jar installation with ssl reverse proxy

[m7-marcus]

Hello,

I’m trying to run the embedded tomcat with apache2 as reverse proxy. Icescrum is invoked by
java -Xmx512M -XX:MaxPermSize=256m -jar icescrum.jar acontext=/

Apache is configured as follows:
ProxyRequests Off
ProxyPreserveHost On
ProxyStatus On
ProxyPass / http://public_ip:8080/
ProxyPassReverse / http://public_ip:8080/

When I try to access https://mydomain.com in a browser, I get redirect to http://public_ip:8080.
Any idea, how to solve this?

Thanks and regards,
Marcus

[Vincent Barrier]

Hello Marcus,

With the jar installation you cannot use an reverse proxy in front of iceScrum. Why? Because as you seen the address used in your browser must be the same as the one registered in the config. This config grails.serverURL variable is dynamically set using jar installation.

In your case, you should have :

java -Xmx512M -XX:MaxPermSize=256m -jar icescrum.jar context=/ host=mydomain.com port=443

but your apache will be useless.

So you will need to go to more customized setup: https://www.icescrum.com/documentation/application-server/#application-server_2

Regards;

[m7-marcus]

Hi Vincent,

Thank you for your reply.

I guess that means, it’s not possible to combine the standalone installation with a reverse proxy?

I tried with tomcat, but ran into another issue. CSS and JS don’t load properly. I get the following errors:

2016-03-11 06:59:19,111 [http-bio-8080-exec-4] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/1OkkCzGQh5wLk1NgnYFoJAd4T88K1LYwPABBWUCeVBO.js
2016-03-11 06:59:19,242 [http-bio-8080-exec-5] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/KD7x59LF012LqSXsbrbzeghhGNBZhE6GyqcevIwszKC.js
2016-03-11 06:59:19,253 [http-bio-8080-exec-6] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/DmNUXy6Nro0DcAC8f9xMF7Q6KwJPHL0QNiabO7eF9VS.css
2016-03-11 06:59:19,258 [http-bio-8080-exec-7] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/0k4p1aZEFaroTbNlv9l7f5h0OwpUaTMO9vcaGwZh0vV.css
2016-03-11 06:59:19,262 [http-bio-8080-exec-8] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/gG6PrAIvqQAqelWuL9xjUunnggcUUViJQiq1Pg7mtdj.js
2016-03-11 06:59:19,307 [http-bio-8080-exec-10] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/KD7x59LF012LqSXsbrbzeghhGNBZhE6GyqcevIwszKC.js
2016-03-11 06:59:19,353 [http-bio-8080-exec-10] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/static/gG6PrAIvqQAqelWuL9xjUunnggcUUViJQiq1Pg7mtdj.js

I configured apache like here:
https://www.icescrum.com/documentation/application-server/#proxy-ssl_1

So:

Servername icescrum.mydomain.com
SSLStuff
...
ProxyRequests Off
ProxyPreserveHost On
ProxyStatus On
ProxyPass        / http://tomcat_ip:8080/icescrum/
ProxyPassReverse / http://tomcat_ip:8080/icescrum/

My config.groovy:

dataSource.password="mypass"
icescrum.baseDir="/usr/share/tomcat7/icescrum"
dataSource.driverClassName="com.mysql.jdbc.Driver"
dataSource.username="icescrum"
icescrum.login.retrieve.enable=false
icescrum.project.import.enable=true
icescrum.log.dir="logs"
grails.serverURL="https://icescrum.mydomain.com"
icescrum.alerts.enable=false
icescrum.gravatar.enable=false
icescrum.project.private.default=false
icescrum.project.creation.enable=true
icescrum.invitation.enable=false
icescrum.project.private.enable=true
icescrum.debug.enable=false
dataSource.url="jdbc:mysql://localhost:3306/icescrum?useUnicode=true&characterEncoding=utf8"
icescrum.project.export.enable=true
icescrum.registration.enable=false

How to resolve that?

Thanks and regards,
Marcus

[Nicolas Noullet]

Hello Marcus,

We «iceScrum standalone» stands for both the .jar and the .war versions, «standalone» just means that you install iceScrum on your own server rather than on our Cloud.

