Issue with PWM configuration ("unable to load health data from server") with 389-Directory Server

[reach.o...@gmail.com]

Hello,

I have been trying to setup PWM along with LDAP, but I am running into the error: "unable to load health data from server."

I don't have an existing LDAP setup, so am doing one from scratch. I tried openLDAP and 389-DS on CentOS 6.5. In either case I get stuck at the same configuration step - the one where LDAP server credentials need to be specified.

I don't have much experience with LDAP, and so I am not sure where I am going wrong.

Setup:
On a VM based server, I setup 389DS as per the tutorial at: http://www.unixmen.com/setup-directory-serverldap-in-centos-6-4-rhel-6-4.
On a different VM server, I installed Apache Tomcat 7.0.61 and java version "1.7.0_79". I installed PWM pwm_v1.7.1.zip on it

Issue:
On LDAP configuration Page of PWM Configuration Guide: I am specifying "Proxy/Admin LDAP DN" as: "cn=Directory Manager,dc=pwmldap,dc=local"
On clicking check config button, a yello progress bar pops up and after 20-25 secs generates the error: "unable to load health data from server."
I have stopped selinux and iptables on both machines (just to rule out all possibilities).

Here's the log data from catalina.out:

------------------------------
[root@server ~]# tail -f /opt/tomcat/logs/catalina.out
May 04, 2015 10:21:15 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-bio-8009"]
May 04, 2015 10:21:15 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1237 ms
May 04, 2015 10:21:15 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service Catalina
May 04, 2015 10:21:15 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet Engine: Apache Tomcat/7.0.61
May 04, 2015 10:21:15 AM org.apache.catalina.startup.HostConfig deployWAR
INFO: Deploying web application archive /opt/tomcat/webapps/pwm.war
log4j:WARN No appenders could be found for logger (password.pwm.config.ConfigurationReader).
log4j:WARN Please initialize the log4j system properly.
log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.
2015-05-04 10:21:20, WARN , pwm.PwmApplication, skipping LocalDB open due to application mode NEW
2015-05-04 10:21:20, WARN , pwm.PwmApplication, unable to initialize localDBLogger: LocalDB cannot be null
2015-05-04 10:21:20, INFO , pwm.PwmApplication, initializing pwm
2015-05-04 10:21:20, INFO , pwm.PwmApplication, loaded configuration:

