Thanks for your response!
I even tried "password" and my username does not contain any special character and is only 7 characters long. If highly doubt that this is the issue.
How can I check if RSA settings are correct and available?
Where can I change the debug level?
Announcement
Collapse
No announcement yet.
Unable to enable Guard
Collapse
X
-
Problem loading password RSA key
Hi!
Your log says:
message="Problem loading password RSA key"
If this is not the error, try to get more info. Have you tried debug level "info" instead of "error" to get some log output?
Leave a comment:
-
Update
Edit:
I just read the "Please read before posting Errors, Problems or Bugs", so here you go with these information:
OX Version:
UI version: 7.6.2 Rev20
Server version: 7.6.2-Rev26
OS:
Debian GNU/Linux 7 (wheezy)
Client:
Max OSX 10.5.5
Safari 8.0.8, Firefox Developer Edition 42.0a2
Java version:
java version "1.7.0_79"
OpenJDK Runtime Environment (IcedTea 2.5.6) (7u79-2.5.6-1~deb7u1)
OpenJDK 64-Bit Server VM (build 24.79-b02, mixed mode)
Installed packages:
Code:ii open-xchange 7.6.2-26 all The Open-Xchange backend ii open-xchange-admin 7.6.2-26 all The Open-Xchange backend administration extension ii open-xchange-appsuite 7.6.2-20 all OX App Suite HTML5 client ii open-xchange-appsuite-backend 7.6.2-26 all Backend extensions to serve OX App Suite frontend ii open-xchange-appsuite-l10n-en-us 7.6.2-20 all Translation of the OX App Suite HTML5 client (en_US) ii open-xchange-appsuite-manifest 7.6.2-20 all Manifest and apps included in the OX App Suite HTML5 client ii open-xchange-authentication-database 7.6.2-26 all Module for authenticating users using the password stored in MySQL ii open-xchange-authorization-standard 7.6.2-26 all Module implementing the default authorization ii open-xchange-core 7.6.2-26 all The essential core of an Open-Xchange backend ii open-xchange-dav 7.6.2-26 all The Open-Xchange CardDAV and CalDAV implementation ii open-xchange-drive 7.6.2-26 all Server module for Open-Xchange Drive file synchronization ii open-xchange-drive-comet 7.6.2-26 all Drive push implementation using Comet and using less system resources ii open-xchange-freebusy 7.6.2-26 all Free/Busy module ii open-xchange-grizzly 7.6.2-26 all The Open-Xchange HTTP Server and Servlet Container ii open-xchange-guard 2.0.0-8 all Guard - the Open-Xchange security solution. This package contains the Guard backend component. ii open-xchange-guard-backend 7.6.2-7 all OX Guard backend component ii open-xchange-guard-ui 2.0.0-8 all Guard - the Open-Xchange security solution ii open-xchange-guard-ui-static 2.0.0-8 all Guard - the Open-Xchange security solution ii open-xchange-halo 7.6.2-26 all The Open-Xchange backend halo extension ii open-xchange-imap 7.6.2-26 all The Open-Xchange IMAP Bundle ii open-xchange-l10n-en-us 7.6.2-26 all Package containing Open-Xchange backend localization for en_US ii open-xchange-oauth 7.6.2-26 all The Open-Xchange OAuth implementation ii open-xchange-osgi 7.6.2-26 all 3rd party OSGi bundles used by the Open-Xchange backend ii open-xchange-passwordchange-script 7.6.2-26 all The Open-Xchange password-change bundle that utilizes a script (e.g. "/bin/changepwd.sh") to change the password ii open-xchange-push-imapidle 7.6.2-26 all The Open-Xchange IMAP IDLE Push Bundle ii open-xchange-rest 7.6.2-26 all Micro services REST API ii open-xchange-smtp 7.6.2-26 all The Open-Xchange Server SMTP Bundle ii open-xchange-system 7.6.2-26 all system integration specific infrastructure ii open-xchange-xerces-sun 7.6.2-26 all Xerces Compat for Sun Java
