It's all about the answers!

Ask a question

RTC on WAS 7 but 'not authorized to access' setup


Mark Prout (13411510) | asked Jan 15 '10, 10:54 a.m.
Hi

I've installed RTC 2.0.0.2 jazz.war into WAS 7 following the instructions detailed by the Information Center and TechTip 321. Authentication is via LDAP provided by OpenDS.

RTC seems to start successfully but when trying to access the jazz/setup page the team server reports the following error;
You are not authorized to access Jazz Team Server Setup

I do not get prompted to provide any login credentials.

The WAS app server SystemOut.log file contains the following error;
[1/15/10 10:43:07:216 EST] 00000019 webapp        E com.ibm.ws.webcontainer.webapp.WebApp logServletError SRVE0293E: [Servlet Error]-[equinoxbridgeservlet]: com.ibm.ws.webcontainer.webapp.WebAppErrorReport: CRJAZ1173I Service "com.ibm.team.repository.service.internal.discovery.IRootDiscoveryService" is not available.

at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.sendError(WebAppDispatcherContext.java:624)
at com.ibm.ws.webcontainer.srt.SRTServletResponse.sendError(SRTServletResponse.java:1071)
at com.ibm.team.repository.common.transport.ServerHttpUtil.sendError(ServerHttpUtil.java:1227)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleException(AbstractTeamServerServlet.java:1161)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest2(AbstractTeamServerServlet.java:1699)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.handleRequest(AbstractTeamServerServlet.java:1623)
at com.ibm.team.repository.servlet.AbstractTeamServerServlet.service(AbstractTeamServerServlet.java:1536)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
at org.eclipse.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)
at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:75)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
at org.eclipse.equinox.servletbridge.BridgeServlet.service(BridgeServlet.java:121)
at com.ibm.team.repository.server.servletbridge.JazzServlet.service(JazzServlet.java:54)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1443)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:790)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:443)
at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:175)
at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3610)
at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:274)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:926)
at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1557)
at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:173)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:455)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(HttpInboundLink.java:384)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:272)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1016)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.readyInboundPostHandshake(SSLConnectionLink.java:713)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.readyInbound(SSLConnectionLink.java:567)
at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.ready(SSLConnectionLink.java:291)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)
at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165)
at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:202)
at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:766)
at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:896)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1527)


The WAS app server jazz.log file contains the following error;
2010-01-15 10:42:56,138 [              WebContainer : 1]  INFO uration.OverridablePropertyFileServerConfiguration  - CRJAZ1363I Loading configuration from "file:///C:/RTC_WAS/server/conf/jazz/teamserver.properties".

2010-01-15 10:43:02,513 [ WebContainer : 1] INFO .repository.service.internal.rdb.ConnectionFactory - CRJAZ1365I Attempting Initial Database Connection Using
Db Name/Location: C:/RTC_WAS/server/repositoryDB
2010-01-15 10:43:05,638 [ WebContainer : 1] INFO .repository.service.internal.rdb.ConnectionFactory - CRJAZ1364I Initial database connection successful
Db Product Name: Apache Derby
Db Product Version: 10.3.3.1 - (677131)
Db URL: jdbc:derby:C:/RTC_WAS/server/repositoryDB
Jdbc Driver Name: Apache Derby Embedded JDBC Driver
Jdbc Driver Version: 10.3.3.1 - (677131)
2010-01-15 10:43:06,794 [ WebContainer : 1] INFO m.team.fulltext.service.internal.index.IndexConfig - CRJAZ8192I: Fulltext Index Location: C:\Program Files\IBM\WebSphere\AppServer\profiles\AppSrv01\workitemindex\fulltext_index
2010-01-15 10:43:06,810 [ WebContainer : 1] INFO m.team.fulltext.service.internal.index.IndexConfig - CRJAZ8190E: The fulltext index location property (indexLocation) should point to an absolute directory but is currently set to 'workitemindex'
2010-01-15 10:43:07,106 [ WebContainer : 1] WARN com.ibm.team.repository.servlet.TeamServerServlet - CRJAZ1181I Security notice during initialization: Allowing ADMIN user access. It is recommended that you disable the ADMIN user and create a real user with administrative rights.
2010-01-15 10:43:07,294 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,356 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,435 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,497 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,606 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved
2010-01-15 10:43:07,669 [ WebContainer : 0] ERROR .ibm.team.jfs.app.discovery.utils.RootServicesUtil - While fetching the root services document from "https://127.0.0.1:9443/jazz/rootservices" a "503" HTTP status code was recieved


