cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5027
Views
6
Helpful
11
Replies

Prime LMS 4.2 no http/https access after installation

Hi friends,

I installed the LMS as ova template on ESXi and be able to connect via SSH, but when I try to connect via http or https I got the following error.

Forbidden

You don't have permission to access / on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Is there anything I can do?? I read a lot of documents and google results but never get an satisfied answer.

regards,

Sebastian

11 Replies 11

ww9rivers
Level 1
Level 1

I had a similar problem with LMS 4.1 on Windows, which I described here:

http://teknowfile.blogspot.com/2012/02/obscure-problem-with-lms-41.html

Basically, you may try to go to Admin » Trust Management » Local Server » Browser-Server Security Mode Setup, select Change Setting To: Enable and apply.

I have also just started to run LMS 4.2 on a soft appliance and I see it has changed from 4.1 so this may or may not solve your problem.

Hi,

Thanks for that reply, but that don't help because I'm not able to open the GUI. I never was it. I always get the error message!

In that case, you may want to try getting into the shell (ssh to the box then "shell") and do this:

# lsof -i tcp | grep web_serve

You should see "web_serve" processes listening on port 443 (cscoapch_ssl) or 1741 (cscoapch) -- you should be able to see what port it is running on either way.

I see not the default ports and the other ports are not working, I guess they are internal ports for use.

I already restated the server and the daemon dmgtd.

thats what I see:

[lms01/root-ade ~]# lsof -i tcp | grep web_serve

web_serve  1712 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  1712 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  1712 casuser   19u  IPv4 570956       TCP localhost.localdomain:58788->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  1724 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  1724 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  1724 casuser   19u  IPv4 571589       TCP localhost.localdomain:37114->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  1725 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  1725 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  1725 casuser   19u  IPv4 572194       TCP localhost.localdomain:42972->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  9557 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  9557 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  9557 casuser   19u  IPv4 578575       TCP localhost.localdomain:53615->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  9565 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  9565 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  9565 casuser   19u  IPv4 579214       TCP localhost.localdomain:49750->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  9566 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  9566 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  9566 casuser   19u  IPv4 579805       TCP localhost.localdomain:38145->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve 16258 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve 16258 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve 16258 casuser   19u  IPv4 555407       TCP localhost.localdomain:49648->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve 22281 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve 22281 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve 22281 casuser   18u  IPv4 373369       TCP srvcslms01:cscoapch->srvcslms01:53997 (ESTABLISHED)

OH my goodness, it works

I always tried by IE and it never works...once I checked the log of the appache and checked the httpd config I got the idea to try firefox...it works...Now IE with the full URL I need works too...crazy but good, now I can go on with testting this software to convince my business...

thanks for you replies..

regards,

sebastian

Hey Sebastian,

How did you fixed it? Is there any configuration you did?

Thanks

Hey,

no I did nothing, I just used another browser and only http I saw now that https was not enabled...

I guess the redirect in the IE was not working like expect.

regards,
Sebastian

If the LMS is not accesible via GUI, one of the things which can be tried is via CLI to enable/Disable SSL for HTTP/HTTPS communictaion.

This can be done via Script :

CSCOpx\MDC\Apache>perl ConfigSSL.pl -disable (to disable SSL and get HTTP)

CSCOpx\MDC\Apache>perl ConfigSSL.pl -enable (to enable SSL and get HTTPS).

Also, IE always has issues with redirects and sometimes needs registry modification to fix that issue.

-Thanks.

Vinod

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Dear all,

thanks for all the replys...

for me the case was closed after I got access with Firefox .

regards,
Sebastian

ww9rivers
Level 1
Level 1

I got an email from DavidZC12 <supportforums-donotreply@supportforums.cisco.com> regarding this thread. But following the link in the mail (View the full discussion) led me to a "Not Found" page.

