openSUSE zypper error - Valid metadata not found at specified URL, Repository type can't be determined - repository

I have an RPM repository running on JFrog Artifactory. It's being used by CentOS and RHEL hosts, and I would also like to use it with my openSUSE hosts.
This documentation from JFrog does not explicitly say that only yum clients are supported, and since they used the term RPM repository, to me it suggests that the repository should also work with zypper clients.
This is an opensuse document about repomd/rpm md/YUM sources, and a visual inspection of a repository on an openSUSE host created using the createrepo command looks consistent to the JFrog RPM repository layout.
opensuse:~ # ll /data/internalrepo/
total 1157456
-rw-r--r-- 1 root root 1185231772 Apr 22 08:54 myapp-server-2019.0.x86_64.rpm
drwxr-xr-x 1 root root 494 Apr 22 08:55 repodata
opensuse:~ # ll /data/internalrepo/repodata/
total 324
-rw-r--r-- 1 root root 1901 Apr 22 08:55 6a654dd3c11ae0f51efd9cd3fd09ccfdc3c48e988ab886c370e94f7f5bcdf3d1-primary.xml.gz
-rw-r--r-- 1 root root 315545 Apr 22 08:55 cfa28fb2383f1eec84d67bdb8a96d8d1ff66fa1917fb9ca5b5dfaea2569b559b-filelists.xml.gz
-rw-r--r-- 1 root root 1840 Apr 22 08:55 e541d1abcfd503ea5b4d69cfcad74e57750969110429974db7651b2f4dcb44e6-other.xml.gz
-rw-r--r-- 1 root root 1508 Apr 22 08:55 repomd.xml
opensuse:~ #
So at this point, I assume that pointing zypper to the RPM repository "should work" just fine.
However, when trying to point to the repository, there's an error Repository type can't be determined (#2 below). Here are all the steps to add the repository:
Add the repository using addrepo:
opensuse:~ # zypper addrepo https://myuser:mypassword#rpm.example.com/myapp-release-rpm/stable/myapp/2019/3/ myapp
Adding repository 'myapp' ..................................................................................................................................................[done]
Repository 'myapp' successfully added
URI : https://myuser#rpm.example.com/myapp-release-rpm/stable/myapp/2019/3/
Enabled : Yes
GPG Check : Yes
Autorefresh : No
Priority : 99 (default priority)
Repository priorities are without effect. All enabled repositories share the same priority.
opensuse:~ # zypper repos
Repository priorities are without effect. All enabled repositories share the same priority.
# | Alias | Name | Enabled | GPG Check | Refresh
--+-----------------------------------+-----------------------------------+---------+-----------+--------
1 | myapp | myapp | Yes | ( p) Yes | No
2 | openSUSE-Leap-15.1-1 | openSUSE-Leap-15.1-1 | Yes | (r ) Yes | Yes
3 | openSUSE-Leap-15.1-Non-Oss | openSUSE-Leap-15.1-Non-Oss | Yes | (r ) Yes | No
4 | openSUSE-Leap-15.1-Oss | openSUSE-Leap-15.1-Oss | Yes | (r ) Yes | No
5 | openSUSE-Leap-15.1-Update | openSUSE-Leap-15.1-Update | Yes | (r ) Yes | No
6 | openSUSE-Leap-15.1-Update-Non-Oss | openSUSE-Leap-15.1-Update-Non-Oss | Yes | (r ) Yes | No
opensuse:~ #
Try to refresh the repo:
opensuse:~ # zypper refresh myapp
Retrieving repository 'myapp' metadata ....................................................................................................................................[error]
Repository 'myapp' is invalid.
[myapp|https://myuser#rpm.example.com/myapp-release-rpm/stable/myapp/2019/3/] Valid metadata not found at specified URL
History:
- [myapp|https://myuser#rpm.example.com/myapp-release-rpm/stable/myapp/2019/3/] Repository type can't be determined.
Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'myapp' because of the above error.
Could not refresh the repositories because of errors.
opensuse:~ #
This is what the repo file looks like:
opensuse:~ # cat /etc/zypp/repos.d/myapp.repo
[myapp]
enabled=1
autorefresh=0
baseurl=https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/
type=NONE
opensuse:~ #
Manually downloading the repomd.xml file works fine.
opensuse:~ # curl -o repomd.xml --user myuser \
> https://rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/repodata/repomd.xml
Enter host password for user 'myuser':
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1393 100 1393 0 0 1625 0 --:--:-- --:--:-- --:--:-- 1623
opensuse:~ # cat repomd.xml
<?xml version="1.0"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
<data type="other">
<location href="repodata/f11b79e8b7cc5f4cc75851379d5e67d5f6434341-other.xml.gz"/>
<checksum type="sha" pkgid="YES">f11b79e8b7cc5f4cc75851379d5e67d5f6434341</checksum>
<size>2574</size>
<timestamp>1585213347</timestamp>
<open-checksum type="sha" pkgid="YES">de4ef8508be4c2088395e903e19159a7cad87199</open-checksum>
<open-size>36635</open-size>
<revision/>
</data>
<data type="filelists">
<location href="repodata/5cdaa6b9a97e9092c9e68d9d8a1bb32530c8e4c7-filelists.xml.gz"/>
<checksum type="sha" pkgid="YES">5cdaa6b9a97e9092c9e68d9d8a1bb32530c8e4c7</checksum>
<size>962315</size>
<timestamp>1585213345</timestamp>
<open-checksum type="sha" pkgid="YES">726c2e5680556cdd38558f7a2a20bf38d2f0a128</open-checksum>
<open-size>19862419</open-size>
<revision/>
</data>
<data type="primary">
<location href="repodata/cd85a1878f8c38c417e56a720c3ef4bc7f923eeb-primary.xml.gz"/>
<checksum type="sha" pkgid="YES">cd85a1878f8c38c417e56a720c3ef4bc7f923eeb</checksum>
<size>3005</size>
<timestamp>1585213349</timestamp>
<open-checksum type="sha" pkgid="YES">f3c3a178f18e7488eb0769dff6b3cd0def1144c4</open-checksum>
<open-size>46509</open-size>
<revision/>
</data>
</repomd>opensuse:~ #
I tried to look at /var/log/zypper.log, but it's a little cluttered and I am not sure which ones are relevant:
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoManager.cc(repositories_in_file):289 repo file: /etc/zypp/repos.d/myapp.repo
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] IniParser.cc(parse):84 Start parsing /etc/zypp/repos.d/myapp.repo[g___]
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] IniParser.cc(parse):138 Done parsing /etc/zypp/repos.d/myapp.repo[_eF_]
2020-04-22 08:40:48 <1> opensuse(10650) [Progress++] ProgressData.cc(report):88 {#7|/etc/zypp/repos.d/myapp.repo}END
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 --------------------------------------
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - alias : myapp
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - enabled : 1
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - autorefresh : 0
