Gluu cluster manager

By: Kevin Fletcher named 22 Apr 2020 at 2:27 p.m. CDT

21 Responses
Kevin Fletcher gravatar
I am trying to setup Gluu Cluster Manager in a test environment. I have a Gluu 3.1.6.Final server running on Centos 7.6 and Gluu Cluster Manager 3.1.16-11 running on Ubuntu 16.04 LTS. The Gluu server is a brand new server setup and the install goes without a hitch and I can log into the Gluu admin interface. After I add the Gluu server to the Gluu Cluster Manager interface with the option "Click here to use your standalone Gluu server" I can no longer get into the Admin interface of Gluu. When I try to go there I get "Ops Something wrong happend." Where do I need to look to see what is going on?
CentOS 7.6
closed

Answers

By Mohib Zico Account Admin 22 Apr 2020 at 2:48 p.m. CDT

Copy
Mohib Zico gravatar
Hello Kevin, Couple of questions: >> The Gluu server is a brand new server setup and the install goes without a hitch and I can log into the Gluu admin interface. You can login fine when it wasn't attached to Cluster Manager? OR, You can login fine when you are trying that machine by manually mapping that server's IP in your computer's `/etc/hosts` file? >> After I add the Gluu server to the Gluu Cluster Manager interface with the option "Click here to use your standalone Gluu server" I can no longer get into the Admin interface of Gluu. Did you install 2nd node? If not, what steps you completed after adding that server in Cluster Manager?

By Kevin Fletcher named 22 Apr 2020 at 3:05 p.m. CDT

Copy
Kevin Fletcher gravatar
That is correct. I can log into the Gluu server admin interface when it was NOT attached to the Cluster Manager. I lose the ability to get into the admin interface after I add it to the Cluster Manager. I have tried it with just one Gluu server added and also when adding a second Gluu server and running through all the steps. (Add second server, Install Gluu on second server, Install NGINX, Setup LDAP repliation and Install File system replication) In both cases after I am still unable to access the Gluu server admin interface. I am not sure what logs you would like but I can post some logs if that would help.

By Mohib Zico Account Admin 22 Apr 2020 at 3:33 p.m. CDT

Copy
Mohib Zico gravatar
Thanks for clarification, Kevin. Can you please show me a screenshot of your error which will include url as well?

By Kevin Fletcher named 22 Apr 2020 at 4:11 p.m. CDT

Copy
Kevin Fletcher gravatar
Sure. I am performing this in a test environment. I have 3 servers: gcm.nsresource.net (Gluu Cluster Manager) gluu1.nsresource.net (First Gluu server) gluu2.nsresource.net (Second Gluu server) I have a CNAME that I am using for the setup which is login.nsresource.net. Currently it is pointing to gluu1.nsresource.net 192.168.70.60 gcm.nsresource.net 192.168.70.61 gluu1.nsresource.net 192.168.70.62 gluu2.nsresource.net 192.168.70.61 login.nsresource.net Question: If I want to access the Gluu servers with login.nsresource.net then should I change the IP to point to the IP address of the Cluster Manager? I tried that also but it did not work either. I am sure that I am missing a step in the sequence or something simple. The attached error message is what I get when I try to go to login.nsresource.net and it redirects me to https://login.nsresource.net/identity/error
2020-04-22_133020.png

By Mohib Zico Account Admin 22 Apr 2020 at 4:15 p.m. CDT

Copy
Mohib Zico gravatar
>> Question: If I want to access the Gluu servers with login.nsresource.net then should I change the IP to point to the IP address of the Cluster Manager? I tried that also but it did not work either. No, always LB's ip_address. Even when you will make this cluster live... the LB's ip address will be used. >> https://login.nsresource.net/identity/error Error is coming from `identity`; that means.. we have to check oxtrust log. Let's make it in DEBUG mode and tail oxtrust.log. It should have indication.

By Kevin Fletcher named 24 Apr 2020 at 11:42 a.m. CDT

Copy
Kevin Fletcher gravatar
I am sure that I am missing a step in the setup process. I can see the logs complaining about not having a valid SSL certificate but that should not keep this from running. I have attached a diagram to show what I am trying to accomplish along with the current logs. If you could point me in the right direction I would be grateful. This test network is using 3 servers: Ubuntu 16.04 for Cluster Manager Centos 7.6 for both Gluu1 and Gluu2 servers. DNS is setup like the following: 192.168.70.60 gcm2.nsresource.net #Cluster manager server 192.168.70.61 gluu1.nsresource.net #First Gluu server. 192.168.70.62 gluu2.nsresource.net #Second Gluu server. CNAME record for login.nsresource.net -> gluu1.nsresource.net. My goal is for people to access Gluu via login.nsresource.net. I am not sure what the load balancer name should be when I install NGINX. gcm2.nsresource.net or login.nsresource.net? Thanks, Kevin
Gluu_test_setup.pdf Gluu.zip

By Mohib Zico Account Admin 24 Apr 2020 at 3:57 p.m. CDT

Copy
Mohib Zico gravatar
Ok. I think I should prepare some tutorial videos on cluster manager. You don't have any technical issues as far as I can understand but you might have confused with FQDN / Hostname you are using. I'll try to clear them in video, let's see how that goes.

