TGW 3.5 on Linux

[Wayne Knight]

Thought I would start a new thread...

I have installed TGW on linux and can access the web gui via the same box but cannot access it beyond itself. Is there something I am missing.

Address of collector is 192.168.10.10 listening on ports 80 and 443

tcp        0      0 ::ffff:192.168.10.10:80      :::*                        LISTEN     

tcp        0      0 ::ffff:192.168.10.10:443     :::*                        LISTEN  

I can see its doing IPV6 to 4 feature in the netstat table, see below.

tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN     

tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN     

tcp        0      0 0.0.0.0:56598               0.0.0.0:*                   LISTEN     

tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN     

tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN     

tcp        0      0 127.0.0.1:32000             0.0.0.0:*                   LISTEN     

tcp        0     52 192.168.10.10:22             10.10.10.10:55506         ESTABLISHED

tcp        0      0 127.0.0.1:32000             127.0.0.1:31000             ESTABLISHED

tcp        0      0 :::111                      :::*                        LISTEN     

tcp        0      0 ::ffff:192.168.10.10:80      :::*                        LISTEN     

tcp        0      0 :::22                       :::*                        LISTEN     

tcp        0      0 ::1:631                     :::*                        LISTEN     

tcp        0      0 ::ffff:192.168.10.10:443     :::*                        LISTEN     

tcp        0      0 :::60381                    :::*                        LISTEN     

tcp        0      0 :::5001                     :::*                        LISTEN     

tcp        0      0 ::ffff:127.0.0.1:31000      ::ffff:127.0.0.1:32000      ESTABLISHED

Wayne

[Bryan Williams]

Hi Wayne, I had the same problem in my lab.  Engineering fixed the problem and their explanation was:

"Etc/hosts was missing the ipaddress and hostname entry."

I'm still waiting for an explanation, so I'm not sure if the dependency is simply name resolution or if the hosts file is a hard requirement.

I'll test various combinations in the lab later and update this post.

[Wayne Knight]

Hi Bryan

I couldn't start the service without setting the /etc/hosts file, but found the fault. It was not IPv6 related as disabling this did not resolve the issue. It was iptables blocking the port 80 connection.

Modifying /etc/sysconfig/iptables to allow 80 and 443 now works remotely.

Next issue...

I cannot test the connection or register tgw, I get the following error in the logs

AxisFault

faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException

faultSubcode:

faultString: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found

Wayne

[Bryan Williams]

Yes, the first release of 3.5 had a problem with the production certificate included in the download.

Engineering released a new version late yesterday with a fix. Please download the new version and re-install.

Alternatively, you can clear that error by deleting lb_truststore.jks from tg/resources/security and restarting the process.  I'll provide the full path in a moment.  But I would recommend installing the latest version.