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - url : https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - type : NONE
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - priority : 99
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - gpgcheck : D(Y) repoD(Y)* sig? pkgD(Y)*
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191 - filePath: /etc/zypp/repos.d/myapp.repo
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoFileReader.cc(repositories_in_stream):191
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] PathInfo.cc(dirForEach):553 readdir /var/cache/zypp/raw
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] PathInfo.cc(dirForEach):553 readdir /var/cache/zypp/solv
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] PathInfo.cc(dirForEach):553 readdir /var/cache/zypp/packages
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] RepoManager.cc(init_knownRepositories):889 end construct known repos
2020-04-22 08:40:48 <1> opensuse(10650) [zypper] refresh.cc(execute):132 going to refresh repositories
2020-04-22 08:40:48 <1> opensuse(10650) [zypper++] basecommand.cc(defaultSystemSetup):163 FLAGS:[InitTarget]
2020-04-22 08:40:48 <1> opensuse(10650) [zypper] repos.cc(init_target):981 Initializing target
2020-04-22 08:40:48 <1> opensuse(10650) [zypp] ZYppImpl.cc(initializeTarget):122 initTarget( /)
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] librpmDb.cc(globalInit):148 librpm init done: (_target:x86_64-linux) (_dbpath:/usr/lib/sysimage/rpm)
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(initDatabase):345 Calling initDatabase: '(/)/var/lib/rpm'
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] librpmDb.cc(unblockAccess):344 Unblock access
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(DbDirInfo):522 '(/)/var/lib/rpm':
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(DbDirInfo):522 Dir: /var/lib/rpm{d 0755 0/0}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(DbDirInfo):522 V4: /var/lib/rpm/Packages{- 0644 0/0 size 105418752}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(DbDirInfo):522 V3: /var/lib/rpm/packages.rpm{[2-No such file or directory]}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(DbDirInfo):522 V3ToV4: /var/lib/rpm/packages.rpm3{[2-No such file or directory]}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(internal_initDatabase):468 Found rpm4 database in /var/lib/rpm{d 0755 0/0}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] RpmDb.cc(internal_initDatabase):485 Initial state: V4(X--)V3(---): '(/)/var/lib/rpm'[librpmDb CLOSED '(/)/var/lib/rpm']
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] librpmDb.cc(dbAccess):240 Set new database location: '(/)/var/lib/rpm'
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(D):100 DBACCESS {NULL(/)/var/lib/rpm}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] RpmDb.cc(internal_initDatabase):504 Access state: V4(X--)V3(---): '(/)/var/lib/rpm'[ReferenceCounted(#0x55c45d95a520<=1){NULL(/)/var/lib/rpm}]
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(dbRelease):311 dbRelease: release, outstanding 0
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(initDatabase):426 Synchronizing keys with zypp keyring
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(syncTrustedKeys):961 Going to sync trusted keys...
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(D):100 DBACCESS {NULL(/)/var/lib/rpm}
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(dbRelease):311 dbRelease: release, outstanding 0
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] RpmDb.cc(computeKeyRingSync):941 gpg-pubkey-307e3d54-5aaa90a5 R_
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] RpmDb.cc(computeKeyRingSync):941 gpg-pubkey-39db7c82-5847eb1f R_
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] RpmDb.cc(computeKeyRingSync):941 gpg-pubkey-3dbdc284-53674dd4 R_
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(syncTrustedKeys):993 Rpm keys to export into zypp trusted keyring: 3
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(syncTrustedKeys):994 Zypp trusted keys to import into rpm database: 0
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb] RpmDb.cc(syncTrustedKeys):1000 Exporting rpm keyring into zypp trusted keyring
2020-04-22 08:40:48 <1> opensuse(10650) [librpmDb++] librpmDb.cc(D):100 DBACCESS {NULL(/)/var/lib/rpm}
2020-04-22 08:40:48 <1> opensuse(10650) [zypp::gpg++] KeyManager.cc(createForOpenPGP):239 createForOpenPGP(/var/tmp/zypp.Ib2BVe/zypp-trusted-kr2ogLop)
2020-04-22 08:40:48 <1> opensuse(10650) [zypp::gpg] KeyManager.cc(initGpgme):44 Initialized libgpgme version: 1.10.0
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::gpg++] KeyManager.cc(createForOpenPGP):239 createForOpenPGP(/var/tmp/zypp.Ib2BVe/zypp-trusted-kr2ogLop)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(getData):166 Found keys: {
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(getData):166 [B88B2FD43DBDC284-53674dd4] [openSUSE Project Signing Key <opensuse#opensuse.org>] [expires: 2024-05-02]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(getData):166 [70AF9E8139DB7C82-5847eb1f] [SuSE Package Signing Key <build#suse.de>] [expires: 2020-12-06]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(getData):166 [E3A5C360307E3D54-5aaa90a5] [SuSE Package Signing Key <build#suse.de>] [expires: 2022-03-14]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(getData):166 }
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(publicKeyExists):366 Found key [3dbdc284] in keyring /var/tmp/zypp.Ib2BVe/zypp-trusted-kr2ogLop
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(publicKeyExists):366 Found key [39db7c82] in keyring /var/tmp/zypp.Ib2BVe/zypp-trusted-kr2ogLop
2020-04-22 08:40:49 <1> opensuse(10650) [zypp::KeyRing] KeyRing.cc(publicKeyExists):366 Found key [307e3d54] in keyring /var/tmp/zypp.Ib2BVe/zypp-trusted-kr2ogLop
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] PathInfo.cc(unlink):659 unlink /var/tmp/zypp.Ib2BVe/TmpFile.qSZWmK
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] TmpPath.cc(~Impl):78 TmpPath cleaned up /var/tmp/zypp.Ib2BVe/TmpFile.qSZWmK{- 0600 0/0 size 2556}
2020-04-22 08:40:49 <1> opensuse(10650) [librpmDb++] librpmDb.cc(dbRelease):311 dbRelease: release, outstanding 0
2020-04-22 08:40:49 <1> opensuse(10650) [librpmDb] RpmDb.cc(syncTrustedKeys):1057 Trusted keys synced.