By Kevin Fletcher named 27 Apr 2020 at 10:34 a.m. CDT

Copy
Kevin Fletcher gravatar
Great! Let me know when you have it ready. I am sure this is a quick fix. Also, we can do a remote session and I can show you what I am doing if that would be quicker. I just need to get past this so I can get Cluster Manager run though its paces so we can get it into production.

By Mohib Zico Account Admin 27 Apr 2020 at 3:45 p.m. CDT

Copy
Mohib Zico gravatar
Sounds good. Okay, let me try to publish those tutorials as soon as I can. If those videos doesn't work for you, we will do session sharing for sure.

By Mohib Zico Account Admin 29 Apr 2020 at 2:27 p.m. CDT

Copy
Mohib Zico gravatar
Hello Kevin, Just to update you on status... I am trying to test latest cluster manager but facing couple of issues; our CM dev is working to resolve them. As soon as these are resolved, I am moving forward.

By Kevin Fletcher named 01 May 2020 at 7:39 a.m. CDT

Copy
Kevin Fletcher gravatar
Just checking in to see how things are going. Have you made any progress?

By Mohib Zico Account Admin 02 May 2020 at 10:20 a.m. CDT

Copy
Mohib Zico gravatar
Hello Kevin, I had to take vacation from yesterday for some family issues so couldn't get latest info from Dev. But as far as i know they patched it and I'll move forward to retest in coming week.

By Kevin Fletcher named 05 May 2020 at 7:35 a.m. CDT

Copy
Kevin Fletcher gravatar
Any updates on this yet? Thanks, Kevin

By Mohib Zico Account Admin 05 May 2020 at 7:47 a.m. CDT

Copy
Mohib Zico gravatar
QA going on...

By Mohib Zico Account Admin 05 May 2020 at 3:39 p.m. CDT

Copy
Mohib Zico gravatar
Hello again Kevin, I completed my QA with new cluster manager and I prepared some screencast for you. I also faced some issues while doing QA and reported those to team in github. I am sharing those screencast and associated github issues; those github issue description has workaround added in comment. After installing cluster you can follow those workaround to make your cluster stable if you want to build cluster with CM right now. Here are they: - Part-1: https://youtu.be/nEkZLbg5u_c - Part-2: https://youtu.be/3W-qNa8U1c4 ( https://github.com/GluuFederation/cluster-mgr/issues/303 , https://github.com/GluuFederation/cluster-mgr/issues/304 , https://github.com/GluuFederation/cluster-mgr/issues/305 , https://github.com/GluuFederation/cluster-mgr/issues/306 ) - Part-3: https://youtu.be/pofa5MTvzJE

By Kevin Fletcher named 08 May 2020 at 7:29 a.m. CDT

Copy
Kevin Fletcher gravatar
Mohib, I was able to get the Admin interface up and running by backing up the /etc/certs folder and restoring it after adding it to the Cluster Manager. Would that produce the same affect as copying from the second server? Remember we are planning on using a current production server which already has the certs setup the way we want them. I assume copying them from the second server would reset them back to the default installed certs. Also, do you know when this issue might be fixed in Cluster Manager so we do not have to use this workaround? Thanks, Kevin

By Kevin Fletcher named 08 May 2020 at 7:53 a.m. CDT

Copy
Kevin Fletcher gravatar
Just a quick question. Can we use Cluster Manager 4.1 with Gluu 3.1.7 or are is Cluster Manager versions tied with Gluu versions?

By Mohib Zico Account Admin 08 May 2020 at 4:58 p.m. CDT

Copy
Mohib Zico gravatar
>> Remember we are planning on using a current production server which already has the certs setup the way we want them. I assume copying them from the second server would reset them back to the default installed certs. Right, ideal situation should be: CM should take cert from Node1 ( standalone machine ) to Node2. >> do you know when this issue might be fixed in Cluster Manager so we do not have to use this workaround? Dev saying that, it's been fixed in latest 4.1-8 version. >> Can we use Cluster Manager 4.1 with Gluu 3.1.7 or are is Cluster Manager versions tied with Gluu versions? No. CM 4.x is for Gluu Server 4.x only.

By Mohib Zico Account Admin 15 May 2020 at 5:50 a.m. CDT

Copy
Mohib Zico gravatar
Hello Kevin, Is there anything else I can assist you in this ticket?

By Kevin Fletcher named 19 May 2020 at 5:22 p.m. CDT

Copy
Kevin Fletcher gravatar
No, I was able to work around the issue by saving the /etc/certs folder and then restoring it after added the existing Gluu server. As long as you thing that is good I am good with closing the ticket. Thanks, Kevin

By Mohib Zico Account Admin 22 May 2020 at 10:26 a.m. CDT

Copy
Mohib Zico gravatar
Just fyi... We fixed bunch of bugs in 4.1-9 version of Cluster Manager; still doing some final QA.

Post an answer