Anyway, here is my response followed by the contents of the email:

Cisco renamed those port numbers:

$ grep cscoapch /etc/services

cscoapch                 1741/tcp     # CSCO NM HTTP for Apache

cscoapch_ssl               443/tcp     # CSCO NM HTTPS for Apache

So it looks like your LMS server is listening on both those ports. To troubleshoot further, I think it should be able to tcpdump incoming requests on either of those ports.

Re:   Prime LMS 4.2 no http/https access after installation

created by DavidZC12 in Network   Management - View the full   discussion


I'm   having the same exact issue on a new install, but the different browser did   not resolve the issue for me.  Any other ideas? I tried disabling the   SSL, to which it already said it was disabled it, so I re-enabled it.    Still no go.  I also do not see the 443 listener.

lsof   -i tcp | grep web_serve

web_serve    1840  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    1840  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    1840  casuser   19u  IPv4   2967541       TCP   localhost.localdomain:54150->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    3357  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    3357  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    3357  casuser   19u  IPv4   2998264       TCP   localhost.localdomain:32841->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    5065     root    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    5065     root    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   10485  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser   19u  IPv4   2944173       TCP localhost.localdomain:38569->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   13453  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13453  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13453  casuser   19u  IPv4   3006618       TCP   localhost.localdomain:60778->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   13454  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13454  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13454  casuser   19u  IPv4   3007255       TCP   localhost.localdomain:41570->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   14536  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   14536  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   14536  casuser   19u  IPv4   2857823       TCP   localhost.localdomain:38554->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   16835  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   16835  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   16835  casuser   18u  IPv4   2969407       TCP   :cscoapch->:58390 (ESTABLISHED)

web_serve   16835  casuser   19u  IPv4   2919945       TCP   localhost.localdomain:51509->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   20097  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   20097  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   20097  casuser   19u  IPv4   2983527       TCP   localhost.localdomain:36869->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   21227  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   21227  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   21227  casuser   19u  IPv4   3014840       TCP localhost.localdomain:35828->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   29269  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   29269  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   29269  casuser   19u  IPv4   2992519       TCP localhost.localdomain:51496->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   30419  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   30419  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   30419  casuser   19u  IPv4   3022653       TCP   localhost.localdomain:44728->localhost.localdomain:Ajp13 (ESTABLISHED)

lsof   -i tcp | grep web_serve

web_serve    1840  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    1840  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    1840  casuser   19u  IPv4   2967541       TCP   localhost.localdomain:54150->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    3357  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    3357  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    3357  casuser   19u  IPv4   2998264       TCP   localhost.localdomain:32841->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    5065     root    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    5065     root    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   10485  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser   19u  IPv4   2944173       TCP   localhost.localdomain:38569->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   13453  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13453  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13453  casuser   19u  IPv4   3006618       TCP   localhost.localdomain:60778->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   13454  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13454  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13454  casuser   19u  IPv4   3007255       TCP   localhost.localdomain:41570->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   14536  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   14536  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   14536  casuser   19u  IPv4   2857823       TCP   localhost.localdomain:38554->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   16835  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   16835  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   16835  casuser   18u  IPv4   2969407       TCP   :cscoapch->:58390 (ESTABLISHED)

web_serve   16835  casuser   19u  IPv4   2919945       TCP   localhost.localdomain:51509->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   20097  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   20097  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   20097  casuser   19u  IPv4   2983527       TCP localhost.localdomain:36869->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   21227  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   21227  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   21227  casuser   19u  IPv4 3014840         TCP localhost.localdomain:35828->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   29269  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   29269  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   29269  casuser   19u  IPv4   2992519       TCP   localhost.localdomain:51496->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   30419  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   30419  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   30419  casuser   19u  IPv4   3022653       TCP   localhost.localdomain:44728->localhost.localdomain:Ajp13 (ESTABLISHED)

Reply   to this message by going to Home

Start   a new discussion in Network Management at Home

Duong Nguyen
Level 1
Level 1

I had the same issue, I believe I restarted all webservices (not the daemon) to gain access.  I think I  remember it being a simple fix...

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: