BBB 2.3 Invalid BigBlueButton Endpoint and Secret

[b.ka...@gmail.com]

Hello I have successfully set up multiple instances of bbb running greenlight at our organisation but am having trouble getting 2.3 to run (with greenlight).

I startet with a clean install of ubuntu 18.04 as suggestet and did all preinstallchecks successfully and the following ports were opened
TCP: 80, 443, 1935, 7443

UDP: 16384-32768

after running the installsh (wget -qO- https://ubuntu.bigbluebutton.org/bbb-install.sh | bash -s -- -v bionic-230 -s [mydomain.com]-e [m...@email.com]  -a -w -g

the installation finishes with "bbb-conf --check" returning the following errormessage at the end:

"Warning: Failed to verify STUN server at stun.l.google.com 19302 with command
#
#    stunclient --mode full --localport 30000 stun.l.google.com 19302"

Note we didn't use a Stunserver in our previous installations. I can set one up but we actually don't really have a need for it atm since basically all communication is happening internally anyway.

The real problem comes when I create an admin for greenlight and try to login. After logging in I always get an Errormessage saying
"Server Error Invalid BigBlueButton Endpoint and Secret
Please make sure the proper steps have been taken. Learn more"

I redid alll the steps relating to the .env-configuration. uninstalled and reinstalled and also did a complete reinstall of bbb without greenlight and installed it manually afterwards. But the problem persists.

Any help would be greatly appreciated I have no Idea what is going wrong.

PS: the demomeeting at "https://mydomain.com/demo/demo1.jsp"
seems to works fine

[b.ka...@gmail.com]

just for clarification, the instances that were set up before and are running well were all bbb 2.2

[Felipe Cecagno]

Use bbb-conf --secret to discover the secret of your new server.

--

   Felipe Cecagno

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-s...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/d1591cf4-3b2d-4f78-92b7-1e4e07a2649fn%40googlegroups.com.

[b.ka...@gmail.com]

Hello Felipe,
thank you for you'r reply.

The output of bbb-conf --secret is the same as the BIGBLUEBUTTON_SECRET in the .env in the grenlight directory

[sd...@distancelearning.cloud]

Can you look at /var/log/nginx/bigbluebutton.access.log and see if the greenlight docker is sending any api calls to the BBB server?

 

 

Regards,

Stephen

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/5e0c8084-53ce-4e91-9554-001d1b6b8307n%40googlegroups.com.

[b.ka...@gmail.com]

Hi thank you for your reply,

greenlight docker would be originating from 127.0.0.1 correct ?
If so then these are the lines in the log:

127.0.0.1 - - [18/Jun/2021:12:28:42 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:43 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:44 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:45 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:46 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:47 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:48 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:49 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:50 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:51 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:52 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:53 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:55 +0200] "GET /bigbluebutton/api HTTP/1.1" 200 92 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:55 +0200] "GET /bigbluebutton/api HTTP/1.1" 200 92 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:28:55 +0200] "GET /default.pdf HTTP/1.1" 200 42107 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:37 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:38 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:39 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:40 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:41 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:42 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:44 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:45 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:46 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:47 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:48 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:49 +0200] "GET /bigbluebutton/api HTTP/1.1" 200 92 "-" "curl/7.58.0"
127.0.0.1 - - [18/Jun/2021:12:31:49 +0200] "GET /bigbluebutton/api HTTP/1.1" 200 92 "-" "curl/7.58.0"

127.0.0.1 - - [18/Jun/2021:12:31:49 +0200] "GET /default.pdf HTTP/1.1" 200 42107 "-" "curl/7.58.0"

[sd...@distancelearning.cloud]

Not sure, but something is trying every second.. it eventually works for just a couple of times the 200 is good api call to bbb-web.

Maybe docker is up first waiting for bbb-web to be up.

 

That’s 3 minutes apart, did you restart bbb-conf –restart to get that.

 

What about turning greenlight docker down, and back up.

 

I’m not familiar with greenlight, but there is a way to also see the docker logs to check for errors… Some greenlight users make be able to shead for light.

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/890d6c90-13e5-4173-b2e6-02bca4864016n%40googlegroups.com.

