Mashup server: ERROR [HttpProxyManager.class]

(1) does the proxy server require userid/password ? also, check if you have to set the proxy domain (for NTLM on Windows).

(2) after you configure proxy server, all service registrations and invocations will be going thru the proxy server even if your service is running on your *intranet*. So, you have to add those inernal IPs or domains or host names to *bypass* list in the same place in admin console where you configured the proxy settings.

one more thing, did you restart the presto server after you made the changes in admin console? You need to restart in order for the changes to take effect.

 Hi Girish,

Our proxy is not in windows domain.
I have restarted the presto server.
I have entered : localhost,170.97.* as a list to bypass proxy when accessing intranet resources that start with this ip address.

I was able to succesfully register all the samples - which indicates that presto is using my proxy correctly. Tested some sample services and they seem to be working fine.

Continuing to explore registering our homegrown WSDL services with presto.
Thanks for the support.
 

Girish,

I have similar problem and I have tried the configuration with and without the proxy and still not luck.  I am getting errors for both RSS and WSDL but the one for RSS is more descriptive:  "Error while registering the feed: fail to establish connection with service due to:  sun.security.validator.ValidatorException: PKIX path building failed:  sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target." 

The WSDL error is "Unable to perform specified operation."

I have tired different bypass configurations but none worked.  I am thinking that it should work on the intranet with the proxy turned off but it did not. 

Any sugestions based on the errors above?  Is there something else that I can tweak?  

Kris

Hi Kris,

1. are the WSDL services/RSS services on the intranet ?

2. do you see the same error when proxy is turned off ? If yes, did you restart the server after proxy configuration is changed ?

3. please enable DEBUG log and attach the log file here.

4. type of authentication your proxy expects ? also, which proxy server ?

thx,

Girish,

1. are the WSDL services/RSS services on the intranet ?  YES

2. do you see the same error when proxy is turned off ? YES -> If yes, did you restart the server after proxy configuration is changed ? YES

3. please enable DEBUG log and attach the log file here. ( How do I enable debug? )

thanks,

Kris

To enable DEBUG log,

1. bring up admin console  (from Presto home page, Admin link -> Launch Admin Console)
2. click on "Configure Log Settings" on the left bar
3. in the log settings screen, look for "log4j.rootLogger" (towards the bottom of the list)
4. change ERROR to DEBUG and leave rest of the line as it is
5. click on SAVE
6. now, register WSDL and RSS services
8. send us the log file
<presto_home>/server/apache-tomcat-5.5.20/logs/catalina.out

OK, I tried numerous things to get the logging to work as you said but setting that flag does not change what goes into catalina.out.  I see the DEBUG statements in the Tomcat command window but not in any of the log files.  Any idea what might be broken?   Also I reinstalled Presto just in case with a copy off your server today.  When I unzpipped the installation files I got this error:  CRC failed in Presto2.7.0\connectors\event\lib\jdom-1.0.jar. The file is corrupt.

Not sure what this library is but that could be part of my problem!

About the authentication, I will increase the cmd buffer size and copy paste the statements where the error happen (with the DEBUG on) and I hope that will help some.

Kris

Adam,

Ok. There is another log file we can use. Please attach "<presto_home>/logs/presto.log.*" files.

regarding CRC error, looks like your download didn't complete. There is no issue with installer.

Girish,

Attached is file with the debug statements during rss creation.  I had to replace user/pass and company info from it but other than that the log is complete. 

You might want to check the zip file for the CRC error.  I did download it 4 different times with 2 different browsers and two different computers. When I extract it I get the same error always.

Kris

Kris,

    I think the target service is requiering some certificate which is not properly installed on your system, you probably need to install the certificate on the system-wide keystore located at $JAVA_HOME/jre/lib/security/cacerts

Ivan++

Any ideas on how I go about finding what certificate I need and do I need to ask the sharepoint owner for it?  Also once I have that certificate how do I go about installing it into the jre?

Kris

By googling a bit I found the following link which will help you:

http://wiki.unisa.edu.au/display/AAI/Add+Certificates+to+your+Java+Keystore

Ivan++

I've got a similar problem.  I'm running the server on a Windows XP SP2 box on an Active Directory domain through a windows proxy.  I've tried multiple configurations, but I'm still getting blocked by the proxy.  I'm convinced, because if I take the box to my home network (where there is no proxy) and turn of the proxy configuration, everything works fine.

If I configure the proxy settings to NTLM and then enter my domain name, username, and password, I eventually get the ERROR [HttpProxyManager.class] - Invalid server URL...using given value as server host message, and looking through the DEBUG log information I can see my proxy returning authentication failure errors (Error Code: 407 Proxy Authentication Required. The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.)

If I turn off the NTLM switch,I still get the Invalid server URL error, but then I also get an InvalidCredentialsException: Credentials cannot be used for NTLM authentication.

I'm confused because I'm entering my proxy IP address and port number correctly (based on my browser settings) and using my username and password (again, same as browser settings).  Is there something I could be missing in the configuration files somewhere?  All I'm trying to do when I login is get the sample services to register.  I haven't even gotten to the point where I'm trying to register or publish my own yet.  And I have restarted the server every time I changed the proxy configuration.

I'd appreciate any suggestions you may have.

From the debug log, do you see the credentials that Presto is sending ? other option is to use a sniffer to see the outgoing request. In the log, the HTTP POST request from Presto to proxy should show you the full request.

http://www.ethereal.com/

Thanks for your suggestions Girish.  I'm running Wireshark (Ethereal) and I can see when I try to register the samples where Presto is sending the credentials to the proxy server.  It doesn't show any password (encrypted or otherwise) which is confusing to me, but it does show the domain name and user name.  Still no luck, though, as I keep getting the 407 Proxy Authentication error.

Hi,

    The reason for this error is that a URL is not conform with RFC 1738, I believe this URL is on your list of bypassed proxy URLs, can you check the spelling of all your URLs passed through this list?

Thanks

Ivan++

Can you paste here the whole log from Wireshark, from the list just rigth click the packet where you see the connection from Presto and select the option "Follow TCP Stream"

Thanks!

Ivan++

Hi Ivan,

Thanks for your suggestion.  I took an alternate approach, just to see if it would work.  I set up a Linux box (initially in a VM, but now I have a standalone box).  On that install (which happens to be Ubuntu 9.04 "jaunty jackalope") I setup and configured an ntlmaps proxy, using the same information I entered into Presto.  Then I installed Presto on that box and configured it to use the ntlmaps proxy.  Presto! (pun intended) - everything works fine. 

Now, with this setup Presto doesn't have to do any authentication through the Proxy, so I'm suspecting that's why it works.  But, it's using the exact same proxy with the exact same credentials, so I have to suspect that it has something to do with the way the Presto classes authenticate to a proxy, but I still don't know what the problem is.  So I have a working box at this point, although I'm still a little confused why I couldn't get it to work on my Windows box.  I'll see if I can get a Wireshark log for you.  I may have saved some off before I set up my Ubuntu box.

For the record, I also tried installing ntlmaps on my Windows box and I was able to get the install to work.  Again, in this configuration Presto isn't doing any authentication to the proxy, the APS is, but it works.

Thanks again for your help!

- Bob