I confirm that the .jar version cannot be used in combination with a reverse Proxy, whereas the .war version with a custom Tomcat can!

You are heading in the right direction, but there are two remaining problems:

• The context name (here the /icescrum that comes at the end of the iceScrum URL) must be the same for the public URL and internal URL (it’s a limitation of a library we use).
  That means that you can either have
  – http://tomcat_ip:8080/icescrum/ and https://icescrum.mydomain.com/icescrum
  – or http://tomcat_ip:8080/ and https://icescrum.mydomain.com, which seems to be better. To make iceScrum start on the empty context on Tomcat, rename icescrum.war to ROOT.war and restart Tomcat
• You didn’t change the connector to be NIO and iceScrum will not work properly with BIO, change it in your server.xml as explained in the documentation: https://www.icescrum.com/documentation/application-server/

[m7-marcus]

Hi Nicolas,

thank you for your reply. I changed the connector to NIO and moved the war file to tomcat’s root. Proxying now works as expected, but unfortunately I still get some errors:
2016-03-11 10:44:13,841 [http-nio-127.0.0.1-8080-exec-4] ERROR org.grails.plugin.resource.ResourceMeta - Resource not found: /icescrum/plugins/icescrum-plugin-chat-0.1/js/flXHR/checkplayer.js

I tried reinstalling icescrum, I cleared the folders

/var/lib/tomcat7/work
/usr/share/tomcat7/icescrum
/usr/share/tomcat7/.icescrum
/tmp/hsperfdata_tomcat7

and the database. Now I get stuck in an endless loop throwing the above error when accessing /setup.

Any suggestions?

Thank you and regards,
Marcus

[Nicolas Noullet]

Did you rename the .war file to ROOT.war ?

[m7-marcus]

Yes, I have.
Regards

[Vincent Barrier]

Did you find a solution? If not, could we do a remote access session?

[m7-marcus]

Unfortunately no solution yet.

An SSH session would be possible. Could you send me your public key to marcus@module-7.com?

Thanks and regards,
Marcus

[m7-marcus]

I checked icescrum’s log during autodeployment and startup. Contains some warnings and errors, too. Maybe full output is helpful?

