By: Patrick Tsui Account Admin 12 Sep 2019 at 2 p.m. CDT

15 Responses
Patrick Tsui gravatar
I am trying to take 4.0 beta for a test drive using docker but I run into issues almost immediately. I am using docker on macOS Mojave 10.14.6 After running the shell script, the output says it fails to lookup the self token and exits. shell output ``` mylaptop:gluu me$ wget https://raw.githubusercontent.com/GluuFederation/community-edition-containers/4.0.0/test-drive/single-host/run_all.sh && chmod +x run_all.sh --2019-09-12 11:53:06-- https://raw.githubusercontent.com/GluuFederation/community-edition-containers/4.0.0/test-drive/single-host/run_all.sh Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.64.133, 151.101.128.133, 151.101.192.133, ... Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.64.133|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 12542 (12K) [text/plain] Saving to: ‘run_all.sh’ run_all.sh 100%[==============================================================================================================================================>] 12.25K --.-KB/s in 0.008s 2019-09-12 11:53:06 (1.42 MB/s) - ‘run_all.sh’ saved [12542/12542] mylaptop:gluu me$ ./run_all.sh [I] Determining OS Type and Attempting to Gather External IP Address Host is detected as Mac Is this the correct external IP Address: 172.28.111.254 [Y/n]? Y [I] Preparing cluster-wide config and secret Creating network "gluu_default" with the default driver Pulling consul (consul:)... latest: Pulling from library/consul e7c96db7181b: Pull complete c4447d212679: Pull complete c6b9648df5b1: Pull complete c33564c6a481: Pull complete efe62d70ad20: Pull complete 6e5af04a0bf5: Pull complete Digest: sha256:63e1a07260418ba05be08b6dc53f4a3bb95aa231cd53922f7b5b5ee5fd77ef3f Status: Downloaded newer image for consul:latest Creating consul ... done consul is up-to-date Creating vault ... done [I] Checking seal status in Vault Error checking seal status: Get http://0.0.0.0:8200/v1/sys/seal-status: dial tcp 0.0.0.0:8200: connect: connection refused [W] Unable to get seal status in Vault; retrying ... [W] Vault is not initialized; trying to initialize Vault with 1 recovery key and root token [I] Vault recovery key and root token saved to /Users/me/work/gluu/vault_key_token.txt Error authenticating: error looking up token: Error making API request. URL: GET http://0.0.0.0:8200/v1/auth/token/lookup-self Code: 503. Errors: * Vault is sealed ``` Docker compose logs ``` mylaptop:gluu me$ docker-compose logs -f Attaching to vault, consul consul | ==> Found address '172.20.0.2' for interface 'eth0', setting bind option... consul | ==> Found address '172.20.0.2' for interface 'eth0', setting client option... consul | bootstrap = true: do not enable unless necessary consul | ==> Starting Consul agent... consul | Version: 'v1.6.0' consul | Node ID: '1e994bcd-bfe4-e6f9-05bb-f162602ded34' consul | Node name: 'consul-1' consul | Datacenter: 'dc1' (Segment: '<all>') consul | Server: true (Bootstrap: true) consul | Client Addr: [172.20.0.2] (HTTP: 8500, HTTPS: -1, gRPC: -1, DNS: 8600) consul | Cluster Addr: 172.20.0.2 (LAN: 8301, WAN: 8302) consul | Encrypt: Gossip: false, TLS-Outgoing: false, TLS-Incoming: false, Auto-Encrypt-TLS: false consul | consul | ==> Log data will now stream in as it occurs: consul | consul | 2019/09/12 18:54:30 [INFO] raft: Initial configuration (index=1): [{Suffrage:Voter ID:1e994bcd-bfe4-e6f9-05bb-f162602ded34 Address:172.20.0.2:8300}] consul | 2019/09/12 18:54:30 [INFO] raft: Node at 172.20.0.2:8300 [Follower] entering Follower state (Leader: "") consul | 2019/09/12 18:54:30 [INFO] serf: EventMemberJoin: consul-1.dc1 172.20.0.2 consul | 2019/09/12 18:54:30 [INFO] serf: EventMemberJoin: consul-1 172.20.0.2 consul | 2019/09/12 18:54:30 [INFO] consul: Adding LAN server consul-1 (Addr: tcp/172.20.0.2:8300) (DC: dc1) consul | 2019/09/12 18:54:30 [INFO] consul: Handled member-join event for server "consul-1.dc1" in area "wan" consul | 2019/09/12 18:54:30 [INFO] agent: Started DNS server 172.20.0.2:8600 (tcp) consul | 2019/09/12 18:54:30 [INFO] agent: Started DNS server 172.20.0.2:8600 (udp) consul | 2019/09/12 18:54:30 [INFO] agent: Started HTTP server on 172.20.0.2:8500 (tcp) consul | 2019/09/12 18:54:30 [INFO] agent: started state syncer consul | ==> Consul agent running! consul | 2019/09/12 18:54:37 [ERR] agent: failed to sync remote state: No cluster leader consul | 2019/09/12 18:54:38 [WARN] raft: Heartbeat timeout from "" reached, starting election consul | 2019/09/12 18:54:38 [INFO] raft: Node at 172.20.0.2:8300 [Candidate] entering Candidate state in term 2 consul | 2019/09/12 18:54:38 [INFO] raft: Election won. Tally: 1 consul | 2019/09/12 18:54:38 [INFO] raft: Node at 172.20.0.2:8300 [Leader] entering Leader state consul | 2019/09/12 18:54:38 [INFO] consul: cluster leadership acquired consul | 2019/09/12 18:54:38 [INFO] consul: New leader elected: consul-1 consul | 2019/09/12 18:54:38 [INFO] consul: member 'consul-1' joined, marking health alive consul | 2019/09/12 18:54:38 [INFO] agent: Synced service "vault:172.20.0.3:8200" consul | 2019/09/12 18:54:38 [INFO] agent: Synced check "vault:172.20.0.3:8200:vault-sealed-check" vault | Using eth0 for VAULT_REDIRECT_ADDR: http://172.20.0.3:8200 vault | Using eth0 for VAULT_CLUSTER_ADDR: https://172.20.0.3:8201 vault | ==> Vault server configuration: vault | vault | Api Address: http://172.20.0.3:8200 vault | Cgo: disabled vault | Cluster Address: https://172.20.0.3:8201 vault | Listener 1: tcp (addr: "0.0.0.0:8200", cluster address: "0.0.0.0:8201", max_request_duration: "1m30s", max_request_size: "33554432", tls: "disabled") vault | Log Level: (not set) vault | Mlock: supported: true, enabled: true vault | Storage: consul (HA available) vault | Version: Vault v1.0.1 vault | Version Sha: 08df121c8b9adcc2b8fd55fc8506c3f9714c7e61 vault | vault | ==> Vault server started! Log data will stream in below: vault | vault | 2019-09-12T18:54:47.370Z [INFO] core: seal configuration missing, not initialized vault | 2019-09-12T18:54:47.618Z [INFO] core: seal configuration missing, not initialized vault | 2019-09-12T18:54:47.817Z [INFO] core: security barrier not initialized vault | 2019-09-12T18:54:47.823Z [INFO] core: security barrier initialized: shares=1 threshold=1 vault | 2019-09-12T18:54:47.847Z [INFO] core: post-unseal setup starting vault | 2019-09-12T18:54:47.861Z [INFO] core: loaded wrapping token key vault | 2019-09-12T18:54:47.861Z [INFO] core: successfully setup plugin catalog: plugin-directory= vault | 2019-09-12T18:54:47.862Z [INFO] core: no mounts; adding default mount table vault | 2019-09-12T18:54:47.871Z [INFO] core: successfully mounted backend: type=kv path=secret/ vault | 2019-09-12T18:54:47.871Z [INFO] core: successfully mounted backend: type=cubbyhole path=cubbyhole/ vault | 2019-09-12T18:54:47.872Z [INFO] core: successfully mounted backend: type=system path=sys/ vault | 2019-09-12T18:54:47.873Z [INFO] core: successfully mounted backend: type=identity path=identity/ vault | 2019-09-12T18:54:47.900Z [INFO] core: successfully enabled credential backend: type=token path=token/ vault | 2019-09-12T18:54:47.900Z [INFO] core: restoring leases vault | 2019-09-12T18:54:47.900Z [INFO] rollback: starting rollback manager vault | 2019-09-12T18:54:47.900Z [INFO] expiration: lease restore complete vault | 2019-09-12T18:54:47.907Z [INFO] identity: entities restored vault | 2019-09-12T18:54:47.908Z [INFO] identity: groups restored vault | 2019-09-12T18:54:47.908Z [INFO] core: post-unseal setup complete vault | 2019-09-12T18:54:47.908Z [INFO] core: starting listener: listener_address=0.0.0.0:8201 vault | 2019-09-12T18:54:47.909Z [INFO] core: serving cluster requests: cluster_listen_address=[::]:8201 vault | 2019-09-12T18:54:47.917Z [INFO] core: root token generated vault | 2019-09-12T18:54:47.917Z [INFO] core: pre-seal teardown starting vault | 2019-09-12T18:54:47.917Z [INFO] core: stopping cluster listeners vault | 2019-09-12T18:54:47.918Z [INFO] core: shutting down forwarding rpc listeners vault | 2019-09-12T18:54:47.918Z [INFO] core: forwarding rpc listeners stopped vault | 2019-09-12T18:54:48.410Z [INFO] core: rpc listeners successfully shut down vault | 2019-09-12T18:54:48.410Z [INFO] core: cluster listeners successfully shut down vault | 2019-09-12T18:54:48.410Z [INFO] rollback: stopping rollback manager vault | 2019-09-12T18:54:48.410Z [INFO] core: pre-seal teardown complete ```

