Iptables causes Alfresco not to start up

[tfrasch]

Hey,

I have a problem with Alfresco Community 2.9B Tomcat Bundle on Debian. I get following the error:

23:19:09,503 User:System WARN  [remoting.rmi.RmiServiceExporter] Could not detect RMI registry - creating new one23:19:09,509 User:System INFO  [quartz.core.QuartzScheduler] Scheduler DefaultScheduler_$_NON_CLUSTERED shutting down.23:19:09,509 User:System INFO  [quartz.core.QuartzScheduler] Scheduler DefaultScheduler_$_NON_CLUSTERED paused.23:19:09,509 User:System INFO  [quartz.simpl.SimpleThreadPool] There are still 15 worker threads active. See javadoc runInThread(Runnable) for a possible explanation23:19:09,509 User:System DEBUG [quartz.simpl.SimpleThreadPool] shutdown complete23:19:09,509 User:System INFO  [quartz.core.QuartzScheduler] Scheduler DefaultScheduler_$_NON_CLUSTERED shutdown complete.23:19:09,517 User:System DEBUG [ehcache.store.MemoryStore] org.alfresco.cache.ticketsCache is persistent. Spooling 0 elements to the disk store.23:19:09,518  DEBUG [ehcache.store.DiskStore] Spool Thread interrupted.23:19:09,525 User:System DEBUG [ehcache.store.DiskStore] Deleting file org.alfresco.cache.ticketsCache.data23:19:09,528 User:System ERROR [web.context.ContextLoader] Context initialization failedorg.springframework.beans.factory.BeanCreationException: Error creating bean with name 'org.springframework.remoting.rmi.RmiServiceExporter' defined in class path resource [alfresco/emailserver/email-service-context.xml]: Invocation of init method failed; nested exception is java.rmi.server.ExportException: internal error: ObjID already in useCaused by: java.rmi.server.ExportException: internal error: ObjID already in use        at sun.rmi.transport.ObjectTable.putTarget(Unknown Source)        at sun.rmi.transport.Transport.exportObject(Unknown Source)        at sun.rmi.transport.tcp.TCPTransport.exportObject(Unknown Source)        at sun.rmi.transport.tcp.TCPEndpoint.exportObject(Unknown Source)        at sun.rmi.transport.LiveRef.exportObject(Unknown Source)        at sun.rmi.server.UnicastServerRef.exportObject(Unknown Source)        at sun.rmi.registry.RegistryImpl.setup(Unknown Source)        at sun.rmi.registry.RegistryImpl.<init>(Unknown Source)        at java.rmi.registry.LocateRegistry.createRegistry(Unknown Source)        at org.springframework.remoting.rmi.RmiServiceExporter.getRegistry(RmiServiceExporter.java:349)        at org.springframework.remoting.rmi.RmiServiceExporter.getRegistry(RmiServiceExporter.java:325)        at org.springframework.remoting.rmi.RmiServiceExporter.getRegistry(RmiServiceExporter.java:290)        at org.springframework.remoting.rmi.RmiServiceExporter.prepare(RmiServiceExporter.java:233)        at org.springframework.remoting.rmi.RmiServiceExporter.afterPropertiesSet(RmiServiceExporter.java:197)        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1118)        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1085)        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:429)        at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:250)        at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:141)        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:247)        at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:161)        at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:273)        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:346)        at org.springframework.web.context.support.AbstractRefreshableWebApplicationContext.refresh(AbstractRefreshableWebApplicationContext.java:156)        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:246)        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:184)        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3764)        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4216)        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:760)        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:740)        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:544)        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:825)        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:714)        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:490)        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1138)        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:120)        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1022)        at org.apache.catalina.core.StandardHost.start(StandardHost.java:736)        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1014)        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)        at org.apache.catalina.core.StandardService.start(StandardService.java:448)        at org.apache.catalina.core.StandardServer.start(StandardServer.java:700)        at org.apache.catalina.startup.Catalina.start(Catalina.java:552)        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)        at java.lang.reflect.Method.invoke(Unknown Source)        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:295)        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:433)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

My configuration is as follows:

Network (IPs were made anonymous):

iface eth0 inet static     address 192.168.0.1     netmask 255.255.255.255     broadcast 192.168.201.223     gateway 192.168.201.193     pointopoint 192.168.201.193     # * subnet IPs     up ip addr add 10.0.0.137/29 dev eth0     up ip addr add 10.0.0.138/29 dev eth0     up ip addr add 10.0.0.139/29 dev eth0     up ip addr add 10.0.0.140/29 dev eth0     up ip addr add 10.0.0.141/29 dev eth0     up ip addr add 10.0.0.142/29 dev eth0‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

/etc/hosts

127.0.0.1     localhost.localdomain   localhost192.168.0.1   sirius.domain.de        sirius10.0.0.142    alfresco.domain.de      alfresco‍‍‍‍

The hostname is "sirius". Services like bind, proftpd, apache, mysql & mail are all bound to the Main IP 192.168.0.1.

