BBB on AWS

[Ajay Kajla]

Hi,

I have been trying to setup BBB server on EC 2 instance with self signed SSL. But getting errors. I think self signed SSL is the culprit as self sign SSL doesn't work on local physical server.

Regards,
Ajay

[Fred Dixon]

Hi Ajay,

> I think self signed SSL is the culprit as self sign SSL doesn't work on local physical server.

Do not use a self-signed certificate.  Try using https://letsencrypt.org -- see:

  https://groups.google.com/d/msg/bigbluebutton-setup/uri0OhfEdC4/_QOlF1VTCQAJ

Regards,... Fred

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

[Ajay Kajla]

Hi Fred,

Thanks for clarifying on SSL issue, I have got SSL for my sub domain. SSL is installed and working. But still BBB is not starting without errors.

Domain: av.abc.com

In AWS server /etc/hosts I have added  following:

182.31.xx.83    av.abc.com

<External Public IP>   av.abc.com

BBB startup is still showing errors. I followed http://docs.bigbluebutton.org/install/install.html#Install_

########################################################################################################

# bbb-conf --restart

# IP does not match:

#                           IP from ifconfig: 182.31.xx.83

#   /etc/nginx/sites-available/bigbluebutton: av.abc.com

# Warning: API URL IPs do not match host:

#

#                                IP from ifconfig: 182.31.xx.83

#  /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: av.abc.com

Restarting BigBlueButton ...

 * Stopping daemon monitor monit                                                                                                                                 [ OK ]

 * Stopping Red5 Server red5                                                                                                                                     [ OK ]

 * Stopping Tomcat servlet engine tomcat7                                                                                                                        [ OK ]

Killing: 14635

 * Stopping bbb-record-core

 * nginx is not running

 * Red5 Server is not running.

 * Tomcat servlet engine is not running.

15740 Backgrounding.

Waiting for FreeSWITCH to start: ....................

 * Starting Red5 Server red5                                                                                                                                            

                                                                                                                                                                 [ OK ]

 * Starting Tomcat servlet engine tomcat7                                                                                                                        [ OK ]

 * Starting daemon monitor monit                                                                                                                                 [ OK ]

Note: monit will automatically start bbb-record-core and LibreOffice within 60 seconds.

Waiting for BigBlueButton to finish starting up (this may take a minute): ..........Startup unsuccessful: could not connect to http://182.31.xx.83/bigbluebutton/api

########################################################################################################

root@avc:~# bbb-conf --check

BigBlueButton Server 0.9.1 (402)

                    Kernel version: 3.13.0-74-generic

                      Distribution: Ubuntu 14.04.3 LTS (64-bit)

                            Memory: 7480 MB

/var/www/bigbluebutton/client/conf/config.xml (bbb-client)

                Port test (tunnel): av.abc.com

                              Red5: av.abc.com

              useWebrtcIfAvailable: true

/opt/freeswitch/conf/sip_profiles/external.xml (FreeSWITCH)

                    websocket port: 5066

                    WebRTC enabled: true

/etc/nginx/sites-available/bigbluebutton (nginx)

                       server name: av.abc.com

                              port: 80

443 ssl

                    bbb-client dir: /var/www/bigbluebutton

/var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties (bbb-web)

                      bbb-web host: 182.31.xx.83

/var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp (API demos)

                           api url: av.abc.com

/var/www/bigbluebutton/check/conf/config.xml (client check)

                      client check: av.abc.com

/usr/share/red5/webapps/bigbluebutton/WEB-INF/red5-web.xml (red5)

                  voice conference: FreeSWITCH

                     capture video: true

                   capture desktop: true

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)

                     playback host: av.abc.com

** Potential problems described below **

# IP does not match:

#                           IP from ifconfig: 182.31.xx.83

#   /etc/nginx/sites-available/bigbluebutton: av.abc.com

# Warning: API URL IPs do not match host:

#

#                                IP from ifconfig: 182.31.xx.83

#  /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: av.abc.com

# Error: Could not connect to the configured hostname/IP address

#

#    http://182.31.xx.83/

#

# If your BigBlueButton server is behind a firewall, see FAQ.

# Warning: The API demos are installed and accessible from:

#

#    http://182.31.xx.83/

#

# These API demos allow anyone to access your server without authentication

# to create/manage meetings and recordings. They are for testing purposes only.

# If you are running a production system, remove them by running:

#

#    sudo apt-get purge bbb-demo

# Warning: The client self check is installed and accessible from:

#

#    http://av.abc.com/check

#

# Error: Unable to reach default URL for presentation:

#

#    https://182.31.xx.83/default.pdf

#

# Check value for beans.presentationService.defaultUploadedPresentation in

#   /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties

########################################################################################################

[Fred Dixon]

Hi Ajay,

> # Warning: The API demos are installed and accessible from:

> #

> #    http://182.31.xx.83/

It looks a bit strange as some of the messages are using your IP address and some are using hostname.