2020-04-22 08:40:49 <1> opensuse(10650) [librpmDb] RpmDb.cc(initDatabase):435 InitDatabase: RpmDb[V4(X--)V3(---): '(/)/var/lib/rpm']
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] HistoryLog.cc(setRoot):173 installation log file /var/log/zypp/history
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] TargetImpl.cc(TargetImpl):698 Initialized target on /
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] PathInfo.cc(dirForEach):553 readdir /etc/products.d
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] TargetImpl.cc(buildCache):853 Read cookie: /var/cache/zypp/solv/#System/cookie{- 0644 0/0 size 52}
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] TargetImpl.cc(buildCache):860 Read cookie: /var/cache/zypp/solv/#System/cookie says: uptodate
2020-04-22 08:40:49 <1> opensuse(10650) [zypper] refresh.cc(refreshRepository):147 going to refresh repo 'myapp'
2020-04-22 08:40:49 <1> opensuse(10650) [zypper] refresh.cc(refreshRepository):154 calling refreshMetadata
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(checkIfToRefreshMetadata):971 Going to try to check whether refresh is needed for https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ (NONE)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(probeCache):1499 going to probe the cached repo at /var/cache/zypp/raw/myapp
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(probeCache):1510 Probed cached type plaindir at /var/cache/zypp/raw/myapp
2020-04-22 08:40:49 <2> opensuse(10650) [zypp] RepoStatus.cc(fromCookieFile):114 No cookie file /var/cache/zypp/raw/myapp/cookie
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(checkIfToRefreshMetadata):979 No cached metadata, going to refresh
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(checkIfToRefreshMetadata):971 Going to try to check whether refresh is needed for https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ (NONE)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(probeCache):1499 going to probe the cached repo at /var/cache/zypp/raw/myapp
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(probeCache):1510 Probed cached type plaindir at /var/cache/zypp/raw/myapp
2020-04-22 08:40:49 <2> opensuse(10650) [zypp] RepoStatus.cc(fromCookieFile):114 No cookie file /var/cache/zypp/raw/myapp/cookie
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(checkIfToRefreshMetadata):979 No cached metadata, going to refresh
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(refreshMetadata):1110 Going to refresh metadata from https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] RepoManager.cc(probe):1410 going to probe the repo type at https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ ()
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaAccess.cc(open):117 Trying scheme 'https'
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaCurl.cc(MediaCurl):549 MediaCurl::MediaCurl(https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/, )
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaMultiCurl.cc(MediaMultiCurl):1164 MediaMultiCurl::MediaMultiCurl(https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/, )
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaAccess.cc(open):197 Opened: https(https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ not attached; localRoot "")
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaManager.cc(open):258 Opened new media access using id 1 to https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaSetAccess.cc(provide):253 Going to try to provide file /repodata/repomd.xml from media number 1
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaManager.cc(attach):376 attach(id=1)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaHandler.cc(createAttachPoint):391 Create attach point: attach root is not a writable directory: '/var/adm/mount'
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaHandler.cc(createAttachPoint):400 Look for orphaned attach points in /var/tmp{d 1777 0/0}
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] PathInfo.cc(dirForEach):553 readdir /var/tmp
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaHandler.cc(createAttachPoint):374 Created default attach point /var/tmp/AP_0xpYFn8X
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] ProductFileReader.cc(parse):219 +++/etc/products.d/baseproduct[g___]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] Reader.cc(Reader):113 Start Parsing /etc/products.d/baseproduct[g___]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] Reader.cc(~Reader):137 Done Parsing /etc/products.d/baseproduct[_eF_]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] ProductFileReader.cc(parse):245 ---0 - /etc/products.d/baseproduct[_eF_]
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] ProxyInfoLibproxy.cc(getProxyFactory):66 Build Libproxy Factory from /etc/sysconfig/proxy
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(setupEasy):776 Enabling HTTP authentication methods: digest,basic (CURLOPT_HTTPAUTH=3)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(setupEasy):829 Proxy: not explicitly set
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(setupEasy):830 Proxy: libcurl may look into the environment
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] PathInfo.cc(chmod):1051 assert_file_mode 00600 /var/lib/YaST2/cookieschmod /var/lib/YaST2/cookies 00600
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaHandler.cc(attach):691 Attached: https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ attached; localRoot "/var/tmp/AP_0xpYFn8X"
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaManager.cc(checkDesired):96 checkDesired(1): desired (report by zypp::media::NoVerifier)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaManager.cc(checkDesired):98 checkDesired(1): desired (cached)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(doGetDoesFileExist):1190 /repodata/repomd.xml
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(doGetDoesFileExist):1200 URL: https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/repodata/repomd.xml
2020-04-22 08:40:49 <1> opensuse(10650) [zypp] MediaCurl.cc(doGetDoesFileExist):1281 perform code: 22 [ HTTP response code said error ]
2020-04-22 08:40:49 <5> opensuse(10650) [zypp] Exception.cc(log):166 MediaCurl.cc(evaluateCurlCode):1119 THROW: File '/repodata/repomd.xml' not found on medium 'https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/'
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaManager.cc(checkDesired):98 checkDesired(1): desired (cached)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaSetAccess.cc(provide):253 Going to try to provide file /content from media number 1
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaManager.cc(checkDesired):98 checkDesired(1): desired (cached)
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(doGetDoesFileExist):1190 /content
2020-04-22 08:40:49 <1> opensuse(10650) [zypp++] MediaCurl.cc(doGetDoesFileExist):1200 URL: https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/content
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] MediaCurl.cc(doGetDoesFileExist):1281 perform code: 22 [ HTTP response code said error ]
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 MediaCurl.cc(evaluateCurlCode):1119 THROW: File '/content' not found on medium 'https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/'
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaManager.cc(checkDesired):98 checkDesired(1): desired (cached)
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaManager.cc(close):288 Close to access handler using id 1 requested
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaHandler.cc(release):751 Request to release attached media https<https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/>, use count=1
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaHandler.cc(release):758 Releasing media https<https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/>
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] MediaHandler.cc(disconnect):730 Disconnected: https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ attached; localRoot "/var/tmp/AP_0xpYFn8X"
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaHandler.cc(removeAttachPoint):181 MediaHandler - checking if to remove attach point
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] PathInfo.cc(recursive_rmdir):426 recursive_rmdir /var/tmp/AP_0xpYFn8X
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] MediaHandler.cc(removeAttachPoint):193 Deleted default attach point /var/tmp/AP_0xpYFn8X
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] MediaHandler.cc(release):812 Released: https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ not attached; localRoot ""
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] MediaAccess.cc(close):248 Close: https(https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ not attached; localRoot "") (OK)
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaHandler.cc(release):744 Request to release media - not attached; eject ''
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] MediaHandler.cc(removeAttachPoint):181 MediaHandler - checking if to remove attach point
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] RepoManager.cc(probe):1488 Probed type NONE at https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/ ()
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 RepoManager.cc(refreshMetadata):1191 THROW: [myapp|https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/] Repository type can't be determined.
