oxTrust container deployment (Docker version)

By: Jose Salermo user 21 Nov 2016 at 9:04 a.m. CST

7 Responses
Jose Salermo gravatar
I have been having some issues deploying a container so I'd like to ask for your opinion if this is because of the version of Gluu I am using or if it is something else you have seen before. As specified on the documentation I am trying to deploy the containers in order (LDAP,oxAuth,oxTrust,Nginx). The first, second and fourth containers are deployed without an issue on the worker node (oxTrust can only be deployed on the master node) but on the master node I start having issues with the oxTrust container (Error1 screenshots). To put it simply after I attempt to deploy this node I start having 500 Internal Server Error and nothing works afterwards unless I delete the container and give it some time. On the other hand if I delete everything and ignoring the proper order I deploy the oxTrust container first the deployment is successful and the other containers can be deployed except for the LDAP container. (Error2 screenshots) This is why I believe there must be something going on internally on the LDAP container that prevents oxTrust from being deployed, perhaps an expired certification or something else I cannot see. Has anyone had this issue??
U1404
closed

Answers

By Isman Firmansyah staff 21 Nov 2016 at 10:50 a.m. CST

Copy
Isman Firmansyah gravatar
Hi Jose, When you mentioned about screenshots, did you mean the screenshots in https://github.com/GluuFederation/gluu-engine/issues/107?

By Jose Salermo user 21 Nov 2016 at 11:32 a.m. CST

Copy
Jose Salermo gravatar
I'm sorry, the attachments dissapeared for some reason. These are the ones I'm referring to: ![Error1](https://imagebin.ca/v/32lYyAd37I4s "enter image title here") ![Error1 (master node)](https://imagebin.ca/v/32lZ8A4Mn5Cv "enter image title here") ![Error1 (worker node)](https://imagebin.ca/v/32lZFeeM2qtS "enter image title here") ![Error1_Log (nginx)](https://imagebin.ca/v/32lZQaAAchDC "enter image title here") ![Error1_Log (oxTrust) ](https://imagebin.ca/v/32lZY4k9sHqI "enter image title here") ![Error2](https://imagebin.ca/v/32laP9WPFtHy "enter image title here") ![Error2_Log(LDAP)](https://imagebin.ca/v/32laWKkED3ss "enter image title here") ![Error2_(oxTrust)](https://imagebin.ca/v/32lactFiYQCk "enter image title here")

By William Lowe user 21 Nov 2016 at 12:05 p.m. CST

Copy
William Lowe gravatar
Jose, Please provide links to your screenshots. They are not coming through in the body of your response.

By Jose Salermo user 21 Nov 2016 at 12:25 p.m. CST

Copy
Jose Salermo gravatar
Sorry about the delay. I think this should work better [https://drive.google.com/drive/folders/0B-DihOKOfiN9cnhvN25hMDhoT1k?usp=sharing](https://drive.google.com/drive/folders/0B-DihOKOfiN9cnhvN25hMDhoT1k?usp=sharing) Its my google drive link. Please let me know if it works

By William Lowe user 21 Nov 2016 at 12:27 p.m. CST

Copy
William Lowe gravatar
Yes, much better. Thanks.

By Isman Firmansyah staff 22 Nov 2016 at 8:45 a.m. CST

Copy
Isman Firmansyah gravatar
The error in nginx container (port 443/80 bridge mode) is likely caused by port conflict, for example the ports are already used by an app. This could happen when nginx container deployment is failed, but docker doesn't release the ports used by nginx. You can try deleting the nginx container entry from web UI, and double check the container in the node. Login into the node by running `docker exec -ti gluuengine docker-machine ssh <node-name>`. Then run `docker ps -a` to see whether an nginx container is listed there. If it's there, you can force remove the nginx container using `docker rm -f <container-name>`. As for oxTrust error, I saw there's issue connecting to Docker Swarm daemon listening on port 3376. You may want to inspect its log.

By Isman Firmansyah staff 22 Nov 2016 at 9:01 a.m. CST

Copy
Isman Firmansyah gravatar
As for expired certification, do you use your own cert and key (ref: https://www.gluu.org/docs-docker-edition/admin-guide/cluster-management/#ssl-certificate-and-key)?

Post an answer