Cant open site on server but cms is working

[Thobias]

Hey @all,

i upgraded from 7.9.5 to 10.2.1 with the major step between. The /cms and /cms/console are working fine. But when i am opening the site, the page got an error:

org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service() for servlet [default] in context with path [/site] threw exception

 java.lang.NullPointerException

        at org.hippoecm.hst.container.HstDelegateeFilterBean.doFilter(HstDelegateeFilterBean.java:185)

        at org.hippoecm.hst.container.DelegatingFilter.doFilter(DelegatingFilter.java:84)

        at org.hippoecm.hst.container.HstFilter.doFilter(HstFilter.java:51)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at org.hippoecm.hst.container.XSSUrlFilter.doFilter(XSSUrlFilter.java:52)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)

        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:108)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:522)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)

        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:620)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:349)

        at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:780)

        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)

        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:785)

        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1425)

        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

        at java.lang.Thread.run(Thread.java:745)

Hippo code:

VirtualHosts vHosts = hstManager.getVirtualHosts(isStaleConfigurationAllowedForRequest(containerRequest, hostName));

String ip = getFarthestRemoteAddr(containerRequest);
if (vHosts.isDiagnosticsEnabled(ip)) {
    rootTask = HDC.start(HstDelegateeFilterBean.class.getSimpleName());
    rootTask.setAttribute("request", containerRequest.toString());
}

ResolvedVirtualHost resolvedVirtualHost = vHosts.matchVirtualHost(hostName); // this line occuring the error. vHosts seems to be null.

The site is running on another server. 

No other errors are shown within this log. Additionally i am using a certificate and have a warning in the apache error log:

[ssl:warn] [pid 7406] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)

I think the warning shouldnt be in relation to the hippo error. 

Any ideas why the virtual hosts cant be resolved?

[marijan milicevic]

Hi Thobias,

did you check other logs (catalina.out & hippo*.logs?) I suspect this error is result of something that previously failed 

(e.g. HST configuration errors, or insufficient rights)

cheers

marijan

 

[ssl:warn] [pid 7406] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)

I think the warning shouldnt be in relation to the hippo error. 

Any ideas why the virtual hosts cant be resolved?

--
Hippo Community Group: The place for all discussions and announcements about Hippo CMS (and HST, repository etc. etc.)
 
To post to this group, send email to hippo-c...@googlegroups.com
RSS: https://groups.google.com/group/hippo-community/feed/rss_v2_0_msgs.xml?num=50
---
You received this message because you are subscribed to the Google Groups "Hippo Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to hippo-communi...@googlegroups.com.
Visit this group at https://groups.google.com/group/hippo-community.
For more options, visit https://groups.google.com/d/optout.

[Thobias]

the hippo-site.log file shows me the following exception:

 WARN  Thread-11 [HstManagerImpl$1.run:259] Exception during building virtualhosts model.

org.hippoecm.hst.core.container.ContainerException: HST model failed to load : org.hippoecm.hst.configuration.model.ModelLoadingException: Repository exception while getting jcr session

        at org.hippoecm.hst.configuration.model.HstManagerImpl.synchronousBuild(HstManagerImpl.java:311)

        at org.hippoecm.hst.configuration.model.HstManagerImpl.access$100(HstManagerImpl.java:38)

        at org.hippoecm.hst.configuration.model.HstManagerImpl$1.run(HstManagerImpl.java:257)

        at java.lang.Thread.run(Thread.java:745)

Caused by: org.hippoecm.hst.configuration.model.ModelLoadingException: Repository exception while getting jcr session

        at org.hippoecm.hst.configuration.cache.HstNodeLoadingCache$LazyCloseableSession.getSession(HstNodeLoadingCache.java:190)

        at org.hippoecm.hst.configuration.cache.HstNodeLoadingCache.getNode(HstNodeLoadingCache.java:92)

        at org.hippoecm.hst.configuration.hosting.VirtualHostsService.quickModelCheck(VirtualHostsService.java:369)

        at org.hippoecm.hst.configuration.hosting.VirtualHostsService.<init>(VirtualHostsService.java:181)

        at org.hippoecm.hst.configuration.model.HstManagerImpl.buildSites(HstManagerImpl.java:361)

        at org.hippoecm.hst.configuration.model.HstManagerImpl.synchronousBuild(HstManagerImpl.java:305)