Did you do

  sudo bbb-conf --setip hostname

to configure BigBlueButton to use your hostname?

Regards,... Fred

[Ajay Kajla]

Hi Fred,

Here is the output of bbb-conf --setip av.abc.com

Can you please provide me any other documentation link for setting up BBB (latest stable) on Amazon EC2 instance? 

############################################################

root@avc:~# bbb-conf --setip av.abc.com

Assigning av.abc.com for testing for firewall in /var/www/bigbluebutton/client/conf/config.xml

Assigning av.abc.com for rtmp:// in /var/www/bigbluebutton/client/conf/config.xml

Assigning av.abc.com for servername in /etc/nginx/sites-available/bigbluebutton

Assigning av.abc.com for http:// in /var/www/bigbluebutton/client/conf/config.xml

Assigning av.abc.com for web application URL in /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties

Assigning av.abc.com for api demos in /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp

Assigning av.abc.com for record and playback in /usr/local/bigbluebutton/core/scripts/bigbluebutton.yml

Assigning av.abc.com for playback of recordings:

Assigning av.abc.com for client self check to /var/www/bigbluebutton/check/conf/config.xml

Restarting the bigbluebutton server ...

 * Stopping daemon monitor monit                                                                                                                                 [ OK ]

 * Stopping Red5 Server red5                                                                                                                                     [ OK ]

 * Stopping Tomcat servlet engine tomcat7                                                                                                                        [ OK ]

Killing: 18240

 * Stopping bbb-record-core

20060 Backgrounding.

Waiting for FreeSWITCH to start: ....................

 * Starting Red5 Server red5                                                                                                                                            

                                                                                                                                                                 [ OK ]

 * Starting Tomcat servlet engine tomcat7                                                                                                                        [ OK ]

 * Starting daemon monitor monit                                                                                                                                 [ OK ]

Note: monit will automatically start bbb-record-core and LibreOffice within 60 seconds.

Waiting for BigBlueButton to finish starting up (this may take a minute): ..........Startup unsuccessful: could not connect to http://182.31.xx.83/bigbluebutton/api

############################################################

[Fred Dixon]

Hi Ajay,

>  Startup unsuccessful: could not connect to http://182.31.xx.83/bigbluebutton/api

Hmmm ... his should be the hostname for your BigBlueButton server (taken from the value of bigbluebutton.web.serverURL in /bigbluebutton/WEB-INF/classes/bigbluebutton.properties, not the IP address of your server).

Can you check if you have multiple entries for bigbluebutton.web.serverURL in the above file.

Regards,... Fred

[Ajay Kajla]

There is only one entry for bigbluebutton.web.serverURL which was 182.31.xx.83 I have changed the same to as below:

bigbluebutton.web.serverURL=https://av.abc.com

Getting following errors on bbb-conf --watch

#######################################################################################################################

   -- ERRORS found in /usr/share/red5/log/* --

/usr/share/red5/log/bigbluebutton.log:2016-01-14 15:31:18,594+05:30 [pool-17-thread-1] ERROR o.b.w.v.f.a.PopulateRoomCommand - Not XML: [Conference 74786 not found]

   -- Exceptions found in /var/lib/tomcat7/logs/ --

/var/lib/tomcat7/logs/catalina.out:2016-01-14 15:31:18,586+05:30 ERROR org.bigbluebutton.presentation.PresentationUrlDownloadService  - IOException for url=[https://avc

.jobs.guru/default.pdf] with meeting[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452765678146]

/var/lib/tomcat7/logs/catalina.out:2016-01-14 15:31:19,688+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - IllegalStateException occurred w

hen processing request: [GET] /bigbluebutton/api/join

/var/lib/tomcat7/logs/catalina.out:java.lang.IllegalStateException: Cannot create a session after the response has been committed

/var/lib/tomcat7/logs/catalina.out:2016-01-14 15:31:26,283+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - IllegalStateException occurred w

hen processing request: [GET] /bigbluebutton/api/join

/var/lib/tomcat7/logs/catalina.out:java.lang.IllegalStateException: Cannot create a session after the response has been committed 

#######################################################################################################################

[Ajay Kajla]

Hi Fred,

I tried BBB with SSL setup on physical server as well bet getting same errors. Is there issue with SSL configuration?

