VCS WEB INTERFACE ISSUE

[Hossam Al-kurdi]

DEARS,

I'M trying to access my VCS web interface but all i get is a blank page  everytime  i put the user name and password .though i can manage to access through SSH and i've put some command to remove the certificatation authentication ( if the problem caused by the certificate authintication ) but still nothing happens please please please advice

[Alok Jaiswal]

Hi Hossam,

is this VCS is in a cluster?

what commands you run for certificate authentication? can you please explain what made you to run into the issue?

Rgds

Alok

[Hossam Al-kurdi]

HI  Alok,

Thank you very much for responding , the vcs is not a cluster ,the problem is probably caused by Configuring the VCS wrongly  and we belive that the certificate authintication has been changed from "no required" to "authunticated " i've tried to use other browsers and other PC but i get the same blanc page ive tried some commands to remove this issue but nothing changed ,this is some of the command that i tried  :

1-  on Root-----

echo "SSLVerifyClient none" > /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf

2-Return factory reset level 3

3- some command for https mode on ....etc

[Alok Jaiswal]

Hi Hossam,

i believe you alread tried the command in order to hardcode apache on system to not use client certificate-based security;

you need to perform below steps to disable the certificate based authentication.

- login to ssh at root prompt.

- run the command

echo "SSLVerifyClient none" > /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf

- tun the command tsh and then run the command "xcommand restart"

once the vcs server reload you will be having web access and login as admin user and navigate to system and set the client certificate-based security to "not required".

- now run the command

rm /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf

- go to maintenance and restart and perform another restart.

Rgds

Alok

[Hossam Al-kurdi]

Dear Alok,

I did exactly the what you have said again ,even though i did it before but still i got nothing ,

[Alok Jaiswal]

Hi Hossam,

i tried the steps in my lab it works perfectly the way it is described. i don't know if you did something extra.

anyways you also run the xcommand default valuse set level 3 right? it didn't work after that?

can you do a factory reset using "factory-reset" command.

Thnx

Alok

[Vu Lo]

Hi Alok,

i am getting the following error when i ssh to the VCS

error     Application failed - An unexpected software error was detected in /apache2/bin/httpd  -f /etc/apache2/httpd.conf -DNO_DETACH -DHTTP -DSSL: 1

would this be a separate issue to what is being discussed in this forum?

any help to fix this issue would be great

kind regards

Vu

[Hossam Al-kurdi]

Hi Alok,

Can you tell what is the command exactly and should i put it in root ?

PS : the vcs version is 7.2

[Alok Jaiswal]

command to do a facotry-reset is "factory-reset -i" . option "i" is for interactive.

when you put the command it will ask you number of options. you can answer them using yes/no. question will be like do you want to retain the ip or do you want to retain the option keys etc.

Rgds

Alok

[Martin Koch]

As it sounds you can reach the password page I would assume its not the sslclientverify issue.

Anyhow, you did not mention which OS and browser you use and if there might be some

other things like disabled java script or proxies in place. Could you give a comment on that?

I would try it with a different browser, best in the same network with all proxies disabled.

Please remember to rate helpful responses and identify helpful or correct answers.

[Hossam Al-kurdi]

Dear Alik & Martin ,

Thank you very much for your help and support i have deleted the file removecba.conf and now the web interface is working ,

[Vu Lo]

Hi Hossam,

i;m actually experiencing the same issue as well... i followed the steps outlined above however i can't seem to delete the removecba.conf file.

can you please explain how you did it?

thanks

Vu

[Hossam Al-kurdi]

Dear Vu Lo,

please do the following steps :

1. Connect to the VCS as root via Secure Shell (SSH).
2. Enter this command as root in order to hard-code Apache to never use Client certificate-based security

:echo "SSLVerifyClient none" > /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf

Note: After this command is entered, the VCS cannot be reconfigured for Client certificate-based security until the

removecba.conf file is deleted and the VCS is restarted. ( u must delete this file )

3. You must restart the VCS in order for this configuration change to take effect. When you are ready to restart the VCS,

enter these commands:

tshell
xcommand restart

Note: This restarts the VCS and drops all calls/registrations

4. Once the VCS reloads, Client certificate-based security is disabled. However, it is not disabled in a desirable way. Log in to the VCS with a read-write admin account. Navigate to

System > System page on the VCS.

On the system administration page of the VCS, ensure that Client certificate-based security is set to "Not required":

5.once complete, enter this command as root in SSH in order to reset Apache back to normal:rm /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf

Warning: If you skip this step, you can never re-enable Client certificate-based security.

6.Restart the VCS one more time in order to verify that the procedure worked. Now that you have web access, you can restart the VCS from the web interface under

Maintenance >

Restart.

hope this will help

[Vu Lo]

Hi Hossam,

i'm not much of a unix expert... so just wanting to confirm. To delete the removecab.conf file is it simply using the command

rm -i removecab.conf or do i have to use the full file directory as well?

cheers

Vu

[Martin Koch]

Its always good to ask if unsure, espeically by using the root account.

if you execute this command it will delete the file removecab.conf in the current directory and ask you first to confirm (-i).

-v gives you a more verbose output.

So if you want to delete that file you either have to change the directory first:

cd /tandberg/persistent/etc/opt/apache2/ssl.d/

and then

rm -iv removecab.conf

or specify the path (as Hossam already mentioned in 5).  The -i option is a good idea here as well, so you can use:

rm -iv /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf

If the file is not present you get a error message like:

rm: cannot remove `/tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf': No such file or directory

without -v you just get nothing in return if the file is deleted and with -v you should see something like:

~ # rm -iv /tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf
rm: remove regular empty file `/tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf'? y
removed `/tandberg/persistent/etc/opt/apache2/ssl.d/removecba.conf'

Please remember to rate helpful responses and identify helpful or correct answers.