topic Re: ALfresco share unable to login-container env in Alfresco Forum

ALfresco share unable to login-container env

amalchinnah — Mon, 21 Dec 2020 15:58:43 GMT

Hi team,

Im trying to setup alfesco community 7.0 in openshift environment. When I try to login alfresco share, im getting

"Your authentication details haven't been recognized or Alfresco Content Services may not be available at this time." in login page. then I troubleshooting logs I found below error.

"Unable to retrieve License information from Alfresco: 404"

Could you please advise right solution?

Re: ALfresco share unable to login-container env

abhinavmishra14 — Mon, 21 Dec 2020 18:07:40 GMT

Can you provide following details?

1- How did you setup your environment? Docker + docker-compose or used distribution for setup

2- Can you share the steps you followed? share the docker-compose.yml if used

3- Logs

4- Output of "docker stats" and "docker ps -a" commands if using docker

5- How much memory you have allocated? at least 8-12 gb memory is needed.

Check these threads, it may be helpful: https://hub.alfresco.com/t5/alfresco-content-services-forum/share-login-problem-while-installing-alfresco-6-1/m-p/114368#M6448

https://hub.alfresco.com/t5/alfresco-content-services-forum/alfresco-community-6-2-0-ga-installation-issue/m-p/303663#M22374

https://hub.alfresco.com/t5/alfresco-content-services-forum/docker-solr-not-getting-deployed-unknownhosterror/m-p/302935#M21891

Re: ALfresco share unable to login-container env

Kongusuresh — Tue, 22 Dec 2020 08:28:03 GMT

Hi Abhinav,

Thanks for getting back, we have hosted the ECM in openshift environment. we have converted the docker-compose fill into kubernets deployment config and hosted it.

Please find information about the setup.

The pods are running behind the ELB and we are not using any proxy server, our elb acts as proxy.
The exposed the routes the ELB
We are able to access the both alfresco and share admin console
Find the alfresco container env variables name

: JAVA_OPTS
value: >-
-Dgoogledocs.enabled=false -Ddb.driver=org.postgresql.Driver
-Ddb.username=alfresco -Ddb.password=alfresco
-Ddb.url=jdbcostgresql://postgresql:5432/alfresco
-Dsolr.host=solr6
-Dsolr.port=8983 -Dsolr.secureComms=none
-Dsolr.base.url=/solr/#/ -Dindex.subsystem.name=solr6
-Dshare.port=8080
-Dshare.host=share
-Dalfresco.host=localhost -Dalfresco.port=8080
-Daos.baseUrlOverwrite=https://alfresco:8080/alfresco/aos
-Ddeployment.method=DOCKER_COMPOSE
-DlocalTransform.core-aio.url=http://transform-core-aio:8090/
-Dmessaging.broker.url="failovernio://activemq:61616)?timeout=3000&jms.useCompression=true"
-Dalfresco-pdf-renderer.url=http://transform-core-aio:8090/
-Djodconverter.url=http://transform-core-aio.:8090/
-Dimg.url=http://transform-core-aio:8090/
-Dtika.url=http://transform-core-aio.:8090/
-Dtransform.misc.url=http://transform-core-aio.:8090/
-Dcsrf.filter.enabled=false -XX:MinRAMPercentage=50
-XX:MaxRAMPercentage=80 -Dlocal.transform.service.enabled=true
- name: JAVA_TOOL_OPTIONS
value: >-
-Dencryption.keystore.type=JCEKS
-Dencryption.cipherAlgorithm=DESede/CBC/PKCS5Padding
-Dencryption.keyAlgorithm=DESede
-Dencryption.keystore.location=/usr/local/tomcat/shared/classes/alfresco/extension/keystore/keystore
-Dmetadata-keystore.password=mp6yc0UD9e
-Dmetadata-keystore.aliases=metadata
-Dmetadata-keystore.metadata.password=oKIWzVdEdA
-Dmetadata-keystore.metadata.algorithm=DESede

Please find the share env

- name: JAVA_OPTS

value: >-

-XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80

-Dalfresco.host=http://alfresco:8080

-Dalfresco.context=alfresco

- name: REPO_HOST

value: alfresco

- name: REPO_PORT

value: '8080'

We are disabled to CSRFPolicy also.
We are getting following error while accessing the share console.

Your authentication details haven't been recognized or Alfresco Content Services may not be available at this time.

Re: ALfresco share unable to login-container env

abhinavmishra14 — Tue, 22 Dec 2020 15:16:28 GMT

Still can't say what could have been wrong, but acs seems to be unstable or not running that's when you get the license error.

Can you check what you see in the logs? How much memory is allocated in gb?

Things that i noticed:

-Dsolr.host=solr6.alfresco-uat-axa-sg.svc.cluster.local

-Dshare.host=share

-Dalfresco.host=localhost

it seems alfresco.host you have set "localhost", it should be container name or host name. Could be one the reasons share is not able to connect to alfresco and unable to retrieve the license.

Also i think this param is wrong:

-Dalfresco.host=http://alfresco:8080

it should be :

-Dalfresco.host=alfresco

-Dalfresco.port=8080

I would recommend to refer to this project: https://github.com/Alfresco/acs-deployment/tree/master/helm/alfresco-content-services

Re: ALfresco share unable to login-container env

Kongusuresh — Thu, 24 Dec 2020 01:51:06 GMT

Thanks for the reply, I have made the all the necessary changes.

We have facing this problem both in community and entriprise trail.

Without the disabling CSRF, we arr getting the fillowing error.

Possible CSRF attack noted when asserting"

2020-12-23 09:41:04,617 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-2] Successfully retrieved license information from Alfresco.
2020-12-23 09:41:25,583 INFO [webscripts.servlet.CSRFFilter] [http-nio-8080-exec-7] Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin
2020-12-23 09:41:27,516 ERROR [alfresco.web.site] [http-nio-8080-exec-7] javax.servlet.ServletException: Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin, FAILED TEST: Assert referer POST /share/page/dologin :: referer: 'https://*/share/page/' vs server & context: http://*/ (string) or (regexp)

When we disable CSRF we getting following error.

2020-12-23 10:08:02,838 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-5] Unable to retrieve License information from Alfresco: 404

Console message

Your authentication details haven't been recognized or Alfresco Content Services may not be available at this time.

Re: ALfresco share unable to login-container env

Kongusuresh — Thu, 24 Dec 2020 02:31:52 GMT

When we are not disabling CSRF we are getting the following error.

Possible CSRF attack noted when asserting"

2020-12-23 09:41:04,617 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-2] Successfully retrieved license information from Alfresco.
2020-12-23 09:41:25,583 INFO [webscripts.servlet.CSRFFilter] [http-nio-8080-exec-7] Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin
2020-12-23 09:41:27,516 ERROR [alfresco.web.site] [http-nio-8080-exec-7] javax.servlet.ServletException: Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin, FAILED TEST: Assert referer POST /share/page/dologin :: referer: 'https://*/share/page/' vs server & context: http://*/ (string) or (regexp)

However when we are disabling CSRF we are getting following error.

2020-12-23 10:08:02,838 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-5] Unable to retrieve License information from Alfresco: 404

Re: ALfresco share unable to login-container env

kaynezhang — Thu, 24 Dec 2020 04:25:18 GMT

It seems your acs didn't startup successfully ,can you visit http://ip:8080/alfersco?

Re: ALfresco share unable to login-container env

Kongusuresh — Thu, 24 Dec 2020 05:11:57 GMT

yes I can able to access the acs

Re: ALfresco share unable to login-container env

kaynezhang — Fri, 25 Dec 2020 00:13:01 GMT

Have you tried a GA edtion for example 6.2,alfesco community 7 have not released yet ,maybe it is a bug of edtion 7. We are now using 6.2, we didn't encounter this problem.