<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic SOLR not tracking after custom keystores generated in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286802#M239932</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I am running Alfresco 5.0.0 (d r99759-b2) community edition.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Alfresco is installed with standard wizard.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Once initial deployment finished, http in tomcat is set to disabled and verified alfresco and solr are running without issues as they should.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Used generate_keystore.bat with changed to CN:&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;set CERTIFICATE_HOME=%USERPROFILE%&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;@rem The repository server certificate subject name, as specified in tomcat\conf\tomcat-users.xml with roles="repository"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;set REPO_CERT_DNAME=CN=server1, OU=Unknown, O=Unknown, L=Unknown, ST=US, C=US&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;@rem The SOLR client certificate subject name, as specified in tomcat\conf\tomcat-users.xml with roles="repoclient"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;set SOLR_CLIENT_CERT_DNAME=CN=server1, OU=Unknown, O=Unknown, L=Unknown, ST=US, C=US&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Once keystores generated, I created a certificate sign request and signed the certificates with my private domain CA.&amp;nbsp; Alias for the certificate are kept ssl.repo &amp;amp; ssl.repo.client.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Once started I am seeing following errors in solr.log (with debug on):&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:44,724 DEBUG [org.apache.commons.httpclient.methods.EntityEnclosingMethod] Request body sent&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "HTTP/1.1 401 Unauthorized[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "HTTP/1.1 401 Unauthorized[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "Server: Apache-Coyote/1.1[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "Content-Type: text/html;charset=utf-8[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "Content-Language: en[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "Content-Length: 1037[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "Date: Thu, 25 Feb 2016 00:38:45 GMT[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [httpclient.wire.header] &amp;lt;&amp;lt; "[\r][\n]"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,833 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] Authorization required&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] Authentication challenge(s) not found&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [httpclient.wire.content] &amp;lt;&amp;lt; "&amp;lt;html&amp;gt;&amp;lt;head&amp;gt;&amp;lt;title&amp;gt;Apache Tomcat/7.0.59 - Error report&amp;lt;/title&amp;gt;&amp;lt;style&amp;gt;&amp;lt;!–H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A {color : black;}A.name {color : black;}HR {color : #525D76;}–&amp;gt;&amp;lt;/style&amp;gt; &amp;lt;/head&amp;gt;&amp;lt;body&amp;gt;&amp;lt;h1&amp;gt;HTTP Status 401 - No client certificate chain in this request&amp;lt;/h1&amp;gt;&amp;lt;HR size="1" noshade="noshade"&amp;gt;&amp;lt;p&amp;gt;&amp;lt;b&amp;gt;type&amp;lt;/b&amp;gt; Status report&amp;lt;/p&amp;gt;&amp;lt;p&amp;gt;&amp;lt;b&amp;gt;message&amp;lt;/b&amp;gt; &amp;lt;u&amp;gt;No client certificate chain in this request&amp;lt;/u&amp;gt;&amp;lt;/p&amp;gt;&amp;lt;p&amp;gt;&amp;lt;b&amp;gt;description&amp;lt;/b&amp;gt; &amp;lt;u&amp;gt;This request requires HTTP authentication.&amp;lt;/u&amp;gt;&amp;lt;/p&amp;gt;&amp;lt;HR size="1" noshade="noshade"&amp;gt;&amp;lt;h3&amp;gt;Apache Tomcat/7.0.59&amp;lt;/h3&amp;gt;&amp;lt;"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [httpclient.wire.content] &amp;lt;&amp;lt; "/body&amp;gt;&amp;lt;/html&amp;gt;"&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodBase] Resorting to protocol version default close connection policy&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpMethodBase] Should NOT close connection, using HTTP/1.1&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.HttpConnection] Releasing connection back to connection manager.&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager] Freeing connection, hostConfig=HostConfiguration[host=&lt;/SPAN&gt;&lt;A href="https://server1" rel="nofollow noopener noreferrer"&gt;https://server1&lt;/A&gt;&lt;SPAN&gt;]&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.util.IdleConnectionHandler] Adding connection at: 1456360725848&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager] Notifying no-one, there are no waiting threads&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2016-02-24 18:38:45,848 ERROR [org.alfresco.solr.tracker.AbstractTracker] Model tracking failed&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;org.alfresco.error.AlfrescoRuntimeException: 01240000 GetModelsDiff return status is 401&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1091)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.solr.tracker.ModelTracker.trackModelsImpl(ModelTracker.java:249)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.solr.tracker.ModelTracker.trackModels(ModelTracker.java:207)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.solr.tracker.ModelTracker.ensureFirstModelSync(ModelTracker.java:229)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.solr.tracker.CoreWatcherJob.registerForCore(CoreWatcherJob.java:131)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.alfresco.solr.tracker.CoreWatcherJob.execute(CoreWatcherJob.java:74)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.quartz.core.JobRunShell.run(JobRunShell.java:216)&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 25 Feb 2016 00:55:16 GMT</pubDate>
    <dc:creator>darminm</dc:creator>
    <dc:date>2016-02-25T00:55:16Z</dc:date>
    <item>
      <title>SOLR not tracking after custom keystores generated</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286802#M239932</link>
      <description>Hello,I am running Alfresco 5.0.0 (d r99759-b2) community edition.Alfresco is installed with standard wizard.Once initial deployment finished, http in tomcat is set to disabled and verified alfresco and solr are running without issues as they should.Used generate_keystore.bat with changed to CN:set</description>
      <pubDate>Thu, 25 Feb 2016 00:55:16 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286802#M239932</guid>
      <dc:creator>darminm</dc:creator>
      <dc:date>2016-02-25T00:55:16Z</dc:date>
    </item>
    <item>
      <title>Re: SOLR not tracking after custom keystores generated</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286803#M239933</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi, are you using the same certificate in the Tomcat server configuration?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Peter&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sat, 05 Mar 2016 11:03:07 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286803#M239933</guid>
      <dc:creator />
      <dc:date>2016-03-05T11:03:07Z</dc:date>
    </item>
    <item>
      <title>Re: SOLR not tracking after custom keystores generated</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286804#M239934</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Did you fix this issue? Please share the solution.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 01 Mar 2018 05:49:20 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/solr-not-tracking-after-custom-keystores-generated/m-p/286804#M239934</guid>
      <dc:creator>rvedula</dc:creator>
      <dc:date>2018-03-01T05:49:20Z</dc:date>
    </item>
  </channel>
</rss>