########################################################################

  -- ERRORS found in /var/log/bigbluebutton/* --

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:51:55,610+05:30 ERROR org.bigbluebutton.presentation.PresentationUrlDownloadService  - IOException for url=[https://av

.abc.com/default.pdf] with meeting[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774115145]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:51:55,610+05:30 ERROR grails.app.controllers.org.bigbluebutton.web.controllers.ApiController  - Failed to download pres

entation=[https://av.abc.com/default.pdf], meeting=[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774115145]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:51:55,981+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:54:20,890+05:30 ERROR org.bigbluebutton.presentation.PresentationUrlDownloadService  - IOException for url=[https://av

.abc.com/default.pdf] with meeting[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774260521]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:54:20,891+05:30 ERROR grails.app.controllers.org.bigbluebutton.web.controllers.ApiController  - Failed to download pres

entation=[https://av.abc.com/default.pdf], meeting=[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774260521]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:54:21,192+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 17:54:26,385+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:00:45,465+05:30 ERROR org.bigbluebutton.presentation.PresentationUrlDownloadService  - IOException for url=[https://av

.abc.com/default.pdf] with meeting[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774645439]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:00:45,466+05:30 ERROR grails.app.controllers.org.bigbluebutton.web.controllers.ApiController  - Failed to download pres

entation=[https://av.abc.com/default.pdf], meeting=[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774645439]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:00:45,591+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:01:51,778+05:30 ERROR org.bigbluebutton.presentation.PresentationUrlDownloadService  - IOException for url=[https://av

.abc.com/default.pdf] with meeting[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774711098]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:01:51,779+05:30 ERROR grails.app.controllers.org.bigbluebutton.web.controllers.ApiController  - Failed to download pres

entation=[https://av.abc.com/default.pdf], meeting=[183f0bf3a0982a127bdb8161e0c44eb696b3e75c-1452774711098]

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:01:52,134+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:01:54,541+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:02:01,034+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

/var/log/bigbluebutton/bbb-web.log:2016-01-14 18:02:05,350+05:30 ERROR org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver  - CannotRedirectException occurred

 when processing request: [GET] /bigbluebutton/api/join

########################################################################

[Fred Dixon]

Hi Ajay,

In looking at the log files, we see errors downloading 

 https://av.abc.com/default.pdf

(we know the hostname is different on your server).

Can you test this URL in your browser (with your correct hostname) and ensure you can download the default pdf. For example, here is the URL for our demo server

  http://demo.bigbluebutton.org/default.pdf

If you are unable to download default.pdf, then double-check the changes you made to nginx.    When the above HTTPS request comes into the BigBlueButton server it's nginx that handles the request.

Regards,... Fred

[Ajay Kajla]

Hi Fred,

Pdf link is opening without issues in browser.

Regards,
Ajay

[Fred Dixon]

Hi Ajay,

Have you updated to a proper certificate (not self-signed)?

Regards,... Fred

Regards,
Ajay

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

[Ajay Kajla]

Yes it's a RapidSSL certificate.

Regards,
Ajay

[Ajay Kajla]

Hi Fred,

In Firefox browser I'm getting following error:

################################################

XML Parsing Error: junk after document element

Location: http://av.abc.com/bigbluebutton/api/join?meetingID=Join+and+Upload+example&fullName=ajay&password=mp&checksum=505a23ddcde7a1edfaa4cf743b89c1b900977ac6

Line Number 1, Column 153:<response><returncode>FAILED</returncode><errors><error key='noConfigFound' message='We could not find a config for this request.'/></errors></response><!DOCTYPE html> 

################################################

[Fred Dixon]

Hi Ajay,

Can you upgrade your server to BigBlueButton 1.0-beta.  See

  http://docs.bigbluebutton.org/1.0/10install.html#upgrading-bigbluebutton-0-9-1-0

We've added more diagnostics in bbb-conf that will help us diagnose why your getting the above error.

Regards,... Fred

--

You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

[Ajay Kajla]

Hi Fred,

I have already done the upgrade.

How to proceed further?

Regards,
Ajay

You received this message because you are subscribed to a topic in the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/bigbluebutton-dev/G0wdSYQLpi0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to bigbluebutton-...@googlegroups.com.

[Fred Dixon]

Hi Ajay,

Can you post the output of

  sudo bbb-conf --check

and let us know if your able to connect.

Regards,.. Fred

[Ajay Kajla]

Hi Fred,

Please find below the out put of bbb-conf --check

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

root@avc:~# bbb-conf --check

BigBlueButton Server 1.0.0-beta (1005)

                    Kernel version: 3.13.0-76-generic

                      Distribution: Ubuntu 14.04.3 LTS (64-bit)

                            Memory: 3866 MB

/var/www/bigbluebutton/client/conf/config.xml (bbb-client)

                Port test (tunnel): av.abc.com

                              Red5: av.abc.com

              useWebrtcIfAvailable: true

/opt/freeswitch/conf/sip_profiles/external.xml (FreeSWITCH)

                    websocket port: 5066

                    WebRTC enabled: true

/etc/nginx/sites-available/bigbluebutton (nginx)

                       server name: av.abc.com

                              port: 192.168.1.100:80

                              port: 443 ssl

                    bbb-client dir: /var/www/bigbluebutton

/var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties (bbb-web)

                      bbb-web host: av.abc.com

/var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp (API demos)

