-
|
Multipass: Ubuntu 22.04: New installation. on this installation script I get this error This used to work every time.. This new behaviour. |
Beta Was this translation helpful? Give feedback.
Replies: 11 comments 18 replies
-
|
I did After jans installed, it looks like Proceed with these values [Y|n] Y root@localgluu-2012mp:/tmp# ufw status To Action From 60022/tcp ALLOW 127.0.0.1 |
Beta Was this translation helpful? Give feedback.
-
|
@manojs1978 can you try to replicate this? |
Beta Was this translation helpful? Give feedback.
-
|
checking |
Beta Was this translation helpful? Give feedback.
-
|
Yes. at least I have been able to. I'll try again to reconfirm and get back to you. Anything you want me to track when trying to isolate? Hers a screenshot of 
|
Beta Was this translation helpful? Give feedback.
-
|
Built another clean VM from scratch, and same result when install Jansen. |
Beta Was this translation helpful? Give feedback.
-
|
Here is the VM installation script (Multipass)
#set ufw
for ubuntu 22.04`
ip is fqdn IP on namecheap That's it. Repeatable and Isolated. Im running on a m1 Mac Studio Ultra |
Beta Was this translation helpful? Give feedback.
-
|
So I decided to use MySQL as the IDS server, vs OpenDJ. and it worked. So the issue is OpenDJ 
|
Beta Was this translation helpful? Give feedback.
-
|
Then on launching the TUI, I got this |
Beta Was this translation helpful? Give feedback.
-
|
services take some time to start |
Beta Was this translation helpful? Give feedback.
-
|
I just installed jans 1.0.21 on fresh ubuntu 22.04 vm with opendj DB, |
Beta Was this translation helpful? Give feedback.
-
|
Thank you for this... I'm assuming the version of OpenDJ remains consistent, so the version installed for you in the above process was the same for me in my process, irrespective of platform, as long as its Ubuntu 22.04. Under that assumption, my guess is that it's Multipass guest in MacOS, dealing with notorious Apple firewall issues, or just dependency issues between macOS and multipass. So with the above as ground truth, I'll install again on Digital Ocean,. The only change I have made. when installing on Multipass Ubuntu 22.04, is [apt upgrade], which I tend to avoid because it can throw off dependencies in our tech stack. I'll do that up front. I have seen, on Multipass, that run immediately after [apt update] it effects python3-crypto So the plan is, install and report on
|
Beta Was this translation helpful? Give feedback.
-
|
1 DONE: FAILED: MacOS Ventura/Multipasss/Ubuntu 22.04 on a m1 Mac Studio Ultra MacOS Ventura/Multipasss/Ubuntu 22.04 on a m1 Mac Studio Ultra
|
Beta Was this translation helpful? Give feedback.
-
|
i checked jans 1.0.20 with opendj on ubuntu22 also looks good BainMcKay i guess it is VM IP issue. |
Beta Was this translation helpful? Give feedback.
-
|
It was 20 minutes since I ran the test.
This is a really fast server (max-out m1 Mac Studio Ultra).
It feels like a dependency issue, or Apple Firewall getting in the way.
Also, it is an m1 (shared memory SOS) and Multipass can have issues, although all other servers are solid ( Wordpress, Moodle, Nextcloud, Superset, CKAN, Discourse).

… On Jan 11, 2024, at 7:21 AM, manoj suryawanshi ***@***.***> wrote:
sudo systemctl list-units --all "jans*"
|
Beta Was this translation helpful? Give feedback.
-
DigitalOcean/Ubuntu 22.04 |
Beta Was this translation helpful? Give feedback.
-
|
DIgital Ocean withs as long as you don;'t run
|
Beta Was this translation helpful? Give feedback.
-
Here we go again with line noise on the page. Seems strongly correlated to TUI (on DigitalOcean). Cannot interact with the page. Whenever I place my cursor over the console surface+, it starts sending these characters. No page access. Like it's protecting page access. When initially installed, this worked well. But I rebooted and now this/ 
|
Beta Was this translation helpful? Give feedback.
-
|
I shut down there terminal session and loaded another one. The noise went away. So it's the only that session that responses to mouse over |
Beta Was this translation helpful? Give feedback.
-
|
On mapping the Namecheap public SSL certificates, if I create a separate site adaptor that listens to 443 as well, but authenticates against the namecheap SSL, while leaving the Janssen site adaptor enabled, SSL Checker considers the site a self-signed certificate, which of course Janssen is. But I need it to recognize the namecheap ssl so I can gain site access with the browser, to validate the device. I['l try putting in same site-adaptor as Janssen and use a folder path to route it to /var/www/html/index.html. There has to be some mapping I am missing in Janssen. |
Beta Was this translation helpful? Give feedback.
