OKM-009006

[surajaya]

Hello,

I''m currently evaluating OpenKM (version 4.1, sun-java6, on ubuntu lucid lynx), and found this error "OKM-009006 (GetAllGroups) : repository internal error, Connection refused". It occur in every occasion when I click property group button (in the administration tab). Any clue on how to solve this problem ?. I didn't change anything on the PropertyGroups.cnd and PropertyGroups.xml.

Thanks in advance for your help

[surajaya]

Additional info :
- I've made many changes to the configuration files, but I made no changes in those 2 file : PropertyGroups.cnd and PropertyGroups.xml
- The configuration change that I've made is two thing : database (in my case : mysql5. I just follow the steps in the wiki document), and LDAP authentication.
- I suspect that LDAP config is the main cause.

I'm trying to follow the LDAP config from the wiki (http://wiki.openkm.com/index.php/Active_Directory), but this problem persist.
Any clue on what should I do ? Is there any additional step to use LDAP (instead of Active Directory, windows Active Directory ?) ?

[jllort]

Configuring ldap is not trivial, depends how you've configured your users in windows.

Do you see users and roles in security tab?

[surajaya]

Configuring ldap is not trivial, depends how you've configured your users in windows.

Do you see users and roles in security tab?

You mean logged user ?. There are no security tab in my installation : Desktop, search, DashBoard, and Administration. No security tab, and also no security button. I've tried to clik all button in the Administration tab and only the Property Group button resulting in error "Connection Refused"

[surajaya]

Configuring ldap is not trivial, depends how you've configured your users in windows.

Do you see users and roles in security tab?

Just found that security tab is not in the Administration tab, but in each document
No, I don't see users other than the one that's being used to logged in (in my case, okmAdmin). I do see users tab and also Groups tab (not roles) but they both empty. I'm sure there are many users in the LDAP (thousands), but none shown in the security tab. The strange thing is, I can logged in with other user from the LDAP. What's wrong with my configuration ?. I have followed the step in the wiki (http://wiki.openkm.com/index.php/Active_Directory) : modify OpenKM.cfg file and also modify login-config.xml described there.

[jllort]

You've got well configured login-config.xml because can autenthicate users.

Buy if you've not sees user and roles, then means that OpenKM.cfg properties are not well configured, you've got the error there. Remember each OpenKM.cfg change need restarting jboss.

[surajaya]

You've got well configured login-config.xml because can autenthicate users.

Buy if you've not sees user and roles, then means that OpenKM.cfg properties are not well configured, you've got the error there. Remember each OpenKM.cfg change need restarting jboss.

Any simple step to verify this config ?. I'm using OpenLDAP (not windows Active Directory). I've followed the wiki documentation (wiki (http://wiki.openkm.com/index.php/Active_Directory) and have entries like this in the OpenKM.cfg :

Code: Select all

principal.adapter=
principal.ldap.server=
principal.ldap.security.principal=
principal.ldap.security.credentials=
principal.ldap.user.search.base=
principal.ldap.user.search.filter=
principal.ldap.user.atribute=
principal.ldap.role.search.base=
principal.ldap.role.search.filter=
principal.ldap.role.atribute=
principal.ldap.mail.search.base=
principal.ldap.mail.search.filter=
principal.ldap.mail.atribute=

[jllort]

Take a look at server.log if you see any error when openkm is trying to get users and roles, sure appears !

[surajaya]

Take a look at server.log if you see any error when openkm is trying to get users and roles, sure appears !

You've got well configured login-config.xml because can autenthicate users.

Buy if you've not sees user and roles, then means that OpenKM.cfg properties are not well configured, you've got the error there. Remember each OpenKM.cfg change need restarting jboss.

I've verified my config and am sure that the config is well configured. Using the same config + original OpenKM.war file that come with version 4.1, the users show up in the list. Using the same config + build from source OpenKM.war, the users is not show up in the list. But the error OKM-009006 persist no matter which version of OpenKM.war that were used.

