Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

RTC on WAS 7 but 'not authorized to access' setup

Hi

I've installed RTC 2.0.0.2 jazz.war into WAS 7 following the instructions detailed by the Information Center and TechTip 321. Authentication is via LDAP provided by OpenDS.

RTC seems to start successfully but when trying to access the jazz/setup page the team server reports the following error;
You are not authorized to access Jazz Team Server Setup

I do not get prompted to provide any login credentials.

The WAS app server SystemOut.log file contains the following error;
[1/15/10 10:43:07:216 EST] 00000019 webapp        E com.ibm.ws.webcontainer.webapp.WebApp logServletError SRVE0293E: [Servlet Error]-[equinoxbridgeservlet]: com.ibm.ws.webcontainer.webapp.WebAppErrorReport: CRJAZ1173I Service "com.ibm.team.repository.service.internal.discovery.IRootDiscoveryService" is not available.

at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.sendError(WebAppDispatcherContext.java:624)
at com.ibm.ws.webcontainer.srt.SRTServletResponse.sendError(SRTServletResponse.java:1071)
at com.ibm.team.repository.common.transport.ServerHttpUtil.sendError(ServerHttpUtil.java:1227)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleException(AbstractTeamServerServlet.java:1161)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest2(AbstractTeamServerServlet.java:1699)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest(AbstractTeamServerServlet.java:1623)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1536)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:75)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:121)
at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:54)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1443)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:790)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:443)
at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:175)
at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3610)
at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:274)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:926)
at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1557)
at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:173)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:455)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(HttpInboundLink.java:384)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:272)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1016)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.readyInboundPostHandshake(SSLConnectionLink.java:713)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.readyInbound(SSLConnectionLink.java:567)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.ready(SSLConnectionLink.java:291)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)
at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165)
at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:202)
at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:766)
at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:896)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1527)


The WAS app server jazz.log file contains the following error;
2010-01-15 10:42:56,138 [              WebContainer : 1]  INFO uration.OverridablePropertyFileServerConfiguration  - CRJAZ1363I Loading configuration from "file:///C:/RTC_WAS/server/conf/jazz/teamserver.properties".

2010-01-15 10:43:02,513 [ WebContainer : 1] INFO .repository.service.internal.rdb.ConnectionFactory - CRJAZ1365I Attempting Initial Database Connection Using
Db Name/Location: C:/RTC_WAS/server/repositoryDB
2010-01-15 10:43:05,638 [ WebContainer : 1] INFO .repository.service.internal.rdb.ConnectionFactory - CRJAZ1364I Initial database connection successful
Db Product Name: Apache Derby
Db Product Version: 10.3.3.1 - (677131)
Db URL: jdbc:derby:C:/RTC_WAS/server/repositoryDB
Jdbc Driver Name: Apache Derby Embedded JDBC Driver
Jdbc Driver Version: 10.3.3.1 - (677131)
2010-01-15 10:43:06,794 [ WebContainer : 1] INFO m.team.fulltext.service.internal.index.IndexConfig - CRJAZ8192I: Fulltext Index Location: C:\Program Files\IBM\WebSphere\AppServer\profiles\AppSrv01\workitemindex\fulltext_index
2010-01-15 10:43:06,810 [ WebContainer : 1] INFO m.team.fulltext.service.internal.index.IndexConfig - CRJAZ8190E: The fulltext index location property (indexLocation) should point to an absolute directory but is currently set to 'workitemindex'
2010-01-15 10:43:07,106 [ WebContainer : 1] WARN com.ibm.team.repository.servlet.TeamServerServlet - CRJAZ1181I Security notice during initialization: Allowing ADMIN user access. It is recommended that you disable the ADMIN user and create a real user with administrative rights.
2010-01-15 10:43:07,294 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,356 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,435 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,497 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,606 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,669 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved


Any ideas on what could be causing this?

Thanks,
Mark

0 votes



7 answers

Permanent link
Dear all,

I encountered the same error as marko. Does anyone know where the problem is and how to solve it?

Thank you.

David Lee

0 votes


Permanent link
Has anyone any thoughts on what could be causing this error?

0 votes


Permanent link


I do not get prompted to provide any login credentials.


Mark, does it redirect to https://127.0.0.1:9443/jazz/setup ?
If you do not get prompted , this means the application is not secure
In the security tab of WAS, make sure Admin + application are checked and java 2 is uncheck,

0 votes


Permanent link
Hello,
as per http://www-01.ibm.com/support/docview.wss?rs=3488&uid=swg27015746#IMS

openDS is not a supported LDAP env.
Hence, I would first try and set-up WAS (ensure 7.0.0.3 + latest WAS JRE)
with either WAS realm or supported LDAP (MS AD / TDS).

When you'll have a RTC server up and running then possibly switch to openDS LDAP.

But in any case:
- review WAS prereqs are met - if able upgrade to the latest level available (7.0.0.7):
FixPack: http://www-01.ibm.com/support/docview.wss?uid=swg24024587
1.6 SDK for 7.0.0.7: http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24024588

- cross-verify each setup step in the InfoCenter and in the article
http://jazz.net/library/techtip/321

Thanks.

0 votes


Permanent link

Hence, I would first try and set-up WAS (ensure 7.0.0.3 + latest WAS JRE)
with either WAS realm or supported LDAP (MS AD / TDS).

But in any case:
- review WAS prereqs are met - if able upgrade to the latest level available (7.0.0.7):
FixPack: http://www-01.ibm.com/support/docview.wss?uid=swg24024587
1.6 SDK for 7.0.0.7: http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24024588


I've just finished doing all of that -- 7.0.0.7, latest JDK, IBM internal bluegroups setup, following all steps to the letter, and I get this same CRJAZ1173I error in SystemOut.log with the corresponding 503 in jazz.log.

I'm able to properly authenticate to the WAS server and to the Jazz home page (though I'm not fully set up yet, so I hit the infinite redirect loop issue). However, going to the setup (/jazz/setup) wizard is pointless, because it can't load the settings for database providers etc.

Any ideas?

0 votes


Permanent link
So is the issue auth again or config ? :)
- one idea about the 503 though
did we disable the URI security as per the doc ?

Ensure that the WAS security setting "Use available authentication data when an unprotected URI is accessed" is checked.

0 votes


Permanent link
I got hit by this and it turns out that it is from the fact that I did not check the checkbox next to Enable application security under Application Security of Global Security of WAS.

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Jan 15 '10, 10:54 a.m.

Question was seen: 15,754 times

Last updated: Jan 15 '10, 10:54 a.m.

Confirmation Cancel Confirm