CF Console Requested Route Does Not Exist

[Craig Smith]

Hi,

I have a fresh deployment (v205) and I am having a routing problem when trying to create a user. This is the error I am seeing:

404 Not Found: Requested route ('console.bellevue.lab') does not exist.

Other routes are working great. Any help would be appreciated.

In the grouter logs I see the following:

console.bellevue.lab - [08/04/2015:22:10:30 +0000] "GET /favicon.ico HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0" 10.4.44.38:45267 x_forwarded_for:"10.4.44.226" vcap_request_id:- response_time:MissingFinishedAt app_id:MissingRouteEndpointApplicationId
console.bellevue.lab - [08/04/2015:22:15:25 +0000] "GET /register HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0" 10.4.44.38:46454 x_forwarded_for:"10.4.44.226" vcap_request_id:- response_time:MissingFinishedAt app_id:MissingRouteEndpointApplicationId
console.bellevue.lab - [09/04/2015:00:03:22 +0000] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0" 10.4.44.38:44182 x_forwarded_for:"10.4.44.226" vcap_request_id:- response_time:MissingFinishedAt app_id:MissingRouteEndpointApplicationId

bosh vms --details:

http://pastebin.com/PRtRuy1e

CF deployment manifest:

http://pastebin.com/vhXPiLds

[Craig Smith]

just in case it matters

$ curl -k https://api.bellevue.lab/info

{"name":"vcap","build":"2222","support":"http://support.cloudfoundry.com","version":2,"description":"Cloud Foundry sponsored by Pivotal","authorization_endpoint":"https://login.bellevue.lab","token_endpoint":"https://uaa.bellevue.lab","allow_debug":true}

[Craig Smith]

cf login attempt with u/p admin/password

➜  ~  cf login

API endpoint: https://api.bellevue.lab

Email> admin

Password> 

Authenticating...

Server error, status code: 502, error code: , message: 

Password> 

[Johannes Hiemer]

Hi Craig,

we need to get that straight first. With console you mean the console you know from run.pivotal.io? This is nothing you deployed yourself right? I am not aware of any included console deployment for CF currently. What you could use would be something like that: https://github.com/jhiemer/cf-spring-web-management-console. But you would need to deploy that yourself.

Could you please SSH into your login_z1/0 and take look in your logs? /var/vcap/sys/logs if I remember correctly. The 502 seems to be an internal error during the authentication attempt. Are you able to open https://login.bellevue.lab?

For the next paste here, please prepaste your terminal output into an editor. The black/grey combination is not that readable. :-)

[Sree Tummidi]

As Johannes mentioned previously, console is not deployed as part of the cf-release.

The UAA/Login Server provides the flows for User Creation and Password Reset.

You can replace the links for user creation and password reset to use the Login job equivalents instead.

1.  passwd: https://login.bellevue.lab/forgot_password
2.  signup: https://login.bellevue.lab/create_account

Can you try accessing "https://login.bellevue.lab/create_account" directly from the browser and create an account

-Sree

--
You received this message because you are subscribed to the Google Groups "Cloud Foundry Developers" group.

To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/37b515da-3e28-400f-88ad-0c14535fff4a%40cloudfoundry.org.

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+u...@cloudfoundry.org.

[Craig Smith]

login.bellevue.lab goes to the login page, other links try to redirect to console.bellevue.lab/create_account, etc

Here is what spiff generated for my manifest, hence why I assumed that the consul URL was supposed to be valid... Should I just change to login.bellevue.lab/[var] for all of these?

I will check the logs on login_z1 to see if anything sticks out. 

1. login:
2.     analytics:
3.       code: null
4.       domain: null
5.     asset_base_url: null
6.     brand: oss
7.     catalina_opts: -Xmx768m -XX:MaxPermSize=256m
8.     enabled: true
9.     invitations_enabled: null
10.     links:
11.       home: https://console.bellevue.lab
12.       network: null
13.       passwd: https://console.bellevue.lab/password_resets/new
14.       signup: https://console.bellevue.lab/register
15.       signup-network: null

Here is where I believe the first user is created in the manifest, is that correct?

 scim:

      external_groups: null

      userids_enabled: true

      users:

      - admin|password|scim.write,scim.read,openid,cloud_controller.admin,doppler.firehose

    spring_profiles: null

    url: https://uaa.bellevue.lab

    user: null

[Craig Smith]

Here is a snippet of the login logs, in particular the localhost log

https://gist.github.com/nctiggy/4b5d44fae2d18703b7e1

I see that it is trying to reach http://uaa.*** rather than https

Could that be this setting? should it be set to https?

login

  protocol: http

[Filip Hanik]

The logs show 'Connection refused' when the login job tries to communicate with the UAA

Caused by: org.springframework.web.client.ResourceAccessException: I/O error on POST request for "http://uaa.bellevue.lab/oauth/token":Connection refused; nested exception is java.net.ConnectException: Connection refused


so there is nothing listening on port 80 on UAA.bellevue.lab

Filip

To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/e42d7ffc-a40a-4bf4-9341-2bd00fd75f5e%40cloudfoundry.org.

[Filip Hanik]

UAA.bellevue.lab would resolve to your load balancer. 

[Craig Smith]

https://gist.github.com/nctiggy/b12a9b24a1023e11de50

looks to be that way

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+unsubscribe@cloudfoundry.org.

[Craig Smith]

Not sure what I am missing...

[Craig Smith]

Here is CF_TRACE=true cf login

https://gist.github.com/nctiggy/84b9c49e5f9ee989f806

grant_type=password&password=[PRIVATE DATA HIDDEN]&scope=&username=admin
RESPONSE: [2015-04-09T15:01:29-07:00]
HTTP/1.1 502 Bad Gateway
Content-Length: 67
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Apr 2015 21:47:15 GMT
X-Cf-Requestid: fcdb153d-9e4f-4421-751a-e6e7329b4c45
X-Cf-Routererror: endpoint_failure
502 Bad Gateway: Registered endpoint failed to handle the request.

Server error, status code: 502, error code: , message: 

[Craig Smith]

And the grouter logs that correlate:

https://gist.github.com/nctiggy/19e47e5ff2c4e045b151

Trying to hit the login server via port 8080

[Filip Hanik]

prior to this you were able to reach login.bellevue, but not uaa.bellevue

now you can't reach login.bellevue either. so your changes are regressing. 

what does bosh vms tell you

and can you ssh into the jobs and verify they are running?

To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/916257ab-163e-426f-8293-8eea6c90c443%40cloudfoundry.org.

[Craig Smith]

Bosh VMS is healthy all running etc.

I have ssh'ed into uaa/login/router and monit tells me all is well and running. I can browse to https://login.bellevue.lab no problem. still can. curl to port 8080 barfs

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+unsubscribe@cloudfoundry.org.

[Craig Smith]

Finally solved. At least I learned a lot along the way! Thanks everyone for helping out!

properties:

    ha_proxy:

      disable_http: true

to

properties:

    ha_proxy:

      disable_http: false

[Parthiban Annadurai]

@Craig Smith.. First of all Congrats for finding the root cause and moving further.. Could you share your working manifest with us, if there is no issues??, why because, it will be more helpful to all..

Thanks in Well Advance..

To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/96679fba-2d9b-49fa-82de-f1d9937aefe3%40cloudfoundry.org.

[Craig Smith]

This deploys just fine now, I am able to login via CF

Here is my Stub: https://gist.github.com/nctiggy/9271c74fc23cfa1d73fd

Here is my Manifest: https://gist.github.com/nctiggy/8adce8243bc1d9e5272c

I am still having issues trying to cf push. Once I get some spare time I will start to work through those.