2020-04-22 08:40:50 <1> opensuse(10650) [zypp] PathInfo.cc(recursive_rmdir):426 recursive_rmdir /var/cache/zypp/raw/myappZdRqwc
2020-04-22 08:40:50 <1> opensuse(10650) [zypp++] TmpPath.cc(~Impl):78 TmpPath cleaned up /var/cache/zypp/raw/myappZdRqwc{d 0755 0/0}
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 RepoManager.cc(refreshMetadata):1205 CAUGHT: [myapp|https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/] Repository type can't be determined.
2020-04-22 08:40:50 <3> opensuse(10650) [zypp] RepoManager.cc(refreshMetadata):1206 Trying another url...
2020-04-22 08:40:50 <3> opensuse(10650) [zypp] RepoManager.cc(refreshMetadata):1218 No more urls...
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 RepoManager.cc(refreshMetadata):1219 THROW: [myapp|https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/] Valid metadata not found at specified URL
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 History:
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 - [myapp|https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/] Repository type can't be determined.
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 repos.cc(refresh_raw_metadata):383 CAUGHT: [myapp|https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/] Valid metadata not found at specified URL
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 History:
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166 - [myapp|https://myuser#rpm.myapp.com/myapp-release-rpm/stable/myapp/2019/3/] Repository type can't be determined.
2020-04-22 08:40:50 <5> opensuse(10650) [zypp] Exception.cc(log):166
2020-04-22 08:40:50 <3> opensuse(10650) [zypper] refresh.cc(refreshRepositories):263 Skipping repository 'myapp' because of the above error.
Any idea what else to check would be very much appreciated. Thanks!

Did you try disabling the Temporary Login Suspension ?
Rel
https://jfrog.com/knowledge-base/how-to-disable-temporary-login-suspension/
https://www.jfrog.com/confluence/display/JFROG/General+Security+Settings#GeneralSecuritySettings-UserLockandLoginSuspension
https://www.jfrog.com/jira/browse/RTFACT-22284?focusedCommentId=216396&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-216396

Related

Cloud config starts throwing errors about missing repository

Intro
We have a cloud config service based on spring cloud-cloud-config that connects to a bitbucket repository.
For the most part, things are working fine.
However, once in a while we get an error suddenly and it mentions a repository in the temporary folder that I am not aware of.
Important Log Message
org.eclipse.jgit.errors.RepositoryNotFoundException: repository not found:
C:\Windows\Temp\config-repo-5198690406799233048
Full Log
`2023-02-16 14:54:07.370 DEBUG 11516 --- [io-8888-exec-10] org.eclipse.jgit.transport.PacketLineIn : git< 0000
2023-02-16 14:54:07.370 DEBUG 11516 --- [io-8888-exec-10] org.eclipse.jgit.transport.PacketLineIn : git< 93c4f6563b430301e4a4c8e275d5b5e64b5a321a HEAD multi_ack thin-pack side-band side-band-64k ofs-delta shallow deepen-since deepen-not deepen-relative no-progress include-tag multi_ack_detailed allow-tip-sha1-in-want allow-reachable-sha1-in-want no-done symref=HEAD:refs/heads/master filter object-format=sha1 agent=git/2.35.3
2023-02-16 14:54:07.370 DEBUG 11516 --- [io-8888-exec-10] org.eclipse.jgit.transport.PacketLineIn : git< 93c4f6563b430301e4a4c8e275d5b5e64b5a321a refs/heads/master
2023-02-16 14:54:07.370 DEBUG 11516 --- [io-8888-exec-10] org.eclipse.jgit.transport.PacketLineIn : git< 4780d270f79633ab8a609ff7b8390423376ec5e6 refs/tags/April7_2020
2023-02-16 14:54:07.370 DEBUG 11516 --- [io-8888-exec-10] org.eclipse.jgit.transport.PacketLineIn : git< 0000
2023-02-16 15:04:11.345 DEBUG 11516 --- [nio-8888-exec-2] org.eclipse.jgit.transport.PacketLineIn : git< # service=git-upload-pack
2023-02-16 15:04:11.345 DEBUG 11516 --- [nio-8888-exec-2] org.eclipse.jgit.transport.PacketLineIn : git< 0000
2023-02-16 15:04:11.345 DEBUG 11516 --- [nio-8888-exec-2] org.eclipse.jgit.transport.PacketLineIn : git< 93c4f6563b430301e4a4c8e275d5b5e64b5a321a HEAD multi_ack thin-pack side-band side-band-64k ofs-delta shallow deepen-since deepen-not deepen-relative no-progress include-tag multi_ack_detailed allow-tip-sha1-in-want allow-reachable-sha1-in-want no-done symref=HEAD:refs/heads/master filter object-format=sha1 agent=git/2.35.3
2023-02-16 15:04:11.345 DEBUG 11516 --- [nio-8888-exec-2] org.eclipse.jgit.transport.PacketLineIn : git< 93c4f6563b430301e4a4c8e275d5b5e64b5a321a refs/heads/master
2023-02-16 15:04:11.345 DEBUG 11516 --- [nio-8888-exec-2] org.eclipse.jgit.transport.PacketLineIn : git< 4780d270f79633ab8a609ff7b8390423376ec5e6 refs/tags/April7_2020
2023-02-16 15:04:11.345 DEBUG 11516 --- [nio-8888-exec-2] org.eclipse.jgit.transport.PacketLineIn : git< 0000
2023-02-16 15:11:50.743 ERROR 11516 --- [io-8888-exec-10] o.a.c.c.C.[.[.[/].[dispatcherServlet] : Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Request processing failed; nested exception is java.lang.IllegalStateException: Cannot load environment] with root cause
org.eclipse.jgit.errors.RepositoryNotFoundException: repository not found: C:\Windows\Temp\config-repo-5198690406799233048
at org.eclipse.jgit.lib.BaseRepositoryBuilder.build(BaseRepositoryBuilder.java:614) ~[org.eclipse.jgit-4.11.0.201803080745-r.jar!/:4.11.0.201803080745-r]
at org.eclipse.jgit.api.Git.open(Git.java:122) ~[org.eclipse.jgit-4.11.0.201803080745-r.jar!/:4.11.0.201803080745-r]
at org.eclipse.jgit.api.Git.open(Git.java:102) ~[org.eclipse.jgit-4.11.0.201803080745-r.jar!/:4.11.0.201803080745-r]
at org.springframework.cloud.config.server.environment.JGitEnvironmentRepository$JGitFactory.getGitByOpen(JGitEnvironmentRepository.java:677) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.JGitEnvironmentRepository.openGitRepository(JGitEnvironmentRepository.java:540) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.JGitEnvironmentRepository.createGitClient(JGitEnvironmentRepository.java:515) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.JGitEnvironmentRepository.refresh(JGitEnvironmentRepository.java:259) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.JGitEnvironmentRepository.getLocations(JGitEnvironmentRepository.java:238) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.MultipleJGitEnvironmentRepository.getLocations(MultipleJGitEnvironmentRepository.java:150) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.AbstractScmEnvironmentRepository.findOne(AbstractScmEnvironmentRepository.java:47) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.MultipleJGitEnvironmentRepository.findOne(MultipleJGitEnvironmentRepository.java:190) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.CompositeEnvironmentRepository.findOne(CompositeEnvironmentRepository.java:46) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.EnvironmentEncryptorEnvironmentRepository.findOne(EnvironmentEncryptorEnvironmentRepository.java:53) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.EnvironmentController.labelled(EnvironmentController.java:122) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at org.springframework.cloud.config.server.environment.EnvironmentController.defaultLabel(EnvironmentController.java:106) ~[spring-cloud-config-server-2.0.0.RELEASE.jar!/:2.0.0.RELEASE]
at sun.reflect.GeneratedMethodAccessor82.invoke(Unknown Source) ~[na:na]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.8.0_161]
at java.lang.reflect.Method.invoke(Method.java:498) ~[na:1.8.0_161]
