Post SSL change: menu.do not functioning

Sort:
You are not authorized to post a reply.
Author
Messages
BBryant
Advanced Member
Posts: 23
Advanced Member
    On my test system I set up Lawson (I assume) to now use the https connections, everything seems to work fine but when I bring up the /bpm/menu.do I get the following message in all frames:



    I did run the pfserv config to configure Lawson to use https, are there extra steps I am neglecting in this process?  I have been flying somewhat blind as I have been able to find little to no documentation about why menu.do is now doing this.  If needed, I can supply the Fiddler log I took of when I tried to pull the page up.
    LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
    Jimmy Chiu
    Veteran Member
    Posts: 641
    Veteran Member
      when you run the pfserv config, there should be 3 lines you need to change. Did you change all 3 to use https? After the changes are made, you will need to restart the server or processflow.
      BBryant
      Advanced Member
      Posts: 23
      Advanced Member
        3 Lines?

        I changed the following lines, and it was only 2 lines, which one am I missing?
        Please enter the IOS Host Name: lawson-test.popeyes.cvgs.net:443
        Please enter ProcessFlow Web URL: https://lawson-test.popey...et:443/bpm/daservlet

        LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
        Jimmy Chiu
        Veteran Member
        Posts: 641
        Veteran Member
          You are missing the line:

          Is IOS on secured Server? : set it to true
          BBryant
          Advanced Member
          Posts: 23
          Advanced Member
            That was already set to true.
            LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
            Jimmy Chiu
            Veteran Member
            Posts: 641
            Veteran Member
              Did you run ssoconfig to set the SSOP service?

              Option1: Use HTTP only,
              Option2: Use HTTPS for login only or
              Option3: Use HTTPS always

              If you are using option 2: You will have to do http instead of https for menu.do

              Option3 will make everything https.
              BBryant
              Advanced Member
              Posts: 23
              Advanced Member
                Posted By Jimmy Chiu on 11/08/2010 11:09 AM
                Did you run ssoconfig to set the SSOP service?

                Option1: Use HTTP only,
                Option2: Use HTTPS for login only or
                Option3: Use HTTPS always

                If you are using option 2: You will have to do http instead of https for menu.do

                Option3 will make everything https.
                Yes, I ran ssoconfig to set the SSOP service.  I am using option 3.

                LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                Jimmy Chiu
                Veteran Member
                Posts: 641
                Veteran Member
                  Can you login to portal first, then do the menu.do? Does that work?
                  BBryant
                  Advanced Member
                  Posts: 23
                  Advanced Member
                    Posted By Jimmy Chiu on 11/08/2010 01:24 PM
                    Can you login to portal first, then do the menu.do? Does that work?
                    Negative, same issue.  I even tried making it a link from my shortcuts.
                    LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                    BBryant
                    Advanced Member
                    Posts: 23
                    Advanced Member
                      Posted By Jimmy Chiu on 11/09/2010 12:10 PM
                      Do you have a customized home.htm?
                      That would be a negative.
                      LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                      John Henley
                      Senior Member
                      Posts: 3348
                      Senior Member
                        Using ssoconfig -c, export your BPM service.
                        Look at the resulting .xml file, and you will probably see that < SERVICEURL > tag still has http instead of https.
                        If so, change it and reload it.

                        Thanks for using the LawsonGuru.com forums!
                        John
                        John Henley
                        Senior Member
                        Posts: 3348
                        Senior Member
                          Using ssoconfig -c, export your BPM service.
                          Look at the resulting .xml file, and you will probably see that < SERVICEURL > tag still has http instead of https.
                          If so, change it and reload it.

                          Thanks for using the LawsonGuru.com forums!
                          John
                          BBryant
                          Advanced Member
                          Posts: 23
                          Advanced Member
                            Posted By John Henley on 11/09/2010 04:35 PM
                            Using ssoconfig -c, export your BPM service.
                            Look at the resulting .xml file, and you will probably see that < SERVICEURL > tag still has http instead of https.
                            If so, change it and reload it.

                            I think I have already tried this, here is a dump of my current BPM service config.

                            < ?xml version="1.0" encoding="ISO-8859-1"? >
                            < BATCH_LOAD FORMAT="" OVERRIDE="false" >
                                < SERVICE >
                                    < HasCredential>TRUE< /HasCredential >
                                    < LoginProcedure>Form based< /LoginProcedure >
                                    < ID >BPM< /ID >
                                    < SvcEntryAttrList >user,password< /SvcEntryAttrList >
                                    < LOGINSCHEME NAME="Form" >
                            < REF_SERVICENAME > SSOP < /REF_SERVICENAME >
                            < SERVICEURL >https://lawson-test.popeyes.cvgs.net:443/bpm/< /SERVICEURL >
                            < /LOGINSCHEME >
                                    < IdentityAttrList >user< /IdentityAttrList >
                                    < CredentialAttrList >PASSWORD< /CredentialAttrList >
                                < /SERVICE >
                            < /BATCH_LOAD >
                            LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                            Jimmy Chiu
                            Veteran Member
                            Posts: 641
                            Veteran Member
                              Are you able to get in menu.do via http link (non-http)?

                              http://lawson-test.popeyes.cvgs.net:/bpm/menu.do
                              BBryant
                              Advanced Member
                              Posts: 23
                              Advanced Member
                                Posted By Jimmy Chiu on 11/12/2010 12:11 PM
                                Are you able to get in menu.do via http link (non-http)?

                                http://lawson-test.popeyes.cvgs.net: /bpm/menu.do
                                Using http://lawson-test.popeyes.cvgs.net/bpm/menu.do generates a 403 response.

                                * Edited to reflect correct address used.
                                LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                                Jimmy Chiu
                                Veteran Member
                                Posts: 641
                                Veteran Member
                                  can you post your %LAWDIR%\system\bpm.properties?

                                  and the result from https://portalserver:port/bpm/daservlet
                                  BBryant
                                  Advanced Member
                                  Posts: 23
                                  Advanced Member
                                    Posted By Jimmy Chiu on 11/16/2010 02:52 PM
                                    can you post your %LAWDIR%\system\bpm.properties?

                                    and the result from https://portalserver:port/bpm/daservlet
                                    As per your request.  My apologies for the delay, was out sick for two days.
                                    Attachments
                                    LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                                    John Cunningham
                                    Advanced Member
                                    Posts: 31
                                    Advanced Member
                                      I had a similar issue when I upgraded to 9.0.1, I could not get to menu.do.  What version of Environment are you on?
                                      BBryant
                                      Advanced Member
                                      Posts: 23
                                      Advanced Member
                                        Posted By John Cunningham on 11/23/2010 02:21 PM
                                        I had a similar issue when I upgraded to 9.0.1, I could not get to menu.do.  What version of Environment are you on?
                                        Environment 9.0.0.7.535
                                        LSF 9.0.0.7 App 9.0.0.7 Win 2003 SP 2 Websphere 7.0 SP 5 SQL Server 2008
                                        jdever
                                        Advanced Member
                                        Posts: 29
                                        Advanced Member
                                          Did anyone ever resolve this "menu.do" issue.  I have a similar issue.  Everything looks good in the bpm.properties (pfserv config).
                                          One odd thing is that the bpm.properties has https for the daservlet. But the "https:/server/bpm/daservelt" call returns "http" as the host.
                                          >>> But, I get the same mixed response from the DEV env that does work.
                                          Thanks.
                                          You are not authorized to post a reply.