2016-03-12 11:26:17,136 [localhost-startStop-1] INFO  grails.spring.BeanBuilder  - [RuntimeConfiguration] Configuring data source for environment: PRODUCTION
2016-03-12 11:26:19,098 [localhost-startStop-1] WARN  grails.util.GrailsUtil  - [WARNING] Property [data] of domain class pl.burningice.plugins.image.ast.Image has type [[B] and doesn't support constraint [blank]. This constraint will not be checked during validation.
2016-03-12 11:26:19,325 [localhost-startStop-1] WARN  net.sf.ehcache.config.ConfigurationFactory  - No configuration found. Configuring ehcache from ehcache-failsafe.xml  found in the classpath: jar:file:/var/lib/tomcat7/webapps/ROOT/WEB-INF/lib/ehcache-core-1.7.1.jar!/ehcache-failsafe.xml
2016-03-12 11:26:20,832 [localhost-startStop-1] WARN  net.sf.ehcache.config.ConfigurationFactory  - No configuration found. Configuring ehcache from ehcache-failsafe.xml  found in the classpath: jar:file:/var/lib/tomcat7/webapps/ROOT/WEB-INF/lib/ehcache-core-1.7.1.jar!/ehcache-failsafe.xml
2016-03-12 11:26:20,843 [localhost-startStop-1] WARN  net.sf.ehcache.CacheManager  - Creating a new instance of CacheManager using the diskStorePath "/tmp/tomcat7-tomcat7-tmp" which is already used by an existing CacheManager.
The source of the configuration was classpath.
The diskStore path for this CacheManager will be set to /tmp/tomcat7-tomcat7-tmp/ehcache_auto_created_1457781980843.
To avoid this warning consider using the CacheManager factory methods to create a singleton CacheManager or specifying a separate ehcache configuration (ehcache.xml) for each CacheManager instance.
2016-03-12 11:26:21,003 [localhost-startStop-1] WARN  net.sf.ehcache.config.ConfigurationFactory  - No configuration found. Configuring ehcache from ehcache-failsafe.xml  found in the classpath: jar:file:/var/lib/tomcat7/webapps/ROOT/WEB-INF/lib/ehcache-core-1.7.1.jar!/ehcache-failsafe.xml
2016-03-12 11:26:21,005 [localhost-startStop-1] WARN  net.sf.ehcache.CacheManager  - Creating a new instance of CacheManager using the diskStorePath "/tmp/tomcat7-tomcat7-tmp" which is already used by an existing CacheManager.
The source of the configuration was classpath.
The diskStore path for this CacheManager will be set to /tmp/tomcat7-tomcat7-tmp/ehcache_auto_created_1457781981005.
To avoid this warning consider using the CacheManager factory methods to create a singleton CacheManager or specifying a separate ehcache configuration (ehcache.xml) for each CacheManager instance.
2016-03-12 11:26:21,763 [localhost-startStop-1] INFO  org.codehaus.groovy.grails.scaffolding.DefaultGrailsTemplateGenerator  - Scaffolding template generator set to use resource loader org.codehaus.groovy.grails.commons.spring.GrailsWebApplicationContext@606c43eb: startup date [Sat Mar 12 11:26:18 UTC 2016]; parent: Root WebApplicationContext
2016-03-12 11:26:25,954 [localhost-startStop-1] ERROR org.hibernate.util.JDBCExceptionReporter  - Column not found: ADDED in statement [SELECT id, added, modified, removed, added_data, modified_data, removed_data FROM icescrum2_scm_commit]
2016-03-12 11:26:26,827 [localhost-startStop-1] ERROR org.hibernate.util.JDBCExceptionReporter  - Column not found: TEXT_AS in statement [SELECT id, text_as, textican, text_to
                                                                 FROM icescrum2_story
																 WHERE text_as IS NOT NULL OR textican IS NOT NULL OR text_to IS NOT NULL]
2016-03-12 11:26:26,912 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact ScmEntryPoints mapper element is not loadable
2016-03-12 11:26:26,916 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact ManagementEntryPoints mapper element is not loadable
2016-03-12 11:26:26,924 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact IceboxEntryPoints mapper element is not loadable
2016-03-12 11:26:26,928 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact CloudStorageEntryPoints mapper element is not loadable
2016-03-12 11:26:26,932 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact EmbeddedEntryPoints mapper element is not loadable
2016-03-12 11:26:26,936 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact BundleEntryPoints mapper element is not loadable
2016-03-12 11:26:26,940 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact BugtrackerEntryPoints mapper element is not loadable
2016-03-12 11:26:26,943 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact FeedbackEntryPoints mapper element is not loadable
2016-03-12 11:26:26,947 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact TeamCommunicationEntryPoints mapper element is not loadable
2016-03-12 11:26:28,214 [localhost-startStop-1] WARN  grails.util.GrailsUtil  - [WARNING] Property [data] of domain class pl.burningice.plugins.image.ast.Image has type [[B] and doesn't support constraint [blank]. This constraint will not be checked during validation.
2016-03-12 11:26:29,019 [localhost-startStop-1] INFO  AutobaseGrailsPlugin  - ---- Starting Autobase migrations  ----
2016-03-12 11:26:29,140 [localhost-startStop-1] INFO  liquibase.ext.logging.LiquibaseSlf4jLogger  - Successfully acquired change log lock
2016-03-12 11:26:29,986 [localhost-startStop-1] INFO  liquibase.ext.logging.LiquibaseSlf4jLogger  - Reading from DATABASECHANGELOG