Any ideas on what could be causing this?

Thanks,
Mark

7 answers



permanent link
Chih-Shao Lee (111) | answered Jan 19 '10, 11:02 a.m.
Dear all,

I encountered the same error as marko. Does anyone know where the problem is and how to solve it?

Thank you.

David Lee

permanent link
Mark Prout (13411510) | answered Jan 20 '10, 1:00 p.m.
Has anyone any thoughts on what could be causing this error?

permanent link
Christophe Elek (2.9k13021) | answered Jan 28 '10, 4:56 p.m.
JAZZ DEVELOPER


I do not get prompted to provide any login credentials.


Mark, does it redirect to https://127.0.0.1:9443/jazz/setup ?
If you do not get prompted , this means the application is not secure
In the security tab of WAS, make sure Admin + application are checked and java 2 is uncheck,

permanent link
Eric Jodet (6.3k5111120) | answered Jan 29 '10, 12:28 a.m.
JAZZ DEVELOPER
Hello,
as per http://www-01.ibm.com/support/docview.wss?rs=3488&uid=swg27015746#IMS

openDS is not a supported LDAP env.
Hence, I would first try and set-up WAS (ensure 7.0.0.3 + latest WAS JRE)
with either WAS realm or supported LDAP (MS AD / TDS).

When you'll have a RTC server up and running then possibly switch to openDS LDAP.

But in any case:
- review WAS prereqs are met - if able upgrade to the latest level available (7.0.0.7):
FixPack: http://www-01.ibm.com/support/docview.wss?uid=swg24024587
1.6 SDK for 7.0.0.7: http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24024588

- cross-verify each setup step in the InfoCenter and in the article
http://jazz.net/library/techtip/321

Thanks.

permanent link
Sterling Bates (2311612) | answered Feb 10 '10, 8:38 p.m.

Hence, I would first try and set-up WAS (ensure 7.0.0.3 + latest WAS JRE)
with either WAS realm or supported LDAP (MS AD / TDS).

But in any case:
- review WAS prereqs are met - if able upgrade to the latest level available (7.0.0.7):
FixPack: http://www-01.ibm.com/support/docview.wss?uid=swg24024587
1.6 SDK for 7.0.0.7: http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24024588


I've just finished doing all of that -- 7.0.0.7, latest JDK, IBM internal bluegroups setup, following all steps to the letter, and I get this same CRJAZ1173I error in SystemOut.log with the corresponding 503 in jazz.log.

I'm able to properly authenticate to the WAS server and to the Jazz home page (though I'm not fully set up yet, so I hit the infinite redirect loop issue). However, going to the setup (/jazz/setup) wizard is pointless, because it can't load the settings for database providers etc.

Any ideas?

permanent link
Christophe Elek (2.9k13021) | answered Feb 11 '10, 7:00 a.m.
JAZZ DEVELOPER
So is the issue auth again or config ? :)
- one idea about the 503 though
did we disable the URI security as per the doc ?

Ensure that the WAS security setting "Use available authentication data when an unprotected URI is accessed" is checked.

permanent link
Guowei Jim Hu (1.0k910353) | answered Apr 26 '11, 2:14 p.m.
I got hit by this and it turns out that it is from the fact that I did not check the checkbox next to Enable application security under Application Security of Global Security of WAS.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.