[sd...@distancelearning.cloud]

There is also a greenlight google group…

https://groups.google.com/d/msgid/bigbluebutton-greenlight/a655f620-d678-4fc5-9867-d6b777f3b71an%40googlegroups.com.

 

Some commands to check configs.

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/890d6c90-13e5-4173-b2e6-02bca4864016n%40googlegroups.com.

[Felipe Cecagno]

127.0.0.1 - - [18/Jun/2021:12:31:42 +0200] "GET /bigbluebutton/api HTTP/1.1" 404 162 "-" "curl/7.58.0"

The response is 404 NOT FOUND, so I believe nginx isn't configured properly.

--

   Felipe Cecagno

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/003901d76447%24b78b8a30%2426a29e90%24%40distancelearning.cloud.

[b.ka...@gmail.com]

@Stephen:

thank you for your help.
Sorry for my late reply

1. I restarted bbb in between yes, sorry should have clarified.

1. What about turning greenlight docker down, and back up.
   

1. sadly doesn't change anything
   log output after restart and trying to log in:
   <my.device.ip> - - [23/Jun/2021:16:00:14 +0200] "GET / HTTP/1.1" 307 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   <my.device.ip> - - [23/Jun/2021:16:00:15 +0200] "GET /b HTTP/1.1" 200 15151 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   <my.device.ip> - - [23/Jun/2021:16:00:15 +0200] "GET /b/themes/primary.css HTTP/1.1" 200 4222 "https://<my.domain.name>/b" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   <my.device.ip> - - [23/Jun/2021:16:00:15 +0200] "GET /b/assets/favicon-76c923a0c96c0e77a6ec9d6596b30d597bf270a94136c36aac0cfae8d647b83c.ico HTTP/1.1" 499 0 "https://<my.domain.name>/b" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) $
   <my.device.ip> - - [23/Jun/2021:16:00:18 +0200] "GET /b/signin HTTP/1.1" 200 15184 "https://<my.domain.name>/b" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   <my.device.ip> - - [23/Jun/2021:16:00:18 +0200] "GET /b/assets/favicon-76c923a0c96c0e77a6ec9d6596b30d597bf270a94136c36aac0cfae8d647b83c.ico HTTP/1.1" 200 2587 "https://<my.domain.name>/b/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64;$
   <my.device.ip> - - [23/Jun/2021:16:00:22 +0200] "POST /b/u/login HTTP/1.1" 302 136 "https://<my.domain.name>/b/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   <my.device.ip> - - [23/Jun/2021:16:00:22 +0200] "GET /b/ber-foj-zyy-pbo HTTP/1.1" 200 15407 "https://<my.domain.name>/b/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   <my.device.ip> - - [23/Jun/2021:16:00:22 +0200] "GET /b/themes/primary.css HTTP/1.1" 304 0 "https://<my.domain.name>/b/ber-foj-zyy-pbo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
   

1. There is also a greenlight google group…
   

1. Thank you I didn't know that.Just issued a request to join the group
2. Some commands to check configs
   outpt for when running
   ~/greenlight# docker run --rm --env-file .env bigbluebutton/greenlight:v2 bundle exec rake conf:check
   is:
   
   Checking environment: Passed
   Checking Connection: Passed
   Checking Secret: Passed
   
   

   
   

[b.ka...@gmail.com]

@Felipe:

Thank you for your reply I redid the Steps from
https://docs.bigbluebutton.org/greenlight/gl-install.html#4-configure-nginx-to-route-to-greenlight

it does sadly not change anyhing however If I try to do the optional step (add "location = / { return 307 /b; }" in front of the last "}") I get the following errormessage when trying to restart nginx:
"Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xe" for details."

Is that of any help to identify the problem ?

[emmanuel...@gmail.com]

First you need to check if bbb-conf --secret yield the same endpoint and secret key as in your .env file. If everything looks good then do the following to force renewal of certificate.

1. apt-get install snapd
2. apt-get remove -y certbot
3. snap install certbot --classic
4. certbot renew --force-renewal --preferred-chain "ISRG Root X1"
5. bbb-conf --clean
6. sudo systemctl restart ngnix

Invalid BigBlueButton Endpoint and Secret