[surajaya]

From the log, it seem that openkm trying to access www.openkm.org. Setting the "www.openkm.org" in the /etc/hosts to 127.0.0.1 resulting in "Connection refused". Leaving the hosts setting as is resulted in "Uknown host exception". Here is the log :

Code: Select all

2010-08-25 13:05:01,512 ERROR [es.git.openkm.frontend.server.OKMPropertyGroupServlet] www.openkm.com
java.net.UnknownHostException: www.openkm.com
	at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:177)
	at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
	at java.net.Socket.connect(Socket.java:529)
	at java.net.Socket.connect(Socket.java:478)
	at sun.net.NetworkClient.doConnect(NetworkClient.java:163)
	at sun.net.www.http.HttpClient.openServer(HttpClient.java:394)
	at sun.net.www.http.HttpClient.openServer(HttpClient.java:529)
	at sun.net.www.http.HttpClient.<init>(HttpClient.java:233)
	at sun.net.www.http.HttpClient.New(HttpClient.java:306)
	at sun.net.www.http.HttpClient.New(HttpClient.java:323)
	at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:860)
	at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:801)
	at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:726)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1049)
	at org.apache.xerces.impl.XMLEntityManager.setupCurrentEntity(Unknown Source)
	at org.apache.xerces.impl.XMLEntityManager.startEntity(Unknown Source)
	at org.apache.xerces.impl.XMLEntityManager.startDTDEntity(Unknown Source)
	at org.apache.xerces.impl.XMLDTDScannerImpl.setInputSource(Unknown Source)
	at org.apache.xerces.impl.XMLDocumentScannerImpl$DTDDispatcher.dispatch(Unknown Source)
	at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
	at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
	at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
	at org.apache.xerces.parsers.XMLParser.parse(Unknown Source)
	at org.apache.xerces.parsers.DOMParser.parse(Unknown Source)
	at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(Unknown Source)
	at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:124)
	at es.git.openkm.util.FormUtils.parsePropertyGroupsForms(FormUtils.java:116)
	at es.git.openkm.module.direct.DirectPropertyGroupModule.getGroups(DirectPropertyGroupModule.java:147)
	at es.git.openkm.api.OKMPropertyGroup.getGroups(OKMPropertyGroup.java:81)
	at es.git.openkm.frontend.server.OKMPropertyGroupServlet.getGroups(OKMPropertyGroupServlet.java:185)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at com.google.gwt.user.server.rpc.RPC.invokeAndEncodeResponse(RPC.java:527)
	at com.google.gwt.user.server.rpc.RemoteServiceServlet.processCall(RemoteServiceServlet.java:164)
	at com.google.gwt.user.server.rpc.RemoteServiceServlet.doPost(RemoteServiceServlet.java:86)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
	at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:432)
	at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
	at java.lang.Thread.run(Thread.java:619)

[jllort]

Do you've got internet connection in this server ?

[surajaya]

Do you've got internet connection in this server ?

Yes, but behind proxy

[surajaya]

Take a look at server.log if you see any error when openkm is trying to get users and roles, sure appears !

You've got well configured login-config.xml because can autenthicate users.

Buy if you've not sees user and roles, then means that OpenKM.cfg properties are not well configured, you've got the error there. Remember each OpenKM.cfg change need restarting jboss.

I've verified my config and am sure that the config is well configured. Using the same config + original OpenKM.war file that come with version 4.1, the users show up in the list. Using the same config + build from source OpenKM.war, the users is not show up in the list. But the error OKM-009006 persist no matter which version of OpenKM.war that were used.

Update :
- The user issue now solved, the users (and also the groups) can show up in the list. An error in the config, mistype attribute to atribute
- I haven't solved error OKM-009006

[jllort]

The connection to http://www.openkm.com or http://www.openkm.org is used by openkm to get from our server "news information", nothing else. When there're some news appears new icon on left bottom.

When you got error 009006 in server.log must appear something more, error 009 is caused on property group servlet and 006 cause is "general", please take a look other time to your server.log when error happens.

Have you modified source code or make other type of changed in configuration ?

[surajaya]

The connection to http://www.openkm.com or http://www.openkm.org is used by openkm to get from our server "news information", nothing else. When there're some news appears new icon on left bottom.

When you got error 009006 in server.log must appear something more, error 009 is caused on property group servlet and 006 cause is "general", please take a look other time to your server.log when error happens.

The error log is as I posted in the above post. Is there any way to produce more detailed log ?
The only noticeable indicator is the "Add property group" and "Remove property group" button is not active (show up, but not active / disabled).

Have you modified source code or make other type of changed in configuration ?

No. What I meant with mistype is typing error in the configuration (it should be "principal.ldap.user.attribute" with double t, but written as "principal.ldap.user.atribute").

I just edit the pom.xml to compile OpenKM with different version of library (example : compile against jodconverter 2.2.2 resulted in preview problem, compiling against 2.2.1 the preview works fine).