at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:209) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:136) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:102) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:891) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:797) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:991) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:925) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:974) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:866) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:635) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:851) ~[spring-webmvc-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) ~[tomcat-embed-websocket-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.boot.actuate.web.trace.servlet.HttpTraceFilter.doFilterInternal(HttpTraceFilter.java:90) ~[spring-boot-actuator-2.0.5.RELEASE.jar!/:2.0.5.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:109) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.filterAndRecordMetrics(WebMvcMetricsFilter.java:155) ~[spring-boot-actuator-2.0.5.RELEASE.jar!/:2.0.5.RELEASE]
at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.filterAndRecordMetrics(WebMvcMetricsFilter.java:123) ~[spring-boot-actuator-2.0.5.RELEASE.jar!/:2.0.5.RELEASE]
at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:108) ~[spring-boot-actuator-2.0.5.RELEASE.jar!/:2.0.5.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.0.9.RELEASE.jar!/:5.0.9.RELEASE]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198) ~[tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:800) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:806) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [na:1.8.0_161]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [na:1.8.0_161]
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-embed-core-8.5.34.jar!/:8.5.34]
at java.lang.Thread.run(Thread.java:748) [na:1.8.0_161]`
I have been debugging the issue and I restarted the server when it happened.
I am wondering though how to fix this so that it never happens - as it is disruptive and causes a 500 error.
Update
We are starting to suspect that the issue is caused by the interference of an anti-virus. Investigating further.

Apache Ignite Spring Data Extension Documentation Missing Setup Step For Thin Clients

Following the documentation and connect to Apache Ignite with thin client, I ran into the following error:
Caused by: org.apache.ignite.client.ClientException: Ignite failed to process request [6]: 50000: Failed to find SQL table for type: TestData (server status code [1])
at org.apache.ignite.internal.client.thin.TcpClientChannel.convertException(TcpClientChannel.java:359) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.TcpClientChannel.receive(TcpClientChannel.java:319) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.TcpClientChannel.service(TcpClientChannel.java:237) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.ReliableChannel.lambda$service$1(ReliableChannel.java:167) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.ReliableChannel.applyOnDefaultChannel(ReliableChannel.java:764) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.ReliableChannel.applyOnDefaultChannel(ReliableChannel.java:731) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.ReliableChannel.service(ReliableChannel.java:167) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.GenericQueryPager.next(GenericQueryPager.java:93) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.ClientQueryCursor$1.nextPage(ClientQueryCursor.java:93) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.ClientQueryCursor$1.hasNext(ClientQueryCursor.java:76) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.springdata.repository.query.IgniteRepositoryQuery$QueryCursorWrapper$1.hasNext(IgniteRepositoryQuery.java:938) ~[ignite-spring-data-ext-2.0.0.jar:2.0.0]
at org.apache.ignite.springdata.repository.query.IgniteRepositoryQuery.transformQueryCursor(IgniteRepositoryQuery.java:621) ~[ignite-spring-data-ext-2.0.0.jar:2.0.0]
at org.apache.ignite.springdata.repository.query.IgniteRepositoryQuery.execute(IgniteRepositoryQuery.java:360) ~[ignite-spring-data-ext-2.0.0.jar:2.0.0]
at org.springframework.data.repository.core.support.RepositoryMethodInvoker.doInvoke(RepositoryMethodInvoker.java:137) ~[spring-data-commons-2.7.2.jar:2.7.2]
at org.springframework.data.repository.core.support.RepositoryMethodInvoker.invoke(RepositoryMethodInvoker.java:121) ~[spring-data-commons-2.7.2.jar:2.7.2]
at org.springframework.data.repository.core.support.QueryExecutorMethodInterceptor.doInvoke(QueryExecutorMethodInterceptor.java:160) ~[spring-data-commons-2.7.2.jar:2.7.2]
at org.springframework.data.repository.core.support.QueryExecutorMethodInterceptor.invoke(QueryExecutorMethodInterceptor.java:139) ~[spring-data-commons-2.7.2.jar:2.7.2]
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.3.22.jar:5.3.22]
at org.springframework.data.projection.DefaultMethodInvokingMethodInterceptor.invoke(DefaultMethodInvokingMethodInterceptor.java:81) ~[spring-data-commons-2.7.2.jar:2.7.2]
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.3.22.jar:5.3.22]
at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:97) ~[spring-aop-5.3.22.jar:5.3.22]
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.3.22.jar:5.3.22]
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:215) ~[spring-aop-5.3.22.jar:5.3.22]
at com.sun.proxy.$Proxy40.findById(Unknown Source) ~[na:na]
at com.example.ignitespringdatalocal.IgniteSpringDataLocalApplication.run(IgniteSpringDataLocalApplication.java:33) [classes/:na]
at org.springframework.boot.SpringApplication.callRunner(SpringApplication.java:771) [spring-boot-2.7.3.jar:2.7.3]
... 5 common frames omitted
Caused by: org.apache.ignite.internal.client.thin.ClientServerError: Ignite failed to process request [6]: 50000: Failed to find SQL table for type: TestData (server status code [1])
at org.apache.ignite.internal.client.thin.TcpClientChannel.processNextMessage(TcpClientChannel.java:449) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.TcpClientChannel.onMessage(TcpClientChannel.java:194) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.io.gridnioserver.GridNioClientConnection.onMessage(GridNioClientConnection.java:86) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.io.gridnioserver.GridNioClientListener.onMessage(GridNioClientListener.java:56) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.client.thin.io.gridnioserver.GridNioClientListener.onMessage(GridNioClientListener.java:30) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioFilterChain$TailFilter.onMessageReceived(GridNioFilterChain.java:279) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioFilterAdapter.proceedMessageReceived(GridNioFilterAdapter.java:109) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioCodecFilter.onMessageReceived(GridNioCodecFilter.java:116) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioFilterAdapter.proceedMessageReceived(GridNioFilterAdapter.java:109) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioServer$HeadFilter.onMessageReceived(GridNioServer.java:3734) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioFilterChain.onMessageReceived(GridNioFilterChain.java:175) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioServer$ByteBufferNioClientWorker.processRead(GridNioServer.java:1211) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.processSelectedKeysOptimized(GridNioServer.java:2508) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.bodyInternal(GridNioServer.java:2273) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.body(GridNioServer.java:1910) ~[ignite-core-2.13.0.jar:2.13.0]
at org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:125) ~[ignite-core-2.13.0.jar:2.13.0]
at java.lang.Thread.run(Thread.java:748) ~[na:1.8.0_161]
After Googling, I found this tutorial which solved my problem - when using thin client, I need to prepare my data model's SQL DDL script and run with sqlline tool; where the same can be skipped for thick clients when using CacheConfiguration.setIndexedTypes().