By Mohammad Abudayyeh staff 12 Sep 2019 at 2:23 p.m. CDT

Mohammad Abudayyeh gravatar
Hello Patrick, The error is here ``` Error checking seal status: Get http://0.0.0.0:8200/v1/sys/seal-status: dial tcp 0.0.0.0:8200: connect: connection refused ``` which is causing the installation to fail. If you have anything running like nginx or something similar or the port is closed then you will get the above error. It might be easier for testing to provision a clean VM on your Mac , make it linux with at least 4GB RAM. Then run `run_all.sh` which should do the rest. Please let us know how it goes. Thanks, Mohammad

By William Lowe user 13 Sep 2019 at 2:49 p.m. CDT

William Lowe gravatar
Patrick, Did Mo's suggestion above resolve the installation issue you were facing? Thanks, Will

By Patrick Tsui Account Admin 16 Sep 2019 at 11:24 a.m. CDT

Patrick Tsui gravatar
I don't think I had anything blocking or running on 8200 based on the netstat output and a bit of digging around. I am going to give it a try in a provisioned VM on my Mac today. Thanks for the quick feedback. I will update the ticket when I have results.

By Mohammad Abudayyeh staff 16 Sep 2019 at 11:27 a.m. CDT

Mohammad Abudayyeh gravatar
No problem. Please let us know how it goes. Thanks, Mohammad

By Patrick Tsui Account Admin 16 Sep 2019 at 1:55 p.m. CDT

Patrick Tsui gravatar
That definitely looks a lot better. I was able to get through the installation process on a Ubuntu 18.04.3 image in VirtualBox. There are a few containers up and running but does the test drive start up the admin UI for me? I tried accessing it as https://<my_hostname> but it did not resolve. I setup the given hostname to resolve to the local IP. ``` root@ptsui-VirtualBox:/home/ptsui/gluu# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES a50110a0701f vault:1.0.1 "docker-entrypoint.s…" 8 minutes ago Up 4 minutes 8200/tcp vault 1e96ea1c64de gluufederation/registrator:dev "registrator -intern…" 8 minutes ago Up 4 minutes registrator b775f801c7e6 consul "docker-entrypoint.s…" 8 minutes ago Up 4 minutes 8300-8302/tcp, 8500/tcp, 8301-8302/udp, 8600/tcp, 8600/udp consul d50dcb32eb50 gluufederation/nginx:4.0.0_dev "tini -g -- /app/scr…" 8 minutes ago Up 4 minutes 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp nginx 2e5a5838eb0b gluufederation/wrends:4.0.0_dev "tini -g -- /app/scr…" 8 minutes ago Up 4 minutes 1636/tcp, 4444/tcp, 8989/tcp ``` I still see quite a few warnings in the logs about the Vault not being ready though ``` ldap | WARNING - pygluu.containerlib.wait - 2019-09-16 18:52:02,757 - Secret backend is not ready; reason=Vault is sealed; retrying in 10 seconds. nginx | WARNING - pygluu.containerlib.wait - 2019-09-16 18:52:02,871 - Secret backend is not ready; reason=Vault is sealed; retrying in 5 seconds. nginx | WARNING - pygluu.containerlib.wait - 2019-09-16 18:52:07,875 - Secret backend is not ready; reason=Vault is sealed; retrying in 5 seconds. ldap | WARNING - pygluu.containerlib.wait - 2019-09-16 18:52:12,768 - Secret backend is not ready; reason=Vault is sealed; retrying in 10 seconds. ```