Code:bundlename: org.eclipse.osgi status: ACTIVE bundlename: cern.colt status: ACTIVE bundlename: com.ctc.wstx status: ACTIVE bundlename: com.google.android.gcm status: ACTIVE bundlename: com.google.api.client status: ACTIVE bundlename: com.google.common status: ACTIVE bundlename: com.google.gdata status: ACTIVE bundlename: com.hazelcast status: ACTIVE bundlename: com.openexchange.admin.console.common status: ACTIVE bundlename: com.openexchange.admin status: ACTIVE bundlename: com.openexchange.admin.plugin.hosting status: ACTIVE bundlename: com.openexchange.admin.rmi status: ACTIVE bundlename: com.openexchange.annotation status: ACTIVE bundlename: com.openexchange.apps.manifests.json status: ACTIVE bundlename: com.openexchange.appsuite status: ACTIVE bundlename: com.openexchange.authentication.database status: ACTIVE bundlename: com.openexchange.authorization.standard status: ACTIVE bundlename: com.openexchange.caching.events status: ACTIVE bundlename: com.openexchange.caching.events.ms status: ACTIVE bundlename: com.openexchange.caching status: ACTIVE bundlename: com.openexchange.caldav status: ACTIVE bundlename: com.openexchange.calendar status: ACTIVE bundlename: com.openexchange.calendar.json status: ACTIVE bundlename: com.openexchange.capabilities.impl status: ACTIVE bundlename: com.openexchange.capabilities status: ACTIVE bundlename: com.openexchange.capabilities.json status: ACTIVE bundlename: com.openexchange.carddav status: ACTIVE bundlename: com.openexchange.charset status: ACTIVE bundlename: com.openexchange.cluster.lock status: ACTIVE bundlename: com.openexchange.cluster.timer status: ACTIVE bundlename: com.openexchange.common status: ACTIVE bundlename: com.openexchange.config.cascade.context status: ACTIVE bundlename: com.openexchange.config.cascade status: ACTIVE bundlename: com.openexchange.config.cascade.user status: ACTIVE bundlename: com.openexchange.configread status: ACTIVE bundlename: com.openexchange.contact.storage.rdb status: ACTIVE bundlename: com.openexchange.contactcollector.impl status: ACTIVE bundlename: com.openexchange.contactcollector status: ACTIVE bundlename: com.openexchange.contacts.json status: ACTIVE bundlename: com.openexchange.continuation status: ACTIVE bundlename: com.openexchange.continuation.json status: ACTIVE bundlename: com.openexchange.control status: ACTIVE bundlename: com.openexchange.conversion.engine status: ACTIVE bundlename: com.openexchange.conversion status: ACTIVE bundlename: com.openexchange.conversion.servlet status: ACTIVE bundlename: com.openexchange.conversion.simple status: ACTIVE bundlename: com.openexchange.crypto status: ACTIVE bundlename: com.openexchange.data.conversion.ical.ical4j status: ACTIVE bundlename: com.openexchange.database status: ACTIVE bundlename: com.openexchange.database.migration status: ACTIVE bundlename: com.openexchange.dataretention status: ACTIVE bundlename: com.openexchange.datatypes.genericonf status: ACTIVE bundlename: com.openexchange.datatypes.genericonf.storage status: ACTIVE bundlename: com.openexchange.documentation status: ACTIVE bundlename: com.openexchange.documentation.json status: ACTIVE bundlename: com.openexchange.drive.events.apn status: ACTIVE bundlename: com.openexchange.drive.events.gcm status: ACTIVE bundlename: com.openexchange.drive.events status: ACTIVE bundlename: com.openexchange.drive.events.subscribe status: ACTIVE bundlename: com.openexchange.drive status: ACTIVE bundlename: com.openexchange.drive.json.comet status: ACTIVE bundlename: com.openexchange.drive.json status: ACTIVE bundlename: com.openexchange.events.remote status: ACTIVE bundlename: com.openexchange.file.storage.composition status: ACTIVE bundlename: com.openexchange.file.storage.config status: ACTIVE bundlename: com.openexchange.file.storage.generic status: ACTIVE bundlename: com.openexchange.file.storage.infostore status: ACTIVE bundlename: com.openexchange.file.storage status: ACTIVE bundlename: com.openexchange.file.storage.json status: ACTIVE bundlename: com.openexchange.file.storage.rdb status: ACTIVE bundlename: com.openexchange.find.basic status: ACTIVE bundlename: com.openexchange.find status: ACTIVE bundlename: com.openexchange.find.json status: ACTIVE bundlename: com.openexchange.folder.json status: ACTIVE bundlename: com.openexchange.freebusy status: ACTIVE bundlename: com.openexchange.freebusy.json status: ACTIVE bundlename: com.openexchange.freebusy.provider.internal status: ACTIVE bundlename: com.openexchange.freebusy.service.impl status: ACTIVE bundlename: com.openexchange.frontend.uwa status: ACTIVE bundlename: com.openexchange.frontend.uwa.json status: ACTIVE bundlename: com.openexchange.global status: ACTIVE bundlename: com.openexchange.google.api.client status: ACTIVE bundlename: com.openexchange.groupware.settings.extensions status: ACTIVE bundlename: com.openexchange.groupware.tools status: ACTIVE bundlename: com.openexchange.guard status: ACTIVE bundlename: com.openexchange.halo.appointments status: ACTIVE bundlename: com.openexchange.halo status: ACTIVE bundlename: com.openexchange.halo.json status: ACTIVE bundlename: com.openexchange.halo.mail status: ACTIVE bundlename: com.openexchange.halo.pictures status: ACTIVE bundlename: com.openexchange.halo.xing status: ACTIVE bundlename: com.openexchange.hazelcast.configuration status: ACTIVE bundlename: com.openexchange.hazelcast status: ACTIVE bundlename: com.openexchange.hazelcast.serialization status: ACTIVE bundlename: com.openexchange.html status: ACTIVE bundlename: com.openexchange.http.client status: ACTIVE bundlename: com.openexchange.http.client.json status: ACTIVE bundlename: com.openexchange.http.client.xml status: ACTIVE bundlename: com.openexchange.http.deferrer status: ACTIVE bundlename: com.openexchange.http.grizzly status: ACTIVE bundlename: com.openexchange.http.requestwatcher status: ACTIVE bundlename: com.openexchange.http.testservlet status: ACTIVE bundlename: com.openexchange.i18n status: ACTIVE bundlename: com.openexchange.imap status: ACTIVE bundlename: com.openexchange.importexport status: ACTIVE bundlename: com.openexchange.index status: ACTIVE bundlename: com.openexchange.itip.json status: ACTIVE bundlename: com.openexchange.java status: ACTIVE bundlename: com.openexchange.jcharset status: ACTIVE bundlename: com.openexchange.jolokia status: ACTIVE bundlename: com.openexchange.jslob.config status: ACTIVE bundlename: com.openexchange.jslob status: ACTIVE bundlename: com.openexchange.jslob.json status: ACTIVE bundlename: com.openexchange.jslob.storage.db status: ACTIVE bundlename: com.openexchange.jump status: ACTIVE bundlename: com.openexchange.jump.json status: ACTIVE bundlename: com.openexchange.logback.classic.extensions status: RESOLVED bundlename: com.openexchange.logback.configuration status: RESOLVED bundlename: com.openexchange.logback.core.extensions status: RESOLVED bundlename: com.openexchange.logback.extensions status: ACTIVE bundlename: com.openexchange.logging status: ACTIVE bundlename: com.openexchange.mail.attachment.impl status: ACTIVE bundlename: com.openexchange.mail.autoconfig status: ACTIVE bundlename: com.openexchange.mail.autoconfig.json status: ACTIVE bundlename: com.openexchange.mailmapping status: ACTIVE bundlename: com.openexchange.management.impl status: ACTIVE bundlename: com.openexchange.management status: ACTIVE bundlename: com.openexchange.message.timeline status: ACTIVE bundlename: com.openexchange.messaging status: ACTIVE bundlename: com.openexchange.modules.json status: ACTIVE bundlename: com.openexchange.modules.model status: ACTIVE bundlename: com.openexchange.modules.storage status: ACTIVE bundlename: com.openexchange.monitoring status: ACTIVE bundlename: com.openexchange.ms status: ACTIVE bundlename: com.openexchange.net status: ACTIVE bundlename: com.openexchange.oauth.facebook status: ACTIVE bundlename: com.openexchange.oauth.flickr status: ACTIVE bundlename: com.openexchange.oauth.google status: ACTIVE bundlename: com.openexchange.oauth status: ACTIVE bundlename: com.openexchange.oauth.json status: ACTIVE bundlename: com.openexchange.oauth.msliveconnect status: ACTIVE bundlename: com.openexchange.oauth.provider status: ACTIVE bundlename: com.openexchange.oauth.tumblr status: ACTIVE bundlename: com.openexchange.oauth.twitter status: ACTIVE bundlename: com.openexchange.oauth.xing status: ACTIVE bundlename: com.openexchange.oauth.yahoo status: ACTIVE bundlename: com.openexchange.osgi status: ACTIVE bundlename: com.openexchange.passwordchange.script status: ACTIVE bundlename: com.openexchange.passwordchange.servlet status: ACTIVE bundlename: com.openexchange.preview status: ACTIVE bundlename: com.openexchange.printing status: ACTIVE bundlename: com.openexchange.proxy status: ACTIVE bundlename: com.openexchange.proxy.servlet status: ACTIVE bundlename: com.openexchange.publish.basic status: ACTIVE bundlename: com.openexchange.publish status: ACTIVE bundlename: com.openexchange.publish.online.infostore status: ACTIVE bundlename: com.openexchange.push.imapidle status: ACTIVE bundlename: com.openexchange.push.impl status: ACTIVE bundlename: com.openexchange.push status: ACTIVE bundlename: com.openexchange.push.ms status: ACTIVE bundlename: com.openexchange.push.udp status: ACTIVE bundlename: com.openexchange.quartz status: ACTIVE bundlename: com.openexchange.quota status: ACTIVE bundlename: com.openexchange.rdiff status: ACTIVE bundlename: com.openexchange.report.appsuite status: ACTIVE bundlename: com.openexchange.report.appsuite.serialization status: ACTIVE bundlename: com.openexchange.rest.client status: ACTIVE bundlename: com.openexchange.rest.services.adminAuth status: ACTIVE bundlename: com.openexchange.rest.services.configuration status: ACTIVE bundlename: com.openexchange.rest.services.database status: ACTIVE bundlename: com.openexchange.rest.services.html status: ACTIVE bundlename: com.openexchange.rest.services status: ACTIVE bundlename: com.openexchange.rest.services.users.mailMapping status: ACTIVE bundlename: com.openexchange.rmi status: ACTIVE bundlename: com.openexchange.scripting.rhino.apiBridge status: ACTIVE bundlename: com.openexchange.scripting.rhino status: ACTIVE bundlename: com.openexchange.search status: ACTIVE bundlename: com.openexchange.secret status: ACTIVE bundlename: com.openexchange.secret.recovery status: ACTIVE bundlename: com.openexchange.secret.recovery.json status: ACTIVE bundlename: com.openexchange.secret.recovery.mail status: ACTIVE bundlename: com.openexchange.server status: ACTIVE bundlename: com.openexchange.session.reservation.impl status: ACTIVE bundlename: com.openexchange.sessiond status: ACTIVE bundlename: com.openexchange.sessionstorage.hazelcast.serialization status: ACTIVE bundlename: com.openexchange.sessionstorage status: ACTIVE bundlename: com.openexchange.smtp status: ACTIVE bundlename: com.openexchange.snippet status: ACTIVE bundlename: com.openexchange.snippet.json status: ACTIVE bundlename: com.openexchange.snippet.mime status: ACTIVE bundlename: com.openexchange.snippet.rdb status: ACTIVE bundlename: com.openexchange.sql status: ACTIVE bundlename: com.openexchange.startup.impl status: ACTIVE bundlename: com.openexchange.subscribe status: ACTIVE bundlename: com.openexchange.system.extension