de Oliveira gravatar
Adrian, Not as far along as you are yet, but just wanted to thank you for the video. Please do post your solution once you find it.

By Adrian Drummond user 09 Oct 2015 at 3:24 p.m. CDT

Adrian Drummond gravatar
No problemo :-) I love open source software and Mike is a cool guy. I also appreciate when others create video tutorials that help me out so I like to pay it forward when I can. Adrian

By Adrian Drummond user 12 Oct 2015 at 2:55 p.m. CDT

Adrian Drummond gravatar
Is anyone able to help us with this issue? If I run a command to check and see which ports have activity on the server, can I check from inside the Gluu container AND outside the container?....or should I only use the GLUU container? Thank you in advance, Adrian

By Victor de Oliveira user 12 Oct 2015 at 3:14 p.m. CDT

Victor de Oliveira gravatar
Adrian, I can tell you that I've now had problems starting the gluu server on two occasions because of ports that were listening outside the container (not to sound too obvious, as I was starting the server). I had to stop the services using the tartgeted ports before I could start the gluu server... So it looks to me like you can check from both.

By Adrian Drummond user 12 Oct 2015 at 7:06 p.m. CDT

Adrian Drummond gravatar
Hey Victor, It's nice to know someone else in the world is working on this too. LoL This is giving me trouble and I want to get this working ASAP. :-) Are you saying is it possible that another service (outside of the GLUU container) is using the port or ports that GLUU is using--and causing a problem? I was paranoid about this so I tried to make everything simple and vanilla before I troubleshooted the GLUU stuff. Outside of the GLUU server, I did the following: 1) Stopped the http service 2) Stopped the tomcat service (if installed) 3) Stopped the iptables service 4) Changed selinux to permissve (check by typing the command: sestatus ) 5) Open the ports on the network 6) Test that the sever is resolvable by IP address and DNS This is working reliably for me.....except when the IP and DNS information change (if you are using Amazon Web Services-AWS like me) you have the deal with the problems that come up with the GLUU server's apache settings. (what I'm dealing with at this moment). I think it is related to the httpd.conf file and the .conf files for the virtual hosts that are also setup. I am not that familiar with virtual hosts on an apache server. I'm still not sure if the client should be on the same machine as the GLUU server, but according to this post it should not: https://support.gluu.org/view/installation/help-with-dynamicconf-in-mod_auth_oidc-apache-plugin/2161 I'll see what I can work out and post back my findings. Cheers, Adrian

By Victor de Oliveira user 13 Oct 2015 at 7:55 a.m. CDT

Victor de Oliveira gravatar
Adrian, I'm still working on installation. After I turned on the authentication manager, the system ate my admin account despite the 'keep external persons' box being ticked. If I can't fix this some time today I'm probably just going to start over (all over again)*. *With the knowledge that I should add some AD accounts to the manager group before turned the authentication manager on.

By Adrian Drummond user 13 Oct 2015 at 2:41 p.m. CDT

Adrian Drummond gravatar
It helps so much to know that kind of stuff the 2nd time around....I'm on my 15th time around right now. LoL I got an answer to a few of my questions here: https://support.gluu.org/view/installation/help-with-dynamicconf-in-mod-auth-oidc-apache-plugin/2161