Hence, I am hoping the Apache Ignite team can include this step (or more detailed/correct steps as this is just what I found that solved my problem as a first time learner).
Thanks a lot!

nginx stream_ssl_preread module unable to read ssl_preread_server_name

I am trying to set up nginx to map TLS connections to different backends based on the SNI server name. From what I can tell, my client is sending the server name, but the preread module is only reading a hyphen.
Here is my nginx congif:
stream {
map_hash_bucket_size 64;
############################################################
### logging
log_format log_stream '$remote_addr [$time_local] $protocol [$ssl_preread_server_name] [$ssl_preread_alpn_protocols] [$instanceport] '
'$status $bytes_sent $bytes_received $session_time';
error_log /usr/home/glance/Logs/pservernginx.error.log info;
access_log /usr/home/glance/Logs/pservernginx.access.log log_stream;
############################################################
### ssl configuration
ssl_certificate /usr/home/glance/GlanceReleases/star.myglance.org.pem;
ssl_certificate_key /usr/home/glance/GlanceReleases/star.myglance.org.pem;
ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5:!RC4;
limit_conn_zone $binary_remote_addr zone=ip_addr:10m;
########################################################################
### Raw TLS PServer Connections
### Listen for TLS on 5501 and forward to TCP sock 6500 (socket port)
### https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html
map $ssl_preread_server_name $instanceport {
presence.myglance.org 6500;
presence-1.myglance.org 6501;
presence-2.myglance.org 6502;
default glance-no-upstream-instance-configured;
}
server {
listen 5501 ssl;
ssl_preread on;
proxy_connect_timeout 20s; # max time to connect to pserver
proxy_timeout 30s; # max time between successive reads or writes
proxy_pass 127.0.0.1:$instanceport;
}
}
wireshark shows the Server Name header:
The nginx access log shows only hyphens for the preread variables:
108.49.96.66 [12/Apr/2019:11:50:58 +0000] TCP [-] [-] [glance-no-upstream-instance-configured] 500 0 0 0.066
I'm running nginx 1.14.2 on FreeBSD. How can I debug what is happening in the preread module?
================ UPDATE ===============
Turned on debug logging. Maybe "ssl preread: not a handshake" is a clue.
2019/04/12 14:49:50 [info] 61420#0: *9 client 108.49.96.66:54740 connected to 0.0.0.0:5501
2019/04/12 14:49:50 [debug] 61420#0: *9 posix_memalign: 0000000801C35000:256 #16
2019/04/12 14:49:50 [debug] 61419#0: accept on 0.0.0.0:5501, ready: 1
2019/04/12 14:49:50 [debug] 61419#0: accept() not ready (35: Resource temporarily unavailable)
2019/04/12 14:49:50 [debug] 61420#0: *9 posix_memalign: 0000000801C35600:256 #16
2019/04/12 14:49:50 [debug] 61420#0: *9 generic phase: 0
2019/04/12 14:49:50 [debug] 61420#0: *9 generic phase: 1
2019/04/12 14:49:50 [debug] 61420#0: *9 generic phase: 2
2019/04/12 14:49:50 [debug] 61420#0: *9 tcp_nodelay
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_do_handshake: -1
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_get_error: 2
2019/04/12 14:49:50 [debug] 61420#0: *9 kevent set event: 5: ft:-1 fl:0025
2019/04/12 14:49:50 [debug] 61420#0: *9 event timer add: 5: 60000:29203481224
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL handshake handler: 0
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_do_handshake: 1
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL: TLSv1.2, cipher: "ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD"
2019/04/12 14:49:50 [debug] 61420#0: *9 event timer del: 5: 29203481224
2019/04/12 14:49:50 [debug] 61420#0: *9 generic phase: 2
2019/04/12 14:49:50 [debug] 61420#0: *9 ssl preread handler
2019/04/12 14:49:50 [debug] 61420#0: *9 malloc: 0000000801CFF000:16384
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_read: -1
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_get_error: 2
2019/04/12 14:49:50 [debug] 61420#0: *9 ssl preread handler
2019/04/12 14:49:50 [debug] 61420#0: *9 posix_memalign: 0000000801C35900:256 #16
2019/04/12 14:49:50 [debug] 61420#0: *9 event timer add: 5: 30000:29203451252
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_read: 81
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_read: -1
2019/04/12 14:49:50 [debug] 61420#0: *9 SSL_get_error: 2
2019/04/12 14:49:50 [debug] 61420#0: *9 ssl preread handler
2019/04/12 14:49:50 [debug] 61420#0: *9 ssl preread: not a handshake
2019/04/12 14:49:50 [debug] 61420#0: *9 event timer del: 5: 29203451252
2019/04/12 14:49:50 [debug] 61420#0: *9 proxy connection handler
2019/04/12 14:49:50 [debug] 61420#0: *9 malloc: 0000000801DF7000:400
2019/04/12 14:49:50 [debug] 61420#0: *9 malloc: 0000000801CD9000:16384
2019/04/12 14:49:50 [debug] 61420#0: *9 stream map started
2019/04/12 14:49:50 [debug] 61420#0: *9 stream map: "" "glance-no-upstream-instance-configured"
================= UPDATE 2 ======================
I tested using
openssl s_client -connect ... -servername ...