Alfresco is configured to run on IP 10.0.0.142:
tomcat/conf/server.xml

[…]<Connector port="8080" address="10.0.0.142" URIEncoding="UTF-8" maxHttpHeaderSize="8192"[…]‍‍‍

Alfresco is started using jre1.6.0_03 with

JAVA_OPTS='-Xms128m -Xmx512m -server -Djava.rmi.server.hostname=alfresco.domain.de'‍

I followed the Debian installation guide on wiki.alfresco.com

[tfrasch]

I tracked down that error to my firewall. If I shut down iptables everything works. But with iptables running, no chance.

This is my configuration:

Chain INPUT (policy DROP)target     prot opt source               destinationACCEPT     0    –  127.0.0.1            127.0.0.1DROP       0    -f  0.0.0.0/0            0.0.0.0/0tcpfilter  tcp  –  0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x04 limit: avg 10/sec burst 5icmpfilter icmp –  0.0.0.0/0            0.0.0.0/0udpfilter  udp  –  0.0.0.0/0            0.0.0.0/0tcpfilter  tcp  –  0.0.0.0/0            0.0.0.0/0Chain FORWARD (policy DROP)target     prot opt source               destinationicmpfilter icmp –  0.0.0.0/0            0.0.0.0/0udpfilter  udp  –  0.0.0.0/0            0.0.0.0/0Chain OUTPUT (policy DROP)target     prot opt source               destinationACCEPT     0    –  127.0.0.1            127.0.0.1icmpfilter icmp –  0.0.0.0/0            0.0.0.0/0udpfilter  udp  –  0.0.0.0/0            0.0.0.0/0ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           state NEW,ESTABLISHEDACCEPT     0    –  0.0.0.0/0            0.0.0.0/0Chain icmpfilter (3 references)target     prot opt source               destinationACCEPT     0    –  0.0.0.0/0            0.0.0.0/0Chain tcpfilter (2 references)target     prot opt source               destinationACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:20ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:21           tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:22 state NEW recent: SET name: DEFAULT side: sourceDROP       tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:22 state NEW recent: UPDATE seconds: 600 hit_count: 4 name: DEFAULT side: sourceACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:22ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:53ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:80ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:443ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:25ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:587ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:110ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:995ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:143ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:8080ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:50500ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:135ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:139ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:445ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:1137ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:1139ACCEPT     tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:1145DROP       tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:1433DROP       tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:2967DROP       tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:2968DROP       tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:5900DROP       tcp  –  0.0.0.0/0            0.0.0.0/0           tcp dpt:10000ACCEPT     0    –  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHEDACCEPT     0    –  0.0.0.0/0            0.0.0.0/0           state NEWDROP       0    –  0.0.0.0/0            0.0.0.0/0Chain udpfilter (3 references)target     prot opt source               destinationACCEPT     udp  –  0.0.0.0/0            0.0.0.0/0           udp dpt:53ACCEPT     udp  –  0.0.0.0/0            0.0.0.0/0           udp dpt:137ACCEPT     udp  –  0.0.0.0/0            0.0.0.0/0           udp dpt:138ACCEPT     udp  –  0.0.0.0/0            0.0.0.0/0           udp dpt:1138ACCEPT     udp  –  0.0.0.0/0            0.0.0.0/0           udp dpt:50500ACCEPT     0    –  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHEDACCEPT     0    –  0.0.0.0/0            0.0.0.0/0           state NEWDROP       0    –  0.0.0.0/0            0.0.0.0/0‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I configured the RMI service to run on port 50500. I put this into "tomcat/shared/classes/alfresco/extension/custom-remote-services-context.xml"

<beans>        <bean id="avmRemoteService" class="org.springframework.remoting.rmi.RmiServiceExporter">          <property name="service">                  <ref bean="avmRemoteTransport"/>        </property>          <property name="serviceInterface">                  <value>org.alfresco.service.cmr.remote.AVMRemoteTransport</value>        </property>          <property name="serviceName">                  <value>avm</value>        </property>          <property name="registryPort">                <value>${alfresco.rmi.services.port}</value>          </property>          <property name="servicePort">                <value>50500</value>          </property>  </bean></beans>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Any suggestions?

[msporled]

Have you made any progress on this?  I'm tracking down issues with alfresco and ports and found that it opens a lot of stuff, mostly hard-wired to listen on localhost or all interfaces.  There doesn't seem to be an easy way to change either of these settings.

You will also find parts of alfresco that open a few random ports on startup, so good luck.

[greendevil]

I was getting the exact same (port 50500 in use) error when trying to install the labs 3a war file into an existing tomcat 5.5 instance that contained Liferay 5.1. I found that the avm service was also listening on the same port. If I did a full install of the labs 3a, there was no problem.

i.e.  <bean id="avmSyncServiceTransport" class="org.springframework.remoting.rmi.RmiProxyFactoryBean">
        <property name="serviceUrl">
            <value>rmi://localhost:50500/avmsync</value>
        </property>

I changed the rmi entry in alfresco-shared.properties to 40500 and the issue went away. At least it now runs.

[syslack]

I don't know if it's a good solution, but it worked for me:

iptables -A INPUT -s 127.0.0.1 -j ACCEPT