2016-03-12 11:26:30,126 [localhost-startStop-1] INFO  liquibase.ext.logging.LiquibaseSlf4jLogger  - Successfully released change log lock
2016-03-12 11:26:30,128 [localhost-startStop-1] INFO  AutobaseGrailsPlugin  - ---- Autobase migrations completed ----
2016-03-12 11:26:30,132 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact ScmEntryPoints mapper element is not loadable
2016-03-12 11:26:30,133 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact ManagementEntryPoints mapper element is not loadable
2016-03-12 11:26:30,135 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact IceboxEntryPoints mapper element is not loadable
2016-03-12 11:26:30,136 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact CloudStorageEntryPoints mapper element is not loadable
2016-03-12 11:26:30,137 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact EmbeddedEntryPoints mapper element is not loadable
2016-03-12 11:26:30,138 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact BundleEntryPoints mapper element is not loadable
2016-03-12 11:26:30,138 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact BugtrackerEntryPoints mapper element is not loadable
2016-03-12 11:26:30,139 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact FeedbackEntryPoints mapper element is not loadable
2016-03-12 11:26:30,140 [localhost-startStop-1] WARN  org.icescrum.plugins.entryPoints.EntryPointsDeclarationsFactory  - entries artefact TeamCommunicationEntryPoints mapper element is not loadable
2016-03-12 11:26:31,360 [localhost-startStop-1] WARN  grails.util.GrailsUtil  - [WARNING] Property [data] of domain class pl.burningice.plugins.image.ast.Image has type [[B] and doesn't support constraint [blank]. This constraint will not be checked during validation.
2016-03-12 11:26:31,363 [localhost-startStop-1] INFO  org.codehaus.groovy.grails.web.context.GrailsConfigUtils  - [GrailsContextLoader] Grails application loaded.
2016-03-12 11:26:31,481 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Installing BroadcastFilter class(es) org.atmosphere.client.TrackMessageSizeFilter
2016-03-12 11:26:31,494 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Installed AtmosphereHandler org.icescrum.atmosphere.IceScrumAtmosphereHandler@3c9d7d9f mapped to context-path: /stream/app/*
2016-03-12 11:26:31,522 [localhost-startStop-1] INFO  org.atmosphere.cpr.DefaultBroadcaster  - /stream/app/* support Out Of Order Broadcast: false
2016-03-12 11:26:31,526 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Auto detecting WebSocketHandler in /WEB-INF/classes/
2016-03-12 11:26:33,629 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Installed WebSocketProtocol org.atmosphere.websocket.protocol.SimpleHttpProtocol
2016-03-12 11:26:33,631 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Atmosphere is using async support: org.atmosphere.container.Servlet30CometSupport running under container: Apache Tomcat/7.0.56 (Debian) using javax.servlet/3.0
2016-03-12 11:26:33,632 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Installed AtmosphereInterceptor Browser disconnection detection.
2016-03-12 11:26:33,632 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Installed AtmosphereInterceptor Atmosphere JavaScript Protocol.
2016-03-12 11:26:33,633 [localhost-startStop-1] WARN  org.atmosphere.cpr.AtmosphereFramework  - No BroadcasterCache configured. Broadcasted message between client reconnection will be LOST. It is recommended to configure the org.atmosphere.cache.UUIDBroadcasterCache
2016-03-12 11:26:33,633 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Using BroadcastFilter: org.atmosphere.client.TrackMessageSizeFilter
2016-03-12 11:26:33,633 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Shared ExecutorService supported: true
2016-03-12 11:26:33,633 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - HttpSession supported: false
2016-03-12 11:26:33,633 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Using BroadcasterFactory: org.atmosphere.cpr.DefaultBroadcasterFactory
2016-03-12 11:26:33,633 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Using WebSocketProcessor: org.atmosphere.websocket.DefaultWebSocketProcessor
2016-03-12 11:26:33,633 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Using Broadcaster: org.icescrum.atmosphere.IceScrumBroadcaster
2016-03-12 11:26:33,634 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  - Atmosphere Framework 1.0.15 started.
2016-03-12 11:26:33,634 [localhost-startStop-1] INFO  org.atmosphere.cpr.AtmosphereFramework  -

		For Atmosphere Framework Commercial Support, visit
		http://www.async-io.org/ or send an email to support@async-io.org

2016-03-12 11:26:33,837 [Thread-8] INFO  org.atmosphere.cpr.AtmosphereFramework  -

		Current version of Atmosphere 1.0.15
		Newest version of Atmosphere available 2.0.10

2016-03-12 11:29:49,344 [http-nio-127.0.0.1-8080-exec-2] ERROR org.grails.plugin.resource.ResourceMeta  - Resource not found: /icescrum/plugins/icescrum-plugin-chat-0.1/js/flXHR/checkplayer.js

[Nicolas Noullet]

Marcus,

I sent you an email but you did not answer, is your problem solved?

Nicolas

[Autor]

Entradas