        ... 3 more

Caused by: javax.jcr.LoginException: LoginModule could not perform authentication: Not initialized.

        at org.apache.jackrabbit.core.RepositoryImpl.login(RepositoryImpl.java:1565)

        at org.hippoecm.repository.impl.RepositoryDecorator.login(RepositoryDecorator.java:75)

        at org.hippoecm.repository.HippoRepositoryImpl.login(HippoRepositoryImpl.java:106)

        at org.hippoecm.repository.HippoRepositoryImpl.login(HippoRepositoryImpl.java:118)

        at org.hippoecm.hst.core.jcr.pool.JcrHippoRepository.login(JcrHippoRepository.java:205)

        at org.hippoecm.hst.configuration.cache.HstNodeLoadingCache$LazyCloseableSession.getSession(HstNodeLoadingCache.java:188)

        ... 8 more

Caused by: javax.security.auth.login.LoginException: LoginModule could not perform authentication: Not initialized.

        at org.apache.jackrabbit.core.security.authentication.LocalAuthContext.login(LocalAuthContext.java:95)

        at org.apache.jackrabbit.core.RepositoryImpl.login(RepositoryImpl.java:1537)

        ... 13 more

Caused by: java.lang.IllegalStateException: Not initialized.

        at org.hippoecm.repository.security.user.AbstractUserManager.getUser(AbstractUserManager.java:145)

        at org.hippoecm.repository.security.SecurityManager.authenticate(SecurityManager.java:273)

        at org.hippoecm.repository.security.HippoLoginModule.login(HippoLoginModule.java:146)

        at org.apache.jackrabbit.core.security.authentication.LocalAuthContext.login(LocalAuthContext.java:86)

        ... 14 more

Any ideas what file is missing or missconfigured?

[marijan milicevic]

Hi,

probably HST configuration user (enable debugging level for "org.hippoecm.repository.security" package and it will show you more info).

see:

https://www.onehippo.org/library/concepts/security/hst-users.html

cheers

marijan

[Thobias]

I set the log level to all and there are interesting things.

1. The hippo-site.log file shows many tries to authenticate as configuser

DEBUG EventListenersContainerSessionChecker-1 [HippoLoginModule.login:145] Trying to authenticate as configuser

But no message about success or error for authentication. So there must be another AuthenticationStatus as CREDENTIAL_EXPIRED or ACCOUNT_EXPIRED. Is there any chance to see which credentials are used?

2. An error about a enum

TRACE localhost-startStop-1 [TypeConverterDelegate.attemptToConvertStringToEnum:341] Field [vm://] isn't an enum value

java.lang.NoSuchFieldException: vm://

        at java.lang.Class.getField(Class.java:1703)

        at org.springframework.beans.TypeConverterDelegate.attemptToConvertStringToEnum(TypeConverterDelegate.java:336)

        at org.springframework.beans.TypeConverterDelegate.convertIfNecessary(TypeConverterDelegate.java:257)

        at org.springframework.beans.TypeConverterDelegate.convertIfNecessary(TypeConverterDelegate.java:107)

        at org.springframework.beans.TypeConverterSupport.doConvert(TypeConverterSupport.java:64)

        at org.springframework.beans.TypeConverterSupport.convertIfNecessary(TypeConverterSupport.java:47)

        at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:704)

        at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:185)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1131)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1034)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:504)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:476)

        at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:303)

        at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)

        at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:299)

        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:194)

        at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:351)

        at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:108)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1469)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1214)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:537)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:476)

        at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:303)

        at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)

        at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:299)

        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:194)

        at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:351)

        at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:108)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1469)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1214)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:537)

        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:476)

        at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:303)