status: RESOLVED bundlename: com.openexchange.tasks.json status: ACTIVE bundlename: com.openexchange.templating status: ACTIVE bundlename: com.openexchange.textxtraction status: ACTIVE bundlename: com.openexchange.threadpool status: ACTIVE bundlename: com.openexchange.tokenlogin.impl status: ACTIVE bundlename: com.openexchange.tokenlogin status: ACTIVE bundlename: com.openexchange.tokenlogin.json status: ACTIVE bundlename: com.openexchange.tx status: ACTIVE bundlename: com.openexchange.user.json status: ACTIVE bundlename: com.openexchange.utils status: ACTIVE bundlename: com.openexchange.version status: ACTIVE bundlename: com.openexchange.webdav.acl status: ACTIVE bundlename: com.openexchange.webdav.directory status: ACTIVE bundlename: com.openexchange.xerces.sun status: ACTIVE bundlename: com.openexchange.xing.access status: ACTIVE bundlename: com.openexchange.xing status: ACTIVE bundlename: com.openexchange.xml status: ACTIVE bundlename: org.apache.commons.cli status: ACTIVE bundlename: org.apache.geronimo.specs.geronimo-annotation_1.0_spec status: ACTIVE bundlename: javapns.notification.management status: ACTIVE bundlename: javax.mail status: ACTIVE bundlename: javax.servlet status: ACTIVE bundlename: jcl.over.slf4j status: ACTIVE bundlename: joda-time status: ACTIVE bundlename: jul.to.slf4j status: ACTIVE bundlename: liquibase.core status: ACTIVE bundlename: log4j.over.slf4j status: ACTIVE bundlename: ch.qos.logback.classic status: ACTIVE bundlename: ch.qos.logback.core status: ACTIVE bundlename: net.fortuna.ical4j status: ACTIVE bundlename: org.apache.commons.codec status: ACTIVE bundlename: org.apache.commons.io status: ACTIVE bundlename: org.apache.commons.lang status: ACTIVE bundlename: org.apache.commons.net status: ACTIVE bundlename: org.apache.felix.eventadmin status: ACTIVE bundlename: org.apache.felix.eventadmin.monitoring status: ACTIVE bundlename: org.apache.felix.gogo.command status: ACTIVE bundlename: org.apache.felix.gogo.runtime status: ACTIVE bundlename: org.apache.felix.gogo.shell status: ACTIVE bundlename: org.apache.tika status: ACTIVE bundlename: org.codehaus.stax2 status: ACTIVE bundlename: org.eclipse.equinox.console status: ACTIVE bundlename: org.eclipse.osgi.services status: ACTIVE bundlename: org.eclipse.osgi.util status: ACTIVE bundlename: org.ho.jyaml status: ACTIVE bundlename: org.javasimon status: ACTIVE bundlename: org.json status: ACTIVE bundlename: org.w3c.css.sac status: ACTIVE bundlename: org.xmlpull status: ACTIVE bundlename: org.slf4j.osgi-over-slf4j status: ACTIVE bundlename: slf4j.api status: ACTIVE
Code:7116 ? Sl 0:07 /usr/bin/java -Xmx1024m -classpath /opt/open-xchange/guard/lib/* -Dlogback.configurationFile=/opt/open-xchange/guard/etc/logback.xml com.openexchange.guard.server.Startup 7210 ? Sl 0:48 /usr/bin/java -Dsun.net.inetaddr.ttl=3600 -Dnetworkaddress.cache.ttl=3600 -Dnetworkaddress.cache.negative.ttl=10 -Dlogback.threadlocal.put.duplicate=false -server -Djava.awt.headless=true -XX:MaxPermSize=256m -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:NewRatio=3 -XX:+UseTLAB -XX:+DisableExplicitGC -Dosgi.compatibility.bootdelegation=false -XX:-OmitStackTraceInFastThrow -Xmx2048m -Djava.awt.headless=true -Dopenexchange.propdir=/opt/open-xchange/etc -jar /opt/open-xchange/bundles/org.eclipse.osgi_3.9.1.v20140110-1610.jar -configuration file:/opt/open-xchange/osgi
Leave a comment:
-
Unable to enable Guard
After installing and setting up Guard I am not able to initiate it for encrypting files from the web interface.
After pressing "Start" in the "Guard Security Settings" pane and entering a password and recover email, I get the notification "Problems creating keys, please try again later".