By Mohammad Abudayyeh staff 17 Sep 2019 at 2:54 a.m. CDT

Mohammad Abudayyeh gravatar
Hey Patrick, Yes its suppose to setup everything for you. All you need to do is add the ip to resolve to the hostname at the hosts file on your computer. Then you can access it at forexample https://yourhostname.domain.com. Ok lets start from scratch since you have a clean VM lets run the following: - Remove everything. Walk inside the directory which has `run_all.sh` and run `docker-compose down` - Remove the folder that has the files completely. `rm -rf gluu-folder` - Lets get the installation zip and unzip it - `wget https://github.com/GluuFederation/community-edition-containers/archive/4.0.0.zip && unzip 4.0.0.zip` - Walk inside the `single-host` example directory which will install a `test-drive` for you. - `cd community-edition-containers-4.0.0/examples/single-host` - `chmod +x run_all.sh` - `./run_all.sh` This should install the defaults. You can install more components following this [guide](https://github.com/GluuFederation/community-edition-containers/tree/4.0.0/examples/single-host#deploying-gluu-server). Please let us know what happens. I have attached a video of installation on an Ubuntu 18 LTS using the above commands. Thanks, Mohammad

By Patrick Tsui Account Admin 17 Sep 2019 at 1:33 p.m. CDT

Patrick Tsui gravatar
I gave that a try and the installation was smooth the first time through this time. I get a 502 when trying to go to the admin GUI now. I wonder if the identity backend is not up yet? I will give it some time and keep trying. Thanks for all the help thus far. ``` nginx | 2019/09/17 18:29:20 [error] 25#25: *276 connect() failed (111: Connection refused) while connecting to upstream, client: 10.0.2.15, server: intuit.gluu.org, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:8082/identity", host: "intuit.gluu.org" nginx | 10.0.2.15 - - [17/Sep/2019:18:29:20 +0000] "GET / HTTP/1.1" 502 150 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" "-" ```

By Mohammad Abudayyeh staff 17 Sep 2019 at 1:38 p.m. CDT

Mohammad Abudayyeh gravatar
Yeah you should wait until the launching sequence is done where it says `Launching....`. It will tell you that you can now go to the url. Mohammad

By Patrick Tsui Account Admin 17 Sep 2019 at 1:39 p.m. CDT

Patrick Tsui gravatar
Interesting. It just kicked me back out to the terminal. It said Launching and indicated it was waiting for a bit but it never outputted anything at the end. ``` [I] Deploying containers Creating oxshibboleth ... Creating oxauth ... Creating oxshibboleth ... done Creating oxauth ... done Creating nginx ... done Creating oxtrust ... done Creating ldap ... done Creating oxpassport ... done Creating registrator ... done [I] Launching .................................................................................................................root@ptsui-VirtualBox:/home/ptsui/gluu/community-edition-containers-4.0.0/test-drive/single-host# ```

By Mohammad Abudayyeh staff 17 Sep 2019 at 1:57 p.m. CDT

Mohammad Abudayyeh gravatar
Are you still getting the 502 error ? Can you show the logs please. It might be a networking issue