2015-05-04 10:21:21, INFO , pwm.PwmApplication, loaded pwm global password policy: PwmPasswordPolicy: {MinimumLowerCase=0, MinimumSpecial=0, MaximumUpperCase=0, MaximumNumeric=0, MaximumOldChars=0, EnableWordlist=true, MinimumLifetime=0, RegExMatch=, MinimumUnique=0, MinimumNonAlpha=0, DisallowedAttributes=[cn, givenName, sn], DisallowCurrent=true, MinimumStrength=0, AllowNumeric=true, ChangeMessage=, MinimumAlpha=0, MaximumLowerCase=0, AllowSpecial=true, ADComplexity=false, MaximumLength=64, MaximumRepeat=0, AllowFirstCharNumeric=true, MinimumLength=2, MaximumSequentialRepeat=0, AllowLastCharSpecial=true, MinimumNumeric=0, MaximumAlpha=0, RegExNoMatch=, MaximumNonAlpha=0, MaximumSpecial=0, MinimumUpperCase=0, AllowFirstCharSpecial=true, DisallowedValues=[password, test], AllowLastCharNumeric=true}
2015-05-04 10:21:21, INFO , pwm.PwmApplication, generated new random instanceID B00CAA9F4013C5A0
2015-05-04 10:21:21, INFO , pwm.PwmApplication, using 'B00CAA9F4013C5A0' for instance's ID (instanceID)
2015-05-04 10:21:21, INFO , pwm.PwmApplication, environment info: java.vm.vendor=Oracle Corporation, java.vm.version=24.79-b02, java.vm.name=Java HotSpot(TM) 64-Bit Server VM, java.home=/usr/java/jdk1.7.0_79/jre, memmax=476446720, threads=3, ldapChai API version: 0.6.5, b852
2015-05-04 10:21:21, INFO , pwm.PwmApplication, debug info:, memfree=5225984, memallocd=34148352, memmax=476446720, threads=3
2015-05-04 10:21:21, INFO , wordlist.SharedHistoryManager, LocalDB is not available, will remain closed
2015-05-04 10:21:21, WARN , event.AuditManager, unable to start - LocalDB is not available
2015-05-04 10:21:21, ERROR, stats.StatisticsManager, LocalDB is not available, will remain closed
2015-05-04 10:21:21, WARN , wordlist.WordlistManager, LocalDB is not available, PWM-Wordlist will remain closed
2015-05-04 10:21:21, WARN , wordlist.SeedlistManager, LocalDB is not available, PWM-Seedist will remain closed
2015-05-04 10:21:21, ERROR, pwm.TokenManager, 5055 ERROR_INVALID_SECURITY_KEY (unable to start token manager: Security Key value is not configured)
<<<<<<There's a long wait here....when Tomcat appears to be dead>>>>>
2015-05-04 10:25:34, ERROR, pwm.VersionChecker, 5054 ERROR_UNREACHABLE_CLOUD_SERVICE (unable to reach version check service 'https://pwm-cloud.appspot.com/rest/pwm/current-version', error: Network is unreachable)
2015-05-04 10:25:34, ERROR, pwm.VersionChecker, unable to retrieve current version data from cloud: java.lang.NumberFormatException: For input string: ""
2015-05-04 10:25:34, ERROR, util.IntruderManager, 5019 ERROR_SERVICE_NOT_AVAILABLE (unable to start IntruderManager, LocalDB unavailable)
2015-05-04 10:25:34, INFO , pwm.PwmApplication, PWM v1.7.1 b1232 (Release) open for bidness! (4m:14s)
2015-05-04 10:25:34, ERROR, util.MacroMachine, unable to parse configured/detected site URL: no protocol: [UNCONFIGURED_URL]
2015-05-04 10:25:34, WARN , pwm.PwmApplication, unable to add email to queue: 5039 ERROR_CLOSING
May 04, 2015 10:25:34 AM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
password.pwm.ws.server.rest
May 04, 2015 10:25:34 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
class password.pwm.ws.server.rest.RestRandomPasswordServer
class password.pwm.ws.server.rest.RestAppDataServer
class password.pwm.ws.server.rest.RestHealthServer
class password.pwm.ws.server.rest.RestSetPasswordServer
class password.pwm.ws.server.rest.RestVerifyResponsesServer
class password.pwm.ws.server.rest.RestCheckPasswordServer
class password.pwm.ws.server.rest.RestChallengesServer
class password.pwm.ws.server.rest.RestStatisticsServer
class password.pwm.ws.server.rest.RestProfileServer
class password.pwm.ws.server.rest.RestStatusServer
May 04, 2015 10:25:34 AM com.sun.jersey.api.core.ScanningResourceConfig init
INFO: No provider classes found.
May 04, 2015 10:25:34 AM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.17 01/17/2013 04:27 PM'
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployWAR
INFO: Deployment of web application archive /opt/tomcat/webapps/pwm.war has finished in 260,937 ms
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/examples
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/examples has finished in 348 ms
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/supplemental
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/supplemental has finished in 102 ms
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/servlet
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/servlet has finished in 114 ms
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/ROOT
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/ROOT has finished in 108 ms
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/docs
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/docs has finished in 121 ms
May 04, 2015 10:25:36 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/host-manager
May 04, 2015 10:25:37 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/host-manager has finished in 139 ms
May 04, 2015 10:25:37 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deploying web application directory /opt/tomcat/webapps/manager
May 04, 2015 10:25:37 AM org.apache.catalina.startup.HostConfig deployDirectory
INFO: Deployment of web application directory /opt/tomcat/webapps/manager has finished in 130 ms
May 04, 2015 10:25:37 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-bio-8080"]
May 04, 2015 10:25:37 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-bio-8009"]
May 04, 2015 10:25:37 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 262182 ms

