OX Guard doesn't start initially

[881822]

Hello,

after installing OX Guard (in a VM with Debian Wheezy [OX single Server]), the initial startup (/opt/open-xchange/guard/sbin/guard init) failed with this console message:

Unable to start.  Check mysql and Guard log files

For Installation of OX Guard, I followed this giude: http://oxpedia.org/wiki/index.php?ti...Suite:OX_Guard.

This is the output of "guard.log":

2014-10-25 13:05:31 DEBUG [main] c.o.g.c.Config [Config.java:488] OK Loading config file
2014-10-25 13:05:31 ERROR [main] c.o.g.c.Config [Config.java:556] Unable to load password file
2014-10-25 13:05:31 ERROR [main] c.o.g.s.Check [Check.java:98] Unable to connect to mysql.  Waiting 15 seconds for startup and try again (1 of 3)
2014-10-25 13:05:46 ERROR [main] c.o.g.s.Check [Check.java:181] Unable to start
java.sql.SQLException: Access denied for user 'openexchange'@'localhost' (using password: YES)
	at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1078) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:4237) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:4169) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:928) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.MysqlIO.proceedHandshakeWithPluggableAuthentication(MysqlIO.java:1750) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.MysqlIO.doHandshake(MysqlIO.java:1290) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.ConnectionImpl.coreConnect(ConnectionImpl.java:2493) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.ConnectionImpl.connectOneTryOnly(ConnectionImpl.java:2526) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:2311) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:834) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.JDBC4Connection.<init>(JDBC4Connection.java:47) ~[mysql-connector-java-5.1.27.jar:na]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_65]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_65]
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_65]
	at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_65]
	at com.mysql.jdbc.Util.handleNewInstance(Util.java:411) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:416) ~[mysql-connector-java-5.1.27.jar:na]
	at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:347) ~[mysql-connector-java-5.1.27.jar:na]
	at java.sql.DriverManager.getConnection(DriverManager.java:571) ~[na:1.7.0_65]
	at java.sql.DriverManager.getConnection(DriverManager.java:233) ~[na:1.7.0_65]
	at com.openexchange.guard.setup.Check.confirm(Check.java:101) ~[com.openexchange.guard.jar:na]
	at com.openexchange.guard.server.Startup.main(Startup.java:102) [com.openexchange.guard.jar:na]
2014-10-25 14:10:05 DEBUG [main] c.o.g.c.Config [Config.java:488] OK Loading config file
2014-10-25 14:10:05 ERROR [main] c.o.g.c.Config [Config.java:556] Unable to load password file
2014-10-25 14:10:05 DEBUG [main] c.o.g.s.Check [Check.java:124] OK Connection to configdb
2014-10-25 14:14:37 DEBUG [main] c.o.g.c.Config [Config.java:488] OK Loading config file
2014-10-25 14:14:37 ERROR [main] c.o.g.c.Config [Config.java:556] Unable to load password file
2014-10-25 14:14:38 DEBUG [main] c.o.g.s.Check [Check.java:124] OK Connection to configdb

The user/password in the "guard.properties" is the same as in the "config_db.properties".

Any idea, what's wrong?

[881822]

Leider hatte ich wohl das Paket open-xchange-rest nicht installiert.

Nachdem dieses Problem nun behoben ist, ist der log-Eintrag in der /guard.log nun:

