ALfresco share unable to login-container env

[amalchinnah]

Hi team, 

Im trying to setup alfesco community 7.0 in openshift environment. When I try to login alfresco share, im getting 

"Your authentication details haven't been recognized or Alfresco Content Services may not be available at this time." in login page. then I troubleshooting logs I found below error. 

"Unable to retrieve License information from Alfresco: 404"

Could you please advise right solution?

[abhinavmishra14]

Can you provide following details?

1- How did you setup your environment? Docker + docker-compose or used distribution for setup

2- Can you share the steps you followed? share the docker-compose.yml if used 

3- Logs 

4- Output of "docker stats" and "docker ps -a" commands if using docker

5- How much memory you have allocated? at least 8-12 gb memory is needed. 

Check these threads, it may be helpful: https://hub.alfresco.com/t5/alfresco-content-services-forum/share-login-problem-while-installing-alf...

https://hub.alfresco.com/t5/alfresco-content-services-forum/alfresco-community-6-2-0-ga-installation...

https://hub.alfresco.com/t5/alfresco-content-services-forum/docker-solr-not-getting-deployed-unknown...

[Kongusuresh]

Hi Abhinav, 

Thanks for getting back, we have hosted the ECM in openshift environment. we have converted the docker-compose fill into kubernets deployment config and hosted it. 

Please find information about the setup. 

1. The pods are running behind the ELB and we are not using any proxy server, our elb acts as proxy. 
2. The exposed the routes the ELB
3. We are able to access the both alfresco and share admin console
4.  Find the alfresco container env variables name

: JAVA_OPTS
value: >-
-Dgoogledocs.enabled=false -Ddb.driver=org.postgresql.Driver
-Ddb.username=alfresco -Ddb.password=alfresco
-Ddb.url=jdbcostgresql://postgresql:5432/alfresco
-Dsolr.host=solr6
-Dsolr.port=8983 -Dsolr.secureComms=none
-Dsolr.base.url=/solr/#/ -Dindex.subsystem.name=solr6
-Dshare.port=8080
-Dshare.host=share
-Dalfresco.host=localhost -Dalfresco.port=8080
-Daos.baseUrlOverwrite=https://alfresco:8080/alfresco/aos
-Ddeployment.method=DOCKER_COMPOSE
-DlocalTransform.core-aio.url=http://transform-core-aio:8090/
-Dmessaging.broker.url="failovernio://activemq:61616)?timeout=3000&jms.useCompression=true"
-Dalfresco-pdf-renderer.url=http://transform-core-aio:8090/
-Djodconverter.url=http://transform-core-aio.:8090/
-Dimg.url=http://transform-core-aio:8090/
-Dtika.url=http://transform-core-aio.:8090/
-Dtransform.misc.url=http://transform-core-aio.:8090/
-Dcsrf.filter.enabled=false -XX:MinRAMPercentage=50
-XX:MaxRAMPercentage=80 -Dlocal.transform.service.enabled=true
- name: JAVA_TOOL_OPTIONS
value: >-
-Dencryption.keystore.type=JCEKS
-Dencryption.cipherAlgorithm=DESede/CBC/PKCS5Padding
-Dencryption.keyAlgorithm=DESede
-Dencryption.keystore.location=/usr/local/tomcat/shared/classes/alfresco/extension/keystore/keystore
-Dmetadata-keystore.password=mp6yc0UD9e
-Dmetadata-keystore.aliases=metadata
-Dmetadata-keystore.metadata.password=oKIWzVdEdA
-Dmetadata-keystore.metadata.algorithm=DESede 

1. Please find the share env

  - name: JAVA_OPTS

              value: >-

                -XX:MinRAMPercentage=50 -XX:MaxRAMPercentage=80

                -Dalfresco.host=http://alfresco:8080

                -Dalfresco.context=alfresco

            - name: REPO_HOST

              value: alfresco

            - name: REPO_PORT

              value: '8080'

1. We are disabled to CSRFPolicy also.
2. We are getting following error while accessing the share console.

Your authentication details haven't been recognized or Alfresco Content Services may not be available at this time.

[abhinavmishra14]

Still can't say what could have been wrong, but acs seems to be unstable or not running that's when you get the license error.

Can you check what you see in the logs? How much memory is allocated in gb? 

Things that i noticed:

-Dsolr.host=solr6.alfresco-uat-axa-sg.svc.cluster.local

-Dshare.host=share

-Dalfresco.host=localhost 

it seems alfresco.host you have set "localhost", it should be container name or host name. Could be one the reasons share is not able to connect to alfresco and unable to retrieve the license. 

Also i think this param is wrong: 

                -Dalfresco.host=http://alfresco:8080

it should be :

-Dalfresco.host=alfresco

-Dalfresco.port=8080

I would recommend to refer to this project: https://github.com/Alfresco/acs-deployment/tree/master/helm/alfresco-content-services

[Kongusuresh]

Thanks for the reply, I have made the all the necessary changes. 

We have facing this problem both in community and entriprise trail. 

Without the disabling CSRF, we arr getting the fillowing error. 

Possible CSRF attack noted when asserting"

2020-12-23 09:41:04,617 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-2] Successfully retrieved license information from Alfresco.
2020-12-23 09:41:25,583 INFO [webscripts.servlet.CSRFFilter] [http-nio-8080-exec-7] Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin
2020-12-23 09:41:27,516 ERROR [alfresco.web.site] [http-nio-8080-exec-7] javax.servlet.ServletException: Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin, FAILED TEST: Assert referer POST /share/page/dologin :: referer: 'https://*/share/page/' vs server & context: http://*/ (string) or (regexp)

When we disable CSRF we getting following error. 

2020-12-23 10:08:02,838 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-5] Unable to retrieve License information from Alfresco: 404 

Console message 

Your authentication details haven't been recognized or Alfresco Content Services may not be available at this time.

[Kongusuresh]

When we are not disabling CSRF we are getting the following error. 

Possible CSRF attack noted when asserting"

2020-12-23 09:41:04,617 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-2] Successfully retrieved license information from Alfresco.
2020-12-23 09:41:25,583 INFO [webscripts.servlet.CSRFFilter] [http-nio-8080-exec-7] Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin
2020-12-23 09:41:27,516 ERROR [alfresco.web.site] [http-nio-8080-exec-7] javax.servlet.ServletException: Possible CSRF attack noted when asserting referer header 'https://*/share/page/' . Request: POST /share/page/dologin, FAILED TEST: Assert referer POST /share/page/dologin :: referer: 'https://*/share/page/' vs server & context: http://*/ (string) or (regexp)

However when we are disabling CSRF we are getting following error. 

2020-12-23 10:08:02,838 INFO [web.site.EditionInterceptor] [http-nio-8080-exec-5] Unable to retrieve License information from Alfresco: 404

[kaynezhang]

It seems your acs didn't startup successfully ,can you visit http://ip:8080/alfersco?

[Kongusuresh]

yes I can able to access the acs 

[kaynezhang]

Have you tried a GA edtion for example 6.2,alfesco community 7 have not released yet ,maybe it is a bug of edtion 7. We are now using 6.2, we didn't encounter this problem.