                           api url: av.abc.com

/var/www/bigbluebutton/check/conf/config.xml (client check)

                      client check: av.abc.com

/usr/share/red5/webapps/bigbluebutton/WEB-INF/red5-web.xml (red5)

                  voice conference: FreeSWITCH

                     capture video: true

                   capture desktop: true

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)

                     playback host: av.abc.com

** Potential problems described below **

# IP does not match:

#                           IP from ifconfig: 192.168.1.100

#   /etc/nginx/sites-available/bigbluebutton: av.abc.com

# Warning: API URL IPs do not match host:

#

#                                IP from ifconfig: 192.168.1.100

#  /var/lib/tomcat7/webapps/demo/bbb_api_conf.jsp: av.abc.com

# Warning: No ffmpeg version was found on the system

#          Recording processing will not function

# Warning: You are running BigBlueButton on a server with less than 4G of memory.  Your

# performance may suffer.

# Warning: The API demos are installed and accessible from:

#

#    http://av.abc.com/

#

# These API demos allow anyone to access your server without authentication

# to create/manage meetings and recordings. They are for testing purposes only.

# If you are running a production system, remove them by running:

#

#    sudo apt-get purge bbb-demo

# Warning: The client self check is installed and accessible from:

#

#    http://av.abc.com/check

#

# Error: Unable to reach default URL for presentation:

#

#    https://av.abc.com/default.pdf

#

# Check value for beans.presentationService.defaultUploadedPresentation in

#   /var/lib/tomcat7/webapps/bigbluebutton/WEB-INF/classes/bigbluebutton.properties

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Ajay Kajla]

Hi Fred,

I got it working, had to add CA certificate along with domain SSL certificate. It's working fine on local physical server. I'll try the same on AWS instance and let you know.

[Ajay Kajla]

Hi Fred,

BBB has been installed with https support on AWS instance, it's working like a charm :)

Thanks for all you support and guidance. 

[Artur Zdolinski]

In my case on Debian 8 / jessie

First: try to download file by wget:
# wget https://bbb.my.host.com/default.pdf
--2016-02-11 16:59:18--  https://bbb.my.host.com/default.pdf
Resolving bbb.my.host.com (bbb.my.host.com)... X.X.X.X
Connecting to bbb.my.host.com (bbb.my.host.com)|X.X.X.X|:

443... connected.
ERROR: cannot verify bbb.my.host.com's certificate, issued by ‘/C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G3’:
  Unable to locally verify the issuer's authority.
To connect to bbb.my.host.com insecurely, use `--no-check-certificate'.

You Have "RapidSSL SHA256 CA - G3"

goto:
# cd /usr/local/share/ca-certificates

Then go to website rapidssl.com and find your "RapidSSL Intermediate CAs"
In my case:
https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&actp=CROSSLINK&id=SO26457
Issued to: RapidSSL SHA256 CA - G3
Issued by: GeoTrust Global CA
Valid from: 8/29/2014 to 5/20/2022
Serial Number: 02 3a 77

create file for exemple
# nano "RapidSSL SHA256 CA - G3.crt"
and put there full certyficate:
-----BEGIN CERTIFICATE-----
MIIEJTCCA.....
-----END CERTIFICATE-----

Use command to reload CA:
# update-ca-certificates
Updating certificates in /etc/ssl/certs... 1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
Adding debian:RapidSSL_SHA256_CA_-_G3.pem
done.
done.


And all done..
Now when you try again download your default.pdf - you should be able to download without asking for add `--no-check-certificate'.
# wget https://bbb.my.host.com/default.pdf

After all you will need:
# bbb-conf --clean
which will reload BBB and clean logs...

After reload open on console log watcher... # bbb-conf --watch
and try to login to your BBB web service

Regards.
Artur Zdolinski

[Fred Dixon]

> In my case on Debian 8 / jessie

We don't recommend using Debian 8 Jessie for BigBlueButton.  See 

 

   http://docs.bigbluebutton.org/1.0/10install.html#installing-bigbluebutton-10-beta

Regards,... Fred

--

You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

[Artur Zdolinski]

Sorry... it was on:

BigBlueButton Server 1.0.0-beta (1017)
                    Kernel version: 3.19.0-49-generic

                      Distribution: Ubuntu 14.04.3 LTS (64-bit)

                            Memory: 7984 MB

[aayush kamboj]

Hi Ajay.

I am facing the same issue. PDF accessible from the same place but getting this error which you have been faced earlier. How did you resolve the issue. will you please help with explaining the same.

Aayush