2014-10-27 19:10:35 DEBUG [main] c.o.g.c.Config [Config.java:488] OK Loading config file
2014-10-27 19:10:36 DEBUG [main] c.o.g.s.Check [Check.java:124] OK Connection to configdb
2014-10-27 19:10:37 INFO [main] c.o.g.s.MasterPasswordCreator [MasterPasswordCreator.java:78] Password file already exists.  Using existing
2014-10-27 19:10:37 ERROR [main] c.o.g.d.DbQuery [DbQuery.java:185] Failed with url:http://localhost:8009/preliminary/database/v1/configdb/readOnly
2014-10-27 19:10:37 ERROR [main] c.o.g.d.DbQuery [DbQuery.java:186] Failed with query:{"e556e780-8524-45ce-a353-f10e4a207ab5": {"query": "SELECT * FROM db_pool LIMIT 1","params" : []} }
2014-10-27 19:10:37 ERROR [main] c.o.g.u.CheckOx [CheckOx.java:76] Error working with database
java.lang.Exception: Blank response from OX Backend
	at com.openexchange.guard.database.DbQuery.putRequest(DbQuery.java:190) ~[com.openexchange.guard.jar:na]
	at com.openexchange.guard.database.DbQuery.putRequest(DbQuery.java:122) ~[com.openexchange.guard.jar:na]
	at com.openexchange.guard.database.DbQuery.readFromConfigDb(DbQuery.java:286) ~[com.openexchange.guard.jar:na]
	at com.openexchange.guard.util.CheckOx.oxAlive(CheckOx.java:70) ~[com.openexchange.guard.jar:na]
	at com.openexchange.guard.setup.OxDatabaseCreateor.create(OxDatabaseCreateor.java:91) [com.openexchange.guard.jar:na]
	at com.openexchange.guard.server.HandleArgs.handle(HandleArgs.java:37) [com.openexchange.guard.jar:na]
	at com.openexchange.guard.setup.Check.confirm(Check.java:174) [com.openexchange.guard.jar:na]
	at com.openexchange.guard.server.Startup.main(Startup.java:102) [com.openexchange.guard.jar:na]
2014-10-27 19:10:37 ERROR [main] c.o.g.s.OxDatabaseCreateor [OxDatabaseCreateor.java:92] Unable to establish REST API.  Please check settings and make sure the OX backend has open-xchange-rest installed

[KeepXtreme]

gleiches Problem wie in: https://forum.open-xchange.com/showt...ert-nicht-mehr

[johann8]

Installiere das Packet open-xchange-rest aus der 7.6.0 Version, dann funktioniert alles wieder.

[881822]

mit dem dort beschriebenen Ansatz (edit server.properties) klappt es nun. Im Produktiv-System kommt die folgende Fehlermeldung in der guard.log:

2014-10-28 22:41:23 ERROR [main] c.o.g.s.Check [Check.java:181] Unable to start
java.lang.IllegalArgumentException: URLDecoder: Illegal hex characters in escape (%) pattern - For input string: "/n"

Heißt das, dass das Password ein ungültiges zeichen enthält? Wie kann ich das passowrt des user "openexchange" ändern? Editieren der config_db.properties ist klar und das ändern des mysql-users "openechange" ebenfalls. Leider startet OX trotzdem nicht mehr nach der Änderung ... :-(

[881822]

sorry for writing many posts - config_db password is changed and guard is startet.

Guard-capabilities (mail and drive) ist activated for some users. Issue is, that no user is asked initially for a secutity password in the settings. The dialoge only supplies a possibility to change the password, which doesn't work, because the old PW isn't set before ...

What can I do now?

[KeepXtreme]

@881822: was genau hast du an der server.properties geändert? Eventuell komme ich damit dann weiter...

gruß
KX

[881822]

Ich habe lediglich "com.openexchange.rest.services.basic-auth.login" und "com.openexchange.rest.services.basic-auth.password" auf die gleichen Werte gesetzt, wie "com.openexchange.restAptUsername" und "com.openexchange.restAptPassword" in der /opt/open-xchange/guard/etc/guard.properties.

Nebenbei habe ich festgestellt, dass ein "%" im Passwort Probleme bereitet.

[johann8]

Hallo Rene,

vielen Dank für den Tipp. Damit konnte ich das Problem mit OX Guard in meiner Installation beheben. Merkwürdig ist nur, dass das Ganze in der Version 7.6.0 funktionierte.
Hast Du auch das Problem mit den Umlauten in verschlüsselten Mails?

Gruß Johann

[KeepXtreme]

@Rene: wirklich "com.openexchange.restAptUsername" hab das jetzt mal zu den normalen Einträgen in der guard.properties hinzugefügt - leider keine Besserung...

[881822]

Hatte mich verschrieben. Der Wert heisst "com.openexchange.restApiUsername" bzw. "com.openexchange.restApiPassword"

[KeepXtreme]

ich hatte mich schon gewundert
hilft mir aber leider nicht weiter, bei mir liegt das Problem wohl irgendwo an anderer Stelle... :S

edit:// nicht zufällig "com.openexchange.guard.restApiUsername=" ?^^