-
|
I see that sometimes. Normally its a sign that my ssh connection has gone whipperjacky. |
Beta Was this translation helpful? Give feedback.
-
|
[whipperjacky] I’ll need to remember that one ;-)
It only happens where TUI is installed. And I think there may be a correlation to how I am mapping to the NameCheap SSL keys.
So I am going to delete the VM and install again. And do some actions as isometric turns which confirm the correlation.
I need to support all these combos. My plan is, by using combos as Markovian walkarounds, we can piece enough behaviour across axis that an engineer will recognize the pattern to isolate the origin.
… On Jan 11, 2024, at 1:11 PM, Michael Schwartz ***@***.***> wrote:
I see that sometimes. Normally its a sign that my ssh connection has gone whipperjacky.
—
Reply to this email directly, view it on GitHub <#7317 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AARINNJ36LETIMBC3AX3V3DYOBBNTAVCNFSM6AAAAABBUL64ZSVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DCMBQGQYDC>.
You are receiving this because you authored the thread.
|
Beta Was this translation helpful? Give feedback.
-
|
Still on Digital Ocean, No errors in logs. Still; no validation. In TUI, I load the openID client screen, and get the validation request button. I go to the browser, enter the url. the Namecheap cert is working, but It dies not raise the validation login screen. It seems it can't find the routing path 
|
Beta Was this translation helpful? Give feedback.
-
|
I am up on Digital Ocean. Not sure why it took so long. I left the server for a few hours. One possibilities is DNS propagation, although DNs propagation said it was good. and NSLookups and ping looked good. Will need to repeat it a few times to better understand the timings and why. including create new Subdomain names so I better understand that timing. At any rate, this should be repeatable. I'll install 5 different Janssen servers on digital ocean to make sure I have the subtleties down. Certainly, each platform has different order of events so that dependencies are just right for its all to come together (ref: DigiralOcean vs Muiltipass on MacOS). I'll provide a set of procedures and timings so it becomes a pattern to follow |
Beta Was this translation helpful? Give feedback.
-
|
I am stuck on redirect comparison, which was there I got stuck the first time around. The uri redirects match perfectly when compared manually ERROR JANS-AUTH |
Beta Was this translation helpful? Give feedback.
-
|
I am thinking this could relate back to the Nameheap subdomain SSL cert that I mapped the site adapter to, vs the cert that was configured for Jassen on initial setup. Here are the relevant parts of the site adaptor mapping
Is this the correct to way to map it? If not that, why the http 400 error that causes jetty to spew out hard exception errors? |
Beta Was this translation helpful? Give feedback.
-
|
I can say, with certainty, that when IP mapping fails, it causes TUI to spew noise characters into the console ui. If I ^C, and abort the process, I will have noise characters from then on. If I hit ENTER, I am back in TUI but with ability to navigate it. But when I try to enter a command, I get what looks like aborted to the console, but now I see is the error UI, and ENTER will place you back in TUI. And I think the failure issue could be around mapping to namecheap DNS IP from the A record, which routes, in this case, the call to DIgitalocean, vs Namecheap hosting site. I edit /etc/hosts to set the domain name to the IP address. This provides a cross-mapping required. But I noticed, this time, when I waited until last minute to do that entry, that it had already added it. I think (to be verified) that this is where the config starts to clash, in the IAAS procedures I have, with the installation of Janssen for external public domain 
|
Beta Was this translation helpful? Give feedback.
-
|
It appears python3-crypto has been removed from 22.04 release https://launchpad.net/ubuntu/jammy/+source/python-crypto There is no installation candidate. Will need to hunt around for one. That explains why it was not installing. |
Beta Was this translation helpful? Give feedback.
-
|
I just ran other install combo [ubuntu 20.04, OpenDJ, Letsencrypt] This time I used Letsencryot to map to domain, And I used Ubuntu 20.04 which still had python3-crypto in the package. It all went smoothly, with openDJ, until I couldn't validate the site. Jans-auth.log shows an error on cleanup. JANS-AUth.LOG |
Beta Was this translation helpful? Give feedback.
-
|
Problem solved OpenDJ no longer matters. It's effectively not supported. Use MySQL |
Beta Was this translation helpful? Give feedback.
Problem solved
OpenDJ no longer matters. It's effectively not supported.
Use MySQL