instead of my client. Now it appears that the preread module is blocked waiting for data for 30 seconds (error code 2 is WANT_READ):
2019/04/23 13:04:30 [debug] 61419#0: *12844 SSL: TLSv1.2, cipher: "ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD"
2019/04/23 13:04:30 [debug] 61419#0: *12844 event timer del: 3: 30147561850
2019/04/23 13:04:30 [debug] 61419#0: *12844 generic phase: 2
2019/04/23 13:04:30 [debug] 61419#0: *12844 ssl preread handler
2019/04/23 13:04:30 [debug] 61419#0: *12844 malloc: 0000000801CA6140:16384
2019/04/23 13:04:30 [debug] 61419#0: *12844 SSL_read: -1
2019/04/23 13:04:30 [debug] 61419#0: *12844 SSL_get_error: 2
2019/04/23 13:04:30 [debug] 61419#0: *12844 ssl preread handler
2019/04/23 13:04:30 [debug] 61419#0: *12844 posix_memalign: 0000000801DB3400:256 #16
2019/04/23 13:04:30 [debug] 61419#0: *12844 event timer add: 3: 30000:30147531898
2019/04/23 13:05:00 [debug] 61419#0: *12844 event timer del: 3: 30147531898
2019/04/23 13:05:00 [debug] 61419#0: *12844 finalize stream session: 200
2019/04/23 13:05:00 [debug] 61419#0: *12844 stream log handler
2019/04/23 13:05:00 [debug] 61419#0: *12844 stream map started
2019/04/23 13:05:00 [debug] 61419#0: *12844 stream script var: ""
I found the problem:
listen 5501 **ssl**;
ssl_preread on;
ssl in the listen directive caused that nginx server to do the ssl handshake. By the time the preread module was notified, the handshake bytes had already been consumed, which is all consistent with the behavior I was seeing. In my case, I still want nginx to offload the encryption. So I created a set of nginx server directives to terminate the ssl connection before passing to my back end.
This is the relevant portion of my nginx config after fixing it. Note that the last server directive (the one that uses ssl_preread) does not terminate the SSL connection.
########################################################################
### TLS Connections
### Listen for TLS on 5501 and forward to TCP sock 6500 (socket port)
### https://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html
map $ssl_preread_server_name $instanceport {
presence.myglance.org 5502;
presence-1.myglance.org 5503;
presence-2.myglance.org 5504;
default glance-no-upstream-instance-configured;
}
server {
listen 5502 ssl;
ssl_preread off;
proxy_pass 127.0.0.1:6502;
}
server {
listen 5503 ssl;
ssl_preread off;
proxy_pass 127.0.0.1:6503;
}
server {
listen 5504 ssl;
ssl_preread off;
proxy_pass 127.0.0.1:6504;
}
server {
listen 5501;
ssl_preread on;
proxy_connect_timeout 20s; # max time to connect to pserver
proxy_timeout 30s; # max time between successive reads or writes
proxy_pass 127.0.0.1:$instanceport;
}
In case you need to use ssl in listen directive, you can simply use $ssl_server_name in the map block instead of $ssl_preread_server_name

SSL with Apache Nifi not working

I have been working on this problem for quite some time and I would like answers and suggestions from you guys on the issue I am facing. I am trying to get my Nifi standalone instance on my server and basically my requirement is LDAP authenitcation, for that i have read some documents and found need to setup SSL first so i have followed this
link
but i am getting the below error.
2017-01-20 23:39:12,603 INFO [main] o.a.nifi.authorization.FileAuthorizer Authorizations file loaded at Fri Jan 20 23:39:12 HKT 2017
2017-01-20 23:39:59,327 INFO [NiFi Web Server-44] o.a.n.w.a.c.IllegalStateExceptionMapper java.lang.IllegalStateException: Kerberos ticket login not supported by this NiFi.. Returning Conflict response.
2017-01-20 23:39:59,331 DEBUG [NiFi Web Server-44] o.a.n.w.a.c.IllegalStateExceptionMapper
java.lang.IllegalStateException: Kerberos ticket login not supported by this NiFi.
at org.apache.nifi.web.api.AccessResource.createAccessTokenFromTicket(AccessResource.java:349) ~[classes/:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.8.0_77]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[na:1.8.0_77]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.8.0_77]
at java.lang.reflect.Method.invoke(Method.java:498) ~[na:1.8.0_77]
at com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409) [jersey-servlet-1.19.jar:1.19]
at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:558) [jersey-servlet-1.19.jar:1.19]
at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:733) [jersey-servlet-1.19.jar:1.19]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [javax.servlet-api-3.1.0.jar:3.1.0]
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:845) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1689) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:51) [jetty-servlets-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1676) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.apache.nifi.web.filter.RequestLogger.doFilter(RequestLogger.java:66) [classes/:na]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1676) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:207) [spring-security-web-4.0.3.RELEASE.jar:4.0.3.RELEASE]
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:176) [spring-security-web-4.0.3.RELEASE.jar:4.0.3.RELEASE]
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346) [spring-web-4.2.4.RELEASE.jar:4.2.4.RELEASE]
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:262) [spring-web-4.2.4.RELEASE.jar:4.2.4.RELEASE]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1676) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.apache.nifi.web.filter.TimerFilter.doFilter(TimerFilter.java:51) [classes/:na]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1668) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:581) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:548) [jetty-security-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:226) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1174) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:511) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1106) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:119) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:134) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.Server.handle(Server.java:524) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:319) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:253) [jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:273) [jetty-io-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:95) [jetty-io-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:186) [jetty-io-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:273) [jetty-io-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:95) [jetty-io-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.io.SelectChannelEndPoint$2.run(SelectChannelEndPoint.java:93) [jetty-io-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.executeProduceConsume(ExecuteProduceConsume.java:303) [jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.produceConsume(ExecuteProduceConsume.java:148) [jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.run(ExecuteProduceConsume.java:136) [jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:671) [jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:589) [jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at java.lang.Thread.run(Thread.java:745) [na:1.8.0_77]
2017-01-20 23:39:59,556 DEBUG [NiFi Web Server-55] o.a.n.w.s.NiFiAuthenticationFilter Checking secure context token: null
2017-01-20 23:39:59,557 INFO [NiFi Web Server-55] o.a.n.w.s.NiFiAuthenticationFilter Attempting request for (EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK) GET https://hklpadhod07:7443/nifi-api/flow/current-user (source ip: 10.112.194.113)
2017-01-20 23:39:59,559 INFO [NiFi Web Server-55] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK
2017-01-20 23:39:59,559 DEBUG [NiFi Web Server-55] o.a.n.w.s.NiFiAuthenticationFilter Checking secure context token: EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK
2017-01-20 23:39:59,559 DEBUG [NiFi Web Server-55] o.a.n.w.s.NiFiAuthenticationFilter Checking secure context token: EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK
2017-01-20 23:39:59,560 DEBUG [NiFi Web Server-55] o.a.n.w.s.a.NiFiAnonymousUserFilter SecurityContextHolder not populated with anonymous token, as it already contained: 'EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK'
2017-01-20 23:39:59,571 INFO [NiFi Web Server-55] o.a.n.w.a.c.AccessDeniedExceptionMapper EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK does not have permission to access the requested resource. Returning Forbidden response.