Is this error necessary to be fixed? The mentioned field "vm://" is recognizable for me in the hst-config.properties:

development.mode = false

check.repositories.running = false

repository.pool.counter.enabled=true

management.connector.server.locate.existing = true

hstconfigreader.repository.address = vm://

hstconfigreader.repository.user.name = configuser

hstconfigreader.repository.pool.name = hstconfigreader

hstconfigreader.repository.password = configuserpass

binaries.repository.address = vm://

binaries.repository.user.name = liveuser

binaries.repository.pool.name = binaries

binaries.repository.password = liveuserpass

default.repository.address = vm://

default.repository.user.name = liveuser

default.repository.pool.name = default

default.repository.password = liveuserpass

preview.repository.address = vm://

preview.repository.user.name = previewuser

preview.repository.pool.name = preview

preview.repository.password = previewuserpass

writable.repository.address = vm://

writable.repository.user.name = sitewriter

writable.repository.pool.name = writable

writable.repository.password = sitewriterpass

#binaries.prefix.path = /binaries

#component.error.page = /WEB-INF/jsp/errorpages/component-error-page.jsp

component.error.page =

# the classpath resource path for custom bean definitions to override HST core components

assembly.overrides = META-INF/hst-assembly/overrides/*.xml

# the link for beans/nodes that cannot be rewritten to a link

linkrewriting.failed.path = /pagenotfound

# HST JAAS login configuration

java.security.auth.login.config = classpath:/org/hippoecm/hst/security/impl/login.conf

# Enable stale reloading

stale.configuration.supported = true

The documentation mentioned that the new way is to use the passkey: jvm://. But its possible to use its own users. Do you think the configuration is wrong?

[marijan milicevic]

Hi,

documentation is not wrong, but  you should leave hst-config.properties file completely *empty* and setup users in the repository itself, 

as described in previously provided link:

"

Passwords

Since Hippo CMS 10.0 the password for all default site users can be left empty in hst-config.properties (or just not configured, that is best). This is because the users in the repository are configured with 

hipposys:passkey = jvm://

cheers

marijan

[Thobias]

To add the passkey i tried. This is getting me this error:

ERROR EventListenersContainerSessionChecker-1 [JcrHippoRepository.logError:231] Cannot retrieve JVM session user for 'configuser'. Make sure that user 'configuser' at /hippo:configuration/hippo:users contains hipposys:passkey=jvm:// OR make sure to configure a non empty password in your hst-config.properties for xxx.repository.password, see SpringComponentManager.properties.

The confuguser hat the passkey property. You can see it on the screenshot

the positiv is that the previous error is not showing anymore. 

Looks this okay?

[marijan milicevic]

that looks ok, is your hst properties file completely empty?

Does log file show any other errors?

cheers

marijan

 

--

[Thobias]

I cant see any other related errors to this. 

Maybe its interesting that the cms and the site are running on different servers. The connection to the database server is established and i can see the open connection. 

What else can i do?

[Thobias]

Yes, the file is empty.

[Thobias]

The problem was not that i am not using jvm://. This was correct, because there are different JVMs and this will only working within the same JVM.

The problem was that the passwords not saved clear text right now. We upgraded from 7.9.5 to 10+ and this is something that changed. The search shows me this question: https://groups.google.com/forum/#!topic/hippo-community/ieCnhfAHqqk and the answer works for me. :)

Solution: Set the password again with the cms interface to generate crypted passwords.

[Ard Schrijvers]

Hey Thobias,

Thanks for your feedback. Note that it is better since version 7.9 (or
10, not sure any more) to do not set a password at all for hst site
users but instead use passkey=jvm:// (meaning that within the jvm you
do not need a password)

You can find this in the upgrade docs from I think 7.9 to 10 (or 7.8
to 7.9). Otherwise compare with a archetype created project if you
want

HTH,

Regards Ard

>
> --
> Hippo Community Group: The place for all discussions and announcements about
> Hippo CMS (and HST, repository etc. etc.)
>
> To post to this group, send email to hippo-c...@googlegroups.com
> RSS:
> https://groups.google.com/group/hippo-community/feed/rss_v2_0_msgs.xml?num=50
> ---
> You received this message because you are subscribed to the Google Groups
> "Hippo Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to hippo-communi...@googlegroups.com.
> Visit this group at https://groups.google.com/group/hippo-community.
> For more options, visit https://groups.google.com/d/optout.

--
Hippo Netherlands, Oosteinde 11, 1017 WT Amsterdam, Netherlands
Hippo USA, Inc. 71 Summer Street, 2nd Floor Boston, MA 02110, United
states of America.

US +1 877 414 4776 (toll free)
Europe +31(0)20 522 4466
www.onehippo.com