By Patrick Tsui Account Admin 17 Sep 2019 at 4 p.m. CDT

Patrick Tsui gravatar
I am still getting the 502. Do you want logs from the install script or just a snippet from following the logs for gluu as it is running? Here is a snippet of the logs that I was following: ``` consul | 2019/09/17 20:48:09 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:48:17 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused consul | 2019/09/17 20:48:19 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused consul | 2019/09/17 20:48:24 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:48:25 [INFO] agent: Synced service "9343c24933b8:oxpassport:8090" consul | 2019/09/17 20:48:25 [INFO] agent: Synced service "9343c24933b8:oxtrust:8080" consul | 2019/09/17 20:48:25 [INFO] agent: Synced service "9343c24933b8:oxauth:8080" consul | 2019/09/17 20:48:25 [INFO] agent: Synced service "9343c24933b8:oxshibboleth:8080" consul | 2019/09/17 20:48:28 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused consul | 2019/09/17 20:48:29 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:48:31 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused consul | 2019/09/17 20:48:43 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused consul | 2019/09/17 20:48:44 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:48:46 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused consul | 2019/09/17 20:48:55 [INFO] agent: Synced service "9343c24933b8:oxpassport:8090" consul | 2019/09/17 20:48:55 [INFO] agent: Synced service "9343c24933b8:oxtrust:8080" consul | 2019/09/17 20:48:55 [INFO] agent: Synced service "9343c24933b8:oxauth:8080" consul | 2019/09/17 20:48:55 [INFO] agent: Synced service "9343c24933b8:oxshibboleth:8080" consul | 2019/09/17 20:48:58 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused consul | 2019/09/17 20:49:03 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:04,315 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:07 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:09,587 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:10,830 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:13 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:14,545 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:18 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:19,820 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:21,038 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:22 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:24,794 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. registrator | 2019/09/17 20:49:25 Syncing services on 9 containers consul | 2019/09/17 20:49:25 [INFO] agent: Synced service "9343c24933b8:oxpassport:8090" consul | 2019/09/17 20:49:25 [INFO] agent: Synced service "9343c24933b8:oxtrust:8080" consul | 2019/09/17 20:49:25 [INFO] agent: Synced service "9343c24933b8:oxauth:8080" registrator | 2019/09/17 20:49:25 Listing non-exited containers consul | 2019/09/17 20:49:25 [INFO] agent: Synced service "9343c24933b8:oxshibboleth:8080" registrator | 2019/09/17 20:49:25 Cleaning up dangling services consul | 2019/09/17 20:49:29 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:30,035 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:31,491 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:35,070 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:37 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused consul | 2019/09/17 20:49:40 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:40,257 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:41,833 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:44 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:45,322 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. nginx | 2019/09/17 20:49:48 [error] 27#27: *563 connect() failed (111: Connection refused) while connecting to upstream, client: 172.18.0.1, server: intuit.gluu.org, request: "GET /identity/restv1/passport/config HTTP/1.1", upstream: "http://127.0.0.1:8082/identity/restv1/passport/config", host: "intuit.gluu.org" nginx | 172.18.0.1 - - [17/Sep/2019:20:49:48 +0000] "GET /identity/restv1/passport/config HTTP/1.1" 502 150 "-" "-" "-" oxpassport | 2019-09-17T20:49:48.253Z [ERROR] Error: Received unexpected HTTP status code of 502 oxpassport | 2019-09-17T20:49:48.253Z [WARN] An attempt to get configuration data will be tried again soon oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:50,640 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:52,026 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:49:52 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused consul | 2019/09/17 20:49:55 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:49:55,523 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. registrator | 2019/09/17 20:49:55 Syncing services on 9 containers consul | 2019/09/17 20:49:55 [INFO] agent: Synced service "9343c24933b8:oxpassport:8090" consul | 2019/09/17 20:49:55 [INFO] agent: Synced service "9343c24933b8:oxtrust:8080" consul | 2019/09/17 20:49:55 [INFO] agent: Synced service "9343c24933b8:oxauth:8080" consul | 2019/09/17 20:49:55 [INFO] agent: Synced service "9343c24933b8:oxshibboleth:8080" registrator | 2019/09/17 20:49:55 Listing non-exited containers registrator | 2019/09/17 20:49:55 Cleaning up dangling services oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:00,854 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:02 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:02,273 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:05 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:06,110 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:08 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:11,373 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:12,744 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:15 [INFO] agent: Synced check "service:9343c24933b8:oxauth:8080" oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:16,592 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:17 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:50:20 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:21,926 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:23 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:23,259 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. registrator | 2019/09/17 20:50:25 Syncing services on 9 containers consul | 2019/09/17 20:50:25 [INFO] agent: Synced service "9343c24933b8:oxpassport:8090" consul | 2019/09/17 20:50:25 [INFO] agent: Synced service "9343c24933b8:oxtrust:8080" consul | 2019/09/17 20:50:25 [INFO] agent: Synced service "9343c24933b8:oxauth:8080" consul | 2019/09/17 20:50:25 [INFO] agent: Synced service "9343c24933b8:oxshibboleth:8080" registrator | 2019/09/17 20:50:25 Listing non-exited containers registrator | 2019/09/17 20:50:25 Cleaning up dangling services oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:27,043 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:32,477 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:33,777 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:50:35 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:50:35 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused consul | 2019/09/17 20:50:36 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:37,532 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:42,971 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:44,263 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:48,063 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. nginx | 2019/09/17 20:50:48 [error] 27#27: *565 connect() failed (111: Connection refused) while connecting to upstream, client: 172.18.0.1, server: intuit.gluu.org, request: "GET /identity/restv1/passport/config HTTP/1.1", upstream: "http://127.0.0.1:8082/identity/restv1/passport/config", host: "intuit.gluu.org" nginx | 172.18.0.1 - - [17/Sep/2019:20:50:48 +0000] "GET /identity/restv1/passport/config HTTP/1.1" 502 150 "-" "-" "-" oxpassport | 2019-09-17T20:50:48.304Z [ERROR] Error: Received unexpected HTTP status code of 502 oxpassport | 2019-09-17T20:50:48.304Z [WARN] An attempt to get configuration data will be tried again soon consul | 2019/09/17 20:50:50 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused consul | 2019/09/17 20:50:50 [WARN] agent: Check "service:9343c24933b8:oxpassport:8090" HTTP request failed: Get http://172.18.0.10:8090/passport/token: dial tcp 172.18.0.10:8090: connect: connection refused consul | 2019/09/17 20:50:51 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:53,453 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:54,758 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. registrator | 2019/09/17 20:50:55 Syncing services on 9 containers consul | 2019/09/17 20:50:55 [INFO] agent: Synced service "9343c24933b8:oxpassport:8090" consul | 2019/09/17 20:50:55 [INFO] agent: Synced service "9343c24933b8:oxtrust:8080" consul | 2019/09/17 20:50:55 [INFO] agent: Synced service "9343c24933b8:oxauth:8080" consul | 2019/09/17 20:50:55 [INFO] agent: Synced service "9343c24933b8:oxshibboleth:8080" registrator | 2019/09/17 20:50:55 Listing non-exited containers registrator | 2019/09/17 20:50:55 Cleaning up dangling services consul | 2019/09/17 20:50:56 [WARN] agent: Check "service:9343c24933b8:oxauth:8080" HTTP request failed: Get http://172.18.0.7:8080/oxauth/.well-known/openid-configuration: dial tcp 172.18.0.7:8080: connect: connection refused oxshibboleth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:50:58,253 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. oxauth | WARNING - pygluu.containerlib.wait - 2019-09-17 20:51:03,700 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. consul | 2019/09/17 20:51:04 [WARN] agent: Check "service:9343c24933b8:oxtrust:8080" HTTP request failed: Get http://172.18.0.5:8080/identity/restv1/scim-configuration: dial tcp 172.18.0.5:8080: connect: connection refused oxtrust | WARNING - pygluu.containerlib.wait - 2019-09-17 20:51:04,991 - LDAP backend is not ready; reason=LDAP is not fully initialized yet; retrying in 10 seconds. ```