The following can be found in /var/log/open-xchange/guard/guard.log:
Code:d=Mon Aug 03 02:42:43 CDT 2015, t=qtp421404300-19, level=INFO, PID=83, IP=<myIP>, command=/login, action=login, module=server.MainServlet, message="Action: login From IP: <myIP>" d=Mon Aug 03 02:43:36 CDT 2015, t=qtp421404300-21, level=INFO, PID=85, IP=<myIP>, command=/login, action=create, module=server.MainServlet, message="Action: create From IP: <myIP>" d=Mon Aug 03 02:43:36 CDT 2015, t=qtp421404300-21, level=INFO, PID=85, IP=<myIP>, command=/login, action=create, module=encr.EncrLib, message="String index out of range: 24" d=Mon Aug 03 02:43:36 CDT 2015, t=qtp421404300-21, level=ERROR, PID=85, IP=<myIP>, command=/login, action=create, module=util.Core, message="Problem loading password RSA key", error_class=com.openexchange.guard.exceptions.BadPasswordException, error_message="Bad Password", error_trace="at com.openexchange.guard.encr.GuardKeys.getDecodedPrivate(GuardKeys.java:249)^M at com.openexchange.guard.encr.GuardKeys.getDecodedPrivate(GuardKeys.java:212)^M at com.openexchange.guard.util.Core.loadPrivate(Core.java:376)^M at com.openexchange.guard.util.Core.decr(Core.java:347)^M at com.openexchange.guard.util.Core.checkEpass(Core.java:336)^M at com.openexchange.guard.util.Core.getJSON(Core.java:211)^M at com.openexchange.guard.server.Auth.createKeys(Auth.java:96)^M at com.openexchange.guard.server.MainServlet.doPost(MainServlet.java:840)^M at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)^M at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)^M at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:808)^M at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:587)^M at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221)^M at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)^M at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)^M at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)^M at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)^M at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)^M at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)^M at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)^M at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)^M at org.eclipse.jetty.server.Server.handle(Server.java:497)^M at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)^M at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)^M at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)^M at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)^M at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)^M at java.lang.Thread.run(Thread.java:745)^M " d=Mon Aug 03 02:43:36 CDT 2015, t=qtp421404300-21, level=ERROR, PID=85, IP=<myIP>, command=/login, action=create, module=server.MainServlet, message="Error creating keys", error_class=com.openexchange.guard.exceptions.GuardMissingParameter, error_message="Missing JSON parameter password", error_trace="at com.openexchange.guard.util.Core.getStringFromJson(Core.java:488)^M at com.openexchange.guard.server.Auth.createKeys(Auth.java:108)^M at com.openexchange.guard.server.MainServlet.doPost(MainServlet.java:840)^M at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)^M at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)^M at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:808)^M at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:587)^M at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221)^M at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)^M at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)^M at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)^M at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)^M at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)^M at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)^M at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)^M at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)^M at org.eclipse.jetty.server.Server.handle(Server.java:497)^M at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)^M at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)^M at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)^M at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)^M at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)^M at java.lang.Thread.run(Thread.java:745)^M " d=Mon Aug 03 02:43:36 CDT 2015, t=qtp421404300-21, level=ERROR, PID=85, IP=<myIP>, result=fail, action=create, command=/login, module=server.MainServlet, message="Fail with url: /oxguard/login", error_class=com.openexchange.guard.exceptions.GuardMissingParameter, error_message="Missing JSON parameter password", error_trace="at com.openexchange.guard.util.Core.getStringFromJson(Core.java:488)^M at com.openexchange.guard.server.Auth.createKeys(Auth.java:108)^M at com.openexchange.guard.server.MainServlet.doPost(MainServlet.java:840)^M at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)^M at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)^M at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:808)^M at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:587)^M at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221)^M at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)^M at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)^M at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)^M at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)^M at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)^M at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)^M at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)^M at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)^M at org.eclipse.jetty.server.Server.handle(Server.java:497)^M at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)^M at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)^M at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)^M at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)^M at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)^M at java.lang.Thread.run(Thread.java:745)^M "