<<<<<<this is where I begin configuration through Chrome browser>>>>>

2015-05-04 10:28:32, WARN , pwm.PwmApplication, skipping LocalDB open due to application mode NEW
2015-05-04 10:28:32, WARN , pwm.PwmApplication, unable to initialize localDBLogger: LocalDB cannot be null
2015-05-04 10:28:32, INFO , pwm.PwmApplication, initializing pwm
2015-05-04 10:28:32, INFO , pwm.PwmApplication, loaded configuration:
ldap.serverUrls=["ldaps://192.168.1.2:636"]
ldap.proxy.username=cn=Directory Manager,dc=pwmldap,dc=local
ldap.proxy.password=**removed**
ldap.rootContexts=["dc\u003dpwmldap,dc\u003dlocal"]
ldap.testuser.username=
pwmAdmin.queryMatch=(groupMembership=cn=Admins,ou=Groups,o=example)
ldap.promiscuousSSL=true
recovery.response.writePreference=
recovery.response.readPreference=
2015-05-04 10:28:32, INFO , pwm.PwmApplication, loaded pwm global password policy: PwmPasswordPolicy: {MinimumLowerCase=0, MinimumSpecial=0, MaximumUpperCase=0, MaximumNumeric=0, MaximumOldChars=0, EnableWordlist=true, MinimumLifetime=0, RegExMatch=, MinimumUnique=0, MinimumNonAlpha=0, DisallowedAttributes=[cn, givenName, sn], DisallowCurrent=true, MinimumStrength=0, AllowNumeric=true, ChangeMessage=, MinimumAlpha=0, MaximumLowerCase=0, AllowSpecial=true, ADComplexity=false, MaximumLength=64, MaximumRepeat=0, AllowFirstCharNumeric=true, MinimumLength=2, MaximumSequentialRepeat=0, AllowLastCharSpecial=true, MinimumNumeric=0, MaximumAlpha=0, RegExNoMatch=, MaximumNonAlpha=0, MaximumSpecial=0, MinimumUpperCase=0, AllowFirstCharSpecial=true, DisallowedValues=[password, test], AllowLastCharNumeric=true}
2015-05-04 10:28:32, INFO , pwm.PwmApplication, generated new random instanceID F75E7208CED40256
2015-05-04 10:28:32, INFO , pwm.PwmApplication, using 'F75E7208CED40256' for instance's ID (instanceID)
2015-05-04 10:28:32, INFO , pwm.PwmApplication, environment info: java.vm.vendor=Oracle Corporation, java.vm.version=24.79-b02, java.vm.name=Java HotSpot(TM) 64-Bit Server VM, java.home=/usr/java/jdk1.7.0_79/jre, memmax=476446720, threads=17, ldapChai API version: 0.6.5, b852
2015-05-04 10:28:32, INFO , pwm.PwmApplication, debug info:, memfree=23469288, memallocd=59072512, memmax=476446720, threads=17
2015-05-04 10:28:32, INFO , wordlist.SharedHistoryManager, LocalDB is not available, will remain closed
2015-05-04 10:28:32, WARN , event.AuditManager, unable to start - LocalDB is not available
2015-05-04 10:28:32, ERROR, stats.StatisticsManager, LocalDB is not available, will remain closed
2015-05-04 10:28:32, WARN , wordlist.WordlistManager, LocalDB is not available, PWM-Wordlist will remain closed
2015-05-04 10:28:32, WARN , wordlist.SeedlistManager, LocalDB is not available, PWM-Seedist will remain closed
2015-05-04 10:28:32, ERROR, pwm.TokenManager, 5055 ERROR_INVALID_SECURITY_KEY (unable to start token manager: Security Key value is not configured)
-----------------------
<<<<<Error: "unable to load health data from server" appears>>>>>

I would really appreciate any pointers on how to get this to work.

Thanks.

[Menno Pieters]

Please try manual configuration. You're connecting using SSL to an IP address, which most likely is not a valid address that matches the SSL certificate.

- Menno

--
You received this message because you are subscribed to the Google Groups "pwm-general" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pwm-general...@googlegroups.com.
To post to this group, send email to pwm-g...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/pwm-general/53c3409f-27ca-473e-a003-838957b2861e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[reach.o...@gmail.com]

Thanks for your response, Menno.

How do I do manual configuration? I couldn't find the steps in the user guide available or on PWM site.

I couldn't find a PwmConfiguration.xml file either (particularly for the 389DS configuration). It doesn't seem to be bundled with the PWM installation zip and I couldn't find one online. It'll be great if the PWM dev community can provide templates and step-by-step manual configuration instructions too. Any pointers/suggestions?

On the SSL thing, originally I ran 389DS at port 389, without SSL. Even then I kept getting the same error.

Using Windows based LDAP Admin (http://www.ldapadmin.org/), and using the Directory Manager credentials, I have been able to connect to the directory server just fine - over both 636 and 389. So, I presume LDAP server is working fine and connections to it are happening.

Any suggestions or pointers?

Thanks again.