By Mohammad Abudayyeh staff 17 Sep 2019 at 11:29 p.m. CDT

Mohammad Abudayyeh gravatar
Ok sorry for all this trouble. It really shouldn't be like this but your containers are refusing to connect. This issue might likely be linked with Virtualbox. Would you like to schedule a [call](https://www.gluu.org/book-support/) with us so we get things moving. Or suggest a few good times and I can send over a Zoom bridge. Thanks Mohammad

By Mohammad Abudayyeh staff 18 Sep 2019 at 2:32 a.m. CDT

Mohammad Abudayyeh gravatar
Hey Patrick, Can we try to use `Bridged Adapter` if not already and try setting virtualmachine name --> Settings --> Network --> Advanced --> Promiscuous Mode to Allow all.

By Mohammad Abudayyeh staff 19 Sep 2019 at 6:16 a.m. CDT

Mohammad Abudayyeh gravatar
Hello Patrick, Thanks for scheduling the call. In preparation for the call today can you please have the following ready: - Please make sure you meet the [requirements](https://docs.docker.com/docker-for-mac/install/) for docker desktop. Most importantly for you is that virtual box be the latest. You may choose to remove everything and just install docker desktop which will install vb automatically. - [Docker desktop](https://hub.docker.com/editions/community/docker-ce-desktop-mac) for mac ( latest version). Hence if you have anything docker related that is old like the docker toolbox that all has to be removed. - Remove or stop anything if exists, interfering with the ports 8082, 8083 I look forward for the call today. Mohammad

By Mohammad Abudayyeh staff 19 Sep 2019 at 1:11 p.m. CDT

Mohammad Abudayyeh gravatar
Issue has been resolved. IP detected was incorrect in mac, also the validation of the ip was not accepting a valid ip. Changing networks caused a breakage in connection which resulted in the script exiting. Mohammad