2017-01-20 23:39:59,572 DEBUG [NiFi Web Server-55] o.a.n.w.a.c.AccessDeniedExceptionMapper
org.apache.nifi.authorization.AccessDeniedException: Unknown user with identity 'EMAILADDRESS=07anis#gmail.com, CN=admin, OU=EDM, O=XXX, L=HK, ST=HK, C=HK'.
at org.apache.nifi.web.api.FlowResource.authorizeFlow(FlowResource.java:226) ~[classes/:na]
at org.apache.nifi.web.api.FlowResource.getCurrentUser(FlowResource.java:312) ~[classes/:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.8.0_77]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[na:1.8.0_77]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.8.0_77]
at java.lang.reflect.Method.invoke(Method.java:498) ~[na:1.8.0_77]
at com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:205) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84) ~[jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1542) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1473) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1419) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1409) [jersey-server-1.19.jar:1.19]
at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:409) [jersey-servlet-1.19.jar:1.19]
at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:558) [jersey-servlet-1.19.jar:1.19]
at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:733) [jersey-servlet-1.19.jar:1.19]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [javax.servlet-api-3.1.0.jar:3.1.0]
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:845) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1689) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:51) [jetty-servlets-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1676) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.apache.nifi.web.filter.RequestLogger.doFilter(RequestLogger.java:66) [classes/:na]
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1676) [jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:316) [spring-security-web-4.0.3.RELEASE.jar:4.0
and my authorizers.xml
<authorizer>
<identifier>file-provider</identifier>
<class>org.apache.nifi.authorization.FileAuthorizer</class>
<property name="Authorizations File">./conf/authorizations.xml</property>
<property name="Users File">./conf/users.xml</property>
<property name="Initial Admin Identity">"EMAILADDRESS=07anis#gmail.com,CN=admin,OU=EDM,O=XXX,L=HK,ST=HK,C=HK"</property>
<property name="Legacy Authorized Users File"></property>
<!-- Provide the identity (typically a DN) of each node when clustered, see above description of Node Identity.
<property name="Node Identity 1"></property>
<property name="Node Identity 2"></property>
-->
</authorizer>
kindly have a look and advice.
Stop your NiFi Delete users.xml and authorizations.xml
Edit authorizers.xml so that the "Initial Admin Identity" matches exactly
what see in your logs, notice yours has no spaces and the logs do
have spaces
Start again

Nginx closes connection after the client cert is presented

I am using Nginx to forward my ssl req to some server.
I am trying firefox chrome etc but doesn't help
what should be the correct config, also i am trying to implement this along with SSL as well the http_auth
The config i am using :
server {
listen 443 default_server ssl;
#root /var/www;
#index index.html index.htm index.php;
error_log /var/log/nginx/testconfg.log debug;
ssl on;
ssl_certificate /etc/ssl/testconfig/certs/server.crt;
ssl_certificate_key /etc/ssl/testconfig/private/server.key;
ssl_client_certificate /etc/ssl/testconfig/certs/ca.crt;
ssl_crl /etc/ssl/testconfig/private/ca.crl;
ssl_password_file /etc/ssl/testconfig/global.pass;
ssl_verify_client optional;
ssl_session_timeout 10m;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://172.16.8.50:5601;
proxy_ssl_server_name on;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
}
ERROR:
verify:0, error:18, depth:0, subject:"/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd", issuer:"/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd"
2017/01/04 11:08:23 [debug] 19105#19105: *2 verify:0, error:8, depth:0, subject:"/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd", issuer:"/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd"
2017/01/04 11:08:23 [debug] 19105#19105: *2 verify:1, error:8, depth:0, subject:"/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd", issuer:"/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd"
2017/01/04 11:08:23 [debug] 19105#19105: *2 SSL_do_handshake: 1
2017/01/04 11:08:23 [debug] 19105#19105: *2 SSL: TLSv1, cipher: "ECDHE-RSA-AES256-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA1"
2017/01/04 11:08:23 [debug] 19105#19105: *2 reusable connection: 1
2017/01/04 11:08:23 [debug] 19105#19105: *2 http wait request handler
2017/01/04 11:08:23 [debug] 19105#19105: *2 malloc: 0000556B5D448D50:1024
2017/01/04 11:08:23 [alert] 19105#19105: *2 ignoring stale global SSL error (SSL: error:04091077:rsa routines:INT_RSA_VERIFY:wrong signature length error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib) while waiting for request, client: 165.225.106.84, server: 0.0.0.0:443
2017/01/04 11:08:23 [debug] 19105#19105: *2 SSL_read: -1
2017/01/04 11:08:23 [debug] 19105#19105: *2 SSL_get_error: 2
2017/01/04 11:08:23 [debug] 19105#19105: *2 free: 0000556B5D448D50
2017/01/04 11:08:24 [debug] 19105#19105: *2 http wait request handler
2017/01/04 11:08:24 [debug] 19105#19105: *2 malloc: 0000556B5D448D50:1024
2017/01/04 11:08:24 [debug] 19105#19105: *2 SSL_read: 0
2017/01/04 11:08:24 [debug] 19105#19105: *2 SSL_get_error: 5
2017/01/04 11:08:24 [debug] 19105#19105: *2 peer shutdown SSL cleanly
2017/01/04 11:08:24 [info] 19105#19105: *2 client closed connection while waiting for request, client: 165.225.106.84, server: 0.0.0.0:443
2017/01/04 11:08:24 [debug] 19105#19105: *2 close http connection: 3
2017/01/04 11:08:24 [debug] 19105#19105: *2 SSL_shutdown: 1
2017/01/04 11:08:24 [debug] 19105#19105: *2 event timer del: 3: 1483528163104
2017/01/04 11:08:24 [debug] 19105#19105: *2 reusable connection: 0
2017/01/04 11:08:24 [debug] 19105#19105: *2 free: 0000556B5D448D50
2017/01/04 11:08:24 [debug] 19105#19105: *2 free: 0000556B5D46F910, unused: 56
can someone help me out whats the issue