Netsight v8 Upgrade - java gui not working

  • 2
  • 5
  • Question
  • Updated 9 months ago
  • Answered
Hello,

Yesterday I upgraded Netsight to version 8.0.2 from 7.1.2
Since then the java gui is not working. The App is loading and asks for username + pw, I sure provide correct values but the app cannot connect to netsight server:



telnet from my client to the server on 8080 + 8443 is OK!

Login to Webgui is OK with the same user+pw



I use the X64 Ubuntu Appliance. During v8 Upgrade a dist upgrade was done by the installer 12.04 -> 14.04.1
The appliance was installed first with version 5.1.0.140.

The Installer reported no problem during upgrade:

2017-06-13 13:54:36,122 INFO  [com.enterasys.netsight.api.ServerInfoLogger] NetSight appliance will be rebooted in 1 minute.
2017-06-13 13:55:36,157 WARN  [com.enterasys.netsight.install.BaseInstallUninstall] Exiting.  Process completed normally.
Installer exiting with code: 0

I made DB backup and a snapshot, but is it necessary to revert?

BR 
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb

Posted 1 year ago

  • 2
  • 5
Photo of Michal Rz

Michal Rz

  • 742 Points 500 badge 2x thumb
I think its noticed in firtst known issues in release notes. Have you changed web port? http://documentation.extremenetworks.com/release_notes/NetSight/9035078-02_ExtremeManagementCenter_8...
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb
8443 and 8080 are default ports
I did not change them
the ports are open and i can telnet to them from my client
8080 is forwarded to 8443
Photo of Mike Thomas

Mike Thomas, Employee - GTAC - NMS

  • 7,498 Points 5k badge 2x thumb
Anton, does the Netsight/EMC server have a well known certificate on it, or is a default one?
We are looking into this issue.
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb
The certificate is from our own PKI, it is no selfsigned/default certificate.
It is from a Microsoft PKI - Version 2008 R2.
My client trusts the certificate/CA.

Photo of Mike Thomas

Mike Thomas, Employee - GTAC - NMS

  • 7,498 Points 5k badge 2x thumb
Okay, thanks. Have you opened a GTAC ticket? It can help us better track this issue.
Opening a ticket and providing a show support will help us.
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb
of course.
the ticket is 01333462

I am looking forward to hear from you or GTAC
Photo of Torben Keller

Torben Keller

  • 80 Points 75 badge 2x thumb
Any update on this? I am having the same problem since upgrade to 8.0.2
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb
at the momemt we have a workaround, no solution yet
in my case the certificate was the problem.

have a look at your log file from your client
C:\Users\<USER>\AppData\Roaming\NetSight\logs

Is there a entry like this:
2017-06-20 13:40:59,390 WARN  [org.jboss.ejb.client.remoting.ConfigBasedEJBClientContextSelector] Could not register a EJB receiver for connection to netsight01.lsag.net:8443
javax.net.ssl.SSLHandshakeException: General SSLEngine problem

in this case rename the nsserver.keystore file:
On Linux/Ubuntu, this will be

 /usr/local/Extreme_Networks/Netsight/wildfly/standalone/configuration/nsserver.keystore

and restart the service.

service nsserver restart

netsight now uses a selfsigned certificate
Photo of Torben Keller

Torben Keller

  • 80 Points 75 badge 2x thumb
Thanks, that worked. But now I'm getting another Error, even after a restart of the NetSight Server:
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb
i didn't had that error
try to reboot the complete system 
shutdown -r now
maybe mike thomas knows something
Photo of Mike Thomas

Mike Thomas, Employee - GTAC - NMS

  • 7,498 Points 5k badge 2x thumb
The error that Torben submitted is inconclusive by itself.
However, often clearing the Java Cache is generally recommended to fix and or upgrading to a more recent version of Java. If multiple Java versions are installed, remove the older versions.

The current tracking of  Java 8.x login issues on the knowledgebase is listed here. (both for resolutions and data collection if not working)
https://gtacknowledge.extremenetworks.com/articles/Solution/Java-client-does-not-launch-application-...

If the above workarounds do not help, please open a ticket with the GTAC.
(Edited)
Photo of htw

htw

  • 1,144 Points 1k badge 2x thumb
Hi,
we are affected by the same problem, but somehow different. After Upgrading (Installed new vEMC, copied files mentioned in Migrating Guide including our keystore, imported database) we had the following symptoms:
- java clients worked
- but purview had client connection error

So renamed our /usr/local/Extreme_Networks/Netsight/wildfly/standalone/configuration/nsserver.keystore to anorther file name and restartet nsserver service. Purview startet to work but now our Java Clients did not lauch. No error message was delivered. Simply nothing happended after Client downloaded. Clearing Java cache did not solve this.

Then I remembered I saw nsserver.keystore twice in the file system. One at
/usr/local/Extreme_Networks/Netsight/wildfly/standalone/configuration and another at
/usr/local/Extreme_Networks/NetSight/wildfly/standalone/deployments/Monitor.war
When I also renamed nsserver.keystore in the second directory and restartet nsserver service, the java clients started and worked fine.
(Edited)
Photo of Anton Sax

Anton Sax

  • 966 Points 500 badge 2x thumb
update 8.0.3-46 solved this problem
after applying the update i reinstalled the certificate using normal procedure

now the java gui is working again with our own certificate.

mabye it is also possible to use the old nsserver.keystore file, but mine was not in the directory anymore. I was thinking the installer from 8.0.3-46 removed it, but i cannot say exactly.
Photo of htw

htw

  • 1,144 Points 1k badge 2x thumb
Unfortunately our purview "client connection error" was not solved with this version :-( it works only with the EMC self-signed certificate. As soon as I use our nsserver.keystore file the purview appliance has this problem.
(Edited)
Photo of Mike Thomas

Mike Thomas, Employee - GTAC - NMS

  • 7,476 Points 5k badge 2x thumb
Have you opened up a case with the GTAC concerning this?
Photo of htw

htw

  • 1,144 Points 1k badge 2x thumb
Hi Mike,
no, not yet. I had hope that my problem was a side effect of the bug in this thread and wanted to wait until 8.0.3 release. But since it didnt help, I will create a case.
Photo of James A

James A, Embassador

  • 6,510 Points 5k badge 2x thumb
They released a respin, 8.0.3.53, which fixed Purview for me.
Photo of ar

ar

  • 486 Points 250 badge 2x thumb
I had in the past the same problem netsight java application with version 8.0.1.42 and I have found some knowledge base articles that told me that it will be fixed in version 8.0.3.46.
After update to 8.0.3.46 I still had problems with the java plugin and a colleague suggest to remove the certificate and add all certificates of the chain (server cert + our ca-cert # dfn cert + deutsche telekom cert) and since this it works.
Because in our certificate the FQDN is included I had to use in the URL "servername.domain.de".
If I only use the servername or IP address the certificate will not be shown as valid.