My guard.properties file is the following (I removed the unused, optional settings because of the character limit):
Code:# Specify the hostname / IP address of the Open-Xchange configdb. com.openexchange.guard.configdbHostname=localhost # Specify if the name of configdb was changed. Default is configdb com.openexchange.guard.configdbName=configdb # Specify the hostname / IP address of the Guard database. com.openexchange.guard.oxguardDatabaseHostname=localhost # For readonly slave (optional) # com.openexchange.guard.oxguardDatabaseRead= # Specify the hostname / IP address of Guard guest shards # This is for the database shards used when sending to Guest users # Defines where the NEXT shard will go when created # Stores the Guest keys # com.openexchange.guard.oxguardShardDatabase=localhost # For readonly slave (optional) # com.openexchange.guard.oxguardShardRead= # Specify the MySQL username and password for accessing both the # Open-xchange configdb database and the Guard database. com.openexchange.guard.databaseUsername=ox-guard com.openexchange.guard.databasePassword=<myDBPassword> # Specify the username and password for accessing the support API of OX Guard #com.openexchange.guard.supportapiusername= #com.openexchange.guard.supportapipassword= #The amount of hours specifying how long a deleted and exposed key will be #marked as "exposed", or 0 for disabling automatic reset of exposed keys. #Note: Resetting is scheduled once a day #default: 168 hours = 1 Week com.openexchange.guard.exposedKeyDurationInHours=0 # Specify the hostname of the Open-Xchange REST API server. The REST API is a # service on the Open-Xchange backend. Use localhost in case that the Guard service # is deployed on the same system as the Open-Xchange backend. In case that the REST # API is deployed on a separate system ensure that Guard can connect, see clustering # documentation for Guard for more details. com.openexchange.guard.restApiHostname=localhost # Port for communicating with the OX Backend/REST API. Defaults to 8009 # com.openexchange.guard.OXBackendPort = 8009 # Specify the authentication username and password for the basic HTTP authentication # as the Open-Xchange REST API requires such. com.openexchange.guard.restApiUsername=oxrestapi com.openexchange.guard.restApiPassword=<myRESTPassword> # When Guard sends an eMail to external recipients those recipients will be able to # access the encrypted content by opening a link in that eMail. The description and # the link of that eMail are not encrypted and always readable by the recipient. The # link points to the Guard reader for external recipients, a servlet to decrypt and # display the encrypted eMail content. Specify which domain and path should be used # The Https link will be created dynamically by Guard. # This value will be used as the default unless over-written by cascade value # com.openexchange.guard.externalReaderURL com.openexchange.guard.externalReaderPath=<myTLD>/appsuite/api/oxguard/reader/reader.html # When Guard sends an encrypted eMail to members, they may not be using the webmail UI # to read the email. A help file is attached, and a link will be provided to log into # their webmail to read the encrypted item. This setting is used to point to a generic # log in for the webmail system. Sent to multiple recipients, so not customized to # the individual recipient. OK domain:port. HTTPS will always be added # This value will be used as the default unless over-written by cascade value # com.openexchange.guard.externalOxUI com.openexchange.guard.externalEmailURL=<myTLD> # Specify the storage type that should be used to store encrypted objects for the Guard # backend cache. Files be be cached on this storage for up the the number of days that # will be configured in com.openexchange.guard.cacheDays. In case file is used the storage # location has to be replicated to all Guard backends in order to share cached objects # between multiple servers. Possible values are: # file - Use local file storage. # s3 - Use an Amazon S3 compatible object store. com.openexchange.guard.storage.type=file # Define the temporary upload directory for Guard Drive files in case of that the storage # type (com.openexchange.guard.storage.type) has been set to 'file'. com.openexchange.guard.storage.file.uploadDirectory=/var/spool/open-xchange/guard/uploads # Specifies the endpoint (e.g. "ec2.amazonaws.com") or a full URL, including # the protocol (e.g. "https://ec2.amazonaws.com") of the region specific AWS # endpoint this client will communicate with. Defaults to "s3.amazonaws.com" # if not defined. Required if storage type is set to "s3". # com.openexchange.guard.storage.s3.endpoint= # Specifies the name of the parent bucket to use. The bucket will be created # automatically if it not yet exists, however, it's still possible to use an # already existing one. There are some naming restrictions, please refer to # http://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html for # details. Required if storage type is set to "s3". # com.openexchange.guard.storage.s3.bucketName= # Configures the Amazon S3 region to use when creating new buckets. This value # is also used to pre-configure the client when no specific endpoint is set. # Possible values are "us-gov-west-1", "us-east-1", "us-west-1", "us-west-2", # "eu-west-1", "ap-southeast-1", "ap-southeast-2", "ap-northeast-1" and # "sa-east-1". Defaults to "us-west-2". Will only be used if endpoint is not # configured. # com.openexchange.guard.storage.s3.region=us-west-2 # Configures the AWS access key to use. Required if storage type is set to "s3". # com.openexchange.guard.storage.s3.accessKey= # Configures the AWS secret key to use. Required if storage type is set to "s3". # com.openexchange.guard.storage.s3.secretKey= # Define the log level of the Guard service. Possible values are: # error - errors only # debug - full debug details # info - info items com.openexchange.guard.logLevel=normal com.openexchange.guard.jettyLogLevel=error # Encryption configuration - Specify encryption strength and key length. This