Project and Portfolio Management Practitioners Forum
cancel
Showing results for 
Search instead for 
Did you mean: 

HP PPM sign out problem

SOLVED
Go to solution
Highlighted
dgsagir2
Occasional Contributor

HP PPM sign out problem

Hi,

We setup HP PPM 9.14 in cluster with 2 load balancer in https (no external Web server).

We got some configuration problems but it's working fine now, except:

- When we click on sign out, the login page change from https to http.

We tried this URL https://xxx.[rest of FQDN]/itg/web/knta/global/Logout.jsp
 and the return login page is in http (logon. jsp).

Also, the com.kintana.core.server.BASE_URL=https://xxx parameter in the server.conf in set properly (https)

- Also, sometime we receive messages about, example, <<non secure content, switch to https to http, do you accept yes or no>>, and we have to click on no to to display the page properly.

Does someones have already face these problems?

Thanks,

 

 

 

 

 

10 REPLIES
Oscar_Pereira
Frequent Visitor
Solution

Re: HP PPM sign out problem

PPM won't change https request to http. Sometimes it will get the request url by request.getRequestURL(), if the url is http, it means the request from the LB has already been changed to http.

 

1-What type of load balancer do you have?

 

2-Does it have an option for "Rewrite Redirects”?  (Most LBs have this option)

 

If the Load Balancer has a HTTP profile with the "Rewrite Redirects" option set to "All", this allows the system to rewrite any self-referencing server-set redirects to the proper protocol scheme.

 

Check with your Load Balancer admin about a similar setting.

 

--Kudos are always welcome.

 

Regards

Oscar Pereira

d4y4n4
Frequent Visitor

Re: HP PPM sign out problem

Hi,

As far as I know  you can have a  load balancer without having an External Web Server, however if you want to have SSL enabled for PPM it is required an External Web Server.

Check the Admin guide on page 26 http://support.openview.hp.com/selfsolve/document/KM1224696


Regards,
Dayana Campos

dgsagir2
Occasional Contributor

Re: HP PPM sign out problem

1-What type of load balancer do you have?

Cisco Ace

 

2-Does it have an option for "Rewrite Redirects”?  (Most LBs have this option)

The LB admin check it that at this moment...

 

Thanks,

Jim Esler
Honored Contributor

Re: HP PPM sign out problem

We use a hardware load balancer (F5 switch) that is configured to encrypt/decrypt traffic as described on page 36 of the Installation and Administration Guide. We do not use an external web server. As noted on page 36, "Setting up your system this way can improve its performance."

d4y4n4
Frequent Visitor

Re: HP PPM sign out problem

Hi Jim,

Even so, you still must use an external web server, on the page you can find that it is required.

Regards,
Dayana
Jim Esler
Honored Contributor

Re: HP PPM sign out problem

Dayana,

 

We have been using our hardware load balancer to encrypt/decrypt https traffic from the users without an external web server for a couple of years. The admin guide does make a point of stating that "To use HTTPS, you must also use an external Web server." It follows this, though, with the statement, "Many hardware load balancers support handling HTTPS and forwarding plain HTTP. In this case, the hardware load balancer handles the encryption and decryption of requests, and the nodes perform other tasks."

 

Figure 2-3 shows a server cluster/hardware load balancer configuration that does not have an external software load balancer. This is the configuration we are using. Many hardware load balancers provide all of the functionality needed to support https without adding an external software web server.

d4y4n4
Frequent Visitor

Re: HP PPM sign out problem

Hi,

PPM has a parameter 'ENABLE_WEB_ACCESS_LOGGING'. Please set it to true (com.kintana.core.server.ENABLE_WEB_ACCESS_LOGGING=true) and running kUpdateHtml.sh would turn on request logging in PPM (like a web server's access logs). The logs usually take the form "localhost_access_log.YYYY-MM-DD.txt" and are saved at /server//log . Please set this parameter to true in server.conf and run kUpdateHtml.sh on all nodes.
Once that is done, please send us that log so that we can check what is really happening.

Regards,
Dayana
d4y4n4
Frequent Visitor

Re: HP PPM sign out problem

Quick question: did you edit the server.xsl?

http://support.openview.hp.com/selfsolve/document/KM995157/binary/PPM9.10_DeployBestPractices.pdf

The secure logon can not render correct page on logout due to incorrect configuration of server.xsl file by following the Configuring PPM Center with a Load Balancer section on page 15 of PPM 9.10, also check the page 126

Regards,
Dayana
Kerim KILIC
Frequent Visitor

Re: HP PPM sign out problem

we had these kind of issues in one customer and solved with installing certificate to load balacer and changing type to cookie based redirection something like that; you can check with your lb admin there is an option only avaliable after installing certificate.
dgsagir2
Occasional Contributor

Re: HP PPM sign out problem

We configured the URL_REWRITE parameter of the load balancers (Cisco Ace) and since the https works with PPM:

 

action-list type modify http SSL_URL_REWRITE
 header rewrite response Location header-value "http://(.*)" replace "https://%1"

 

The message <<non secure content, switch to https to http, do you accept yes or no>> disappear too.

 

FYI, we dont have external Web server, only load balancers.

 

Thanks for your help!

//Add this to "OnDomLoad" event