Hide Forgot
Created attachment 831548 [details] screenshot of error Description of problem: [RHS-C] Administration Portal errors out "Error while executing action: A Request to the Server failed with the following Status Code: 500" Version-Release number of selected component (if applicable): cb10 How reproducible: Always Steps to Reproduce: 1. Have cb9 build installed as per: http://rhsm.pad.engineering.redhat.com/rhsc-build-cb9 2. Add the cb10 repos mentioned in: http://rhsm.pad.engineering.redhat.com/rhsc-build-cb10 3. Run # yum update rhsc-setup 4. Run # rhsc-setup 5. Take https://rhs-client3.lab.eng.blr.redhat.com/ in browser 6. Click on "Administration Portal" Actual results: It fails to load with the following error: "Error while executing action: A Request to the Server failed with the following Status Code: 500". Clicking on "Close" button takes you to the login page, but you won't be able to enter anything. Following is seen in the server log: ------ 2013-12-02 17:12:56,032 ERROR [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/webadmin]] (ajp-/127.0.0.1:8702-8) Exception while dispatching incoming RPC call: java.lang.SecurityException: Blocked request without GWT base path header (XSRF attack?) at com.google.gwt.rpc.server.RpcServlet.getClientOracle(RpcServlet.java:95) [gwt-servlet.jar:] at com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:205) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) [gwt-servlet.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:754) [jboss-servlet-api_3.0_spec.jar:1.0.2.Final-redhat-1] at javax.servlet.http.HttpServlet.service(HttpServlet.java:847) [jboss-servlet-api_3.0_spec.jar:1.0.2.Final-redhat-1] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:295) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214) [jbossweb.jar:7.2.2.Final-redhat-1] at org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132) [frontend.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214) [jbossweb.jar:7.2.2.Final-redhat-1] at org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:72) [branding.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214) [jbossweb.jar:7.2.2.Final-redhat-1] at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:64) [utils.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:149) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:499) [jbossweb.jar:7.2.2.Final-redhat-1] at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web.jar:7.3.0.Final-redhat-10] at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb.jar:7.2.2.Final-redhat-1] at org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:488) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:420) [jbossweb.jar:7.2.2.Final-redhat-1] at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb.jar:7.2.2.Final-redhat-1] -------- Expected results: It should successfully load the login page. Additional info: Screenshot attached. Logs will be attached soon.
rhsc-log-collector report can be downloaded from: http://rhsqe-repo.lab.eng.blr.redhat.com/sosreports/1036639/
On further investigation, I could see that the problem is mainly with the SSL link. ------ Web access is enabled at: http://rhs-client3.lab.eng.blr.redhat.com:80/ovirt-engine https://rhs-client3.lab.eng.blr.redhat.com:443/ovirt-engine ------ The non SSL link doesn't throw out this error.
To clarify, this issue is seen even with a fresh installation of CB10 build. Especially, when the SSL link (https) is taken in the browser as mentioned in #Comment 2. Since we all use the most recommended SSL link for accessing the web admin portal, we are hitting this issue very frequently. The only work-around is to take the non-SSL link (http) in the browser and click on the "Administration Portal" which somehow re-directs again to the SSL page and we can login from there.
The same issue is happening even with a fresh installation of CB10 and is consistantly reproducible if you take the SSL link in the browser.
*** Bug 1037785 has been marked as a duplicate of this bug. ***
Created attachment 832688 [details] SOS
In the landing page, "Administration Portal" is pointing to "https://hostname/ovirt-engine/webadmin/?locale=en_US". This is wrong. It should be "https://hostname/webadmin/webadmin/WebAdmin.html?locale=en_US" This should be fixed in the welcome_page.template of rhsc-branding.
Verified as fixed in cb11. The SSL link is no more throwing the error.
Please review the edited DocText and signoff.
yep concise and appropriate
We don't need to document this, considering it's only seen during CB10/CB11 and fixed as well. Not in Big Bend release or earlier. I am removing the flag.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHEA-2014-0208.html