Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 757 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Resolving WebAdmin Failed (Timeout) after 7.500 (7.501) up2date

jranil
Hi,

After up2dating to 7.50 and 7.501 it seems there is a bug in loading WebAdmin.

There is some tickets like http://tinyurl.com/ydyj2vv and http://tinyurl.com/ylpg7m6 and http://tinyurl.com/yb5q8on (MantisID: 11310)  which didn't seems resolve the issue.

After looking to /var/log/httpd.log the following error is shown.


central:/var/log # tail httpd.log 
2009:12:07-15:59:22 central httpd: 172.16.211.106 - - [07/Dec/2009:15:59:22 +0330] "GET /wfe/asg/js/up2date.js?t=1260188961 HTTP/1.1" 200 820
2009:12:07-15:59:22 central httpd: 172.16.211.106 - - [07/Dec/2009:15:59:22 +0330] "POST /index.plx HTTP/1.1" 200 279
2009:12:07-15:59:22 central httpd: 172.16.211.106 - - [07/Dec/2009:15:59:22 +0330] "POST /index.plx HTTP/1.1" 200 899
2009:12:07-15:59:22 central httpd: 172.16.211.106 - - [07/Dec/2009:15:59:22 +0330] "POST /index.plx HTTP/1.1" 200 921
2009:12:07-15:59:24 central httpd[5603]: [error] [client 172.16.211.106] Premature end of script headers: index.plx, referer: https://172.16.208.1:4444/
2009:12:07-15:59:24 central httpd: 172.16.211.106 - - [07/Dec/2009:15:58:24 +0330] "POST /index.plx HTTP/1.1" 500 16272
2009:12:07-16:00:28 central httpd[5785]: [error] [client 172.16.211.106] Premature end of script headers: index.plx, referer: https://172.16.208.1:4444/
2009:12:07-16:00:31 central httpd: 172.16.211.106 - - [07/Dec/2009:15:59:28 +0330] "POST /index.plx HTTP/1.1" 500 16281
2009:12:07-16:00:31 central httpd[5603]: [error] [client 127.0.0.1] access to /var/webadmin/ failed, reason: SSL connection required
2009:12:07-16:00:31 central httpd: 127.0.0.1 - - [07/Dec/2009:16:00:31 +0330] "GET /" 403 -
central:/var/log # 



I think the main problem is that when ASG is not connected to the internet, it is not able to show https://adminblog.astaro.com/index.xml so you can edit the config.ph and delete the last line and edit "feed => { url => 'adminblog.astaro.com/index.xml' }" to "feed => { url => '' }" then restart httpd using ".


central:/var/sec/chroot-httpd/var/webadmin/wfe/asg/res # pwd
/var/chroot-httpd/var/webadmin/wfe/asg/res
central:/var/sec/chroot-httpd/var/webadmin/wfe/asg/res # ls 
config.ph  config.ph.ORrIG  hidden_uuids  locales  templates
central:/var/sec/chroot-httpd/var/webadmin/wfe/asg/res # 



I do not know if changing this file violate any support policy but until this issue resist u may do this [:)]


This thread was automatically locked due to age.
  • 0
    Hi,

         I ran into this issue when upgrading to 7.501 yesterday (was still running 7.401 and waited as long as possible). It seems the webadmin page just sits there after trying to log in as the admin user. Luckily I had set up another person as a superadmin and was able to log in under them and it worked. I then went to the admin user and reset the password and that seems to have solved the issue. 

         Before updating to 7.50, etc what I can recommend is that everyone should create another superuser to log into the system. Also be sure to enable SSH logon temporarily should you run into any problems, especially remote admins like myself. Also if you are using active directory you will need make sure the the "Base DN" has something in there or it will give you an error when authenticating, previous versions weren't as picky when this field was blank.

    Anyway my 2 cents 
    Take care, Julio
  • 0
    Jalal, it looks like you are accessing WebAdmin via the Astaro HTTP Proxy.  If you look in your IPS log, you might find that IPS now is blocking these accesses because it sees them as LAND attacks.  Assumiing that you are using a non-Transparent mode, the best thing to do is to change your browser to skip the proxy for your various local subnets, specifically, for the internal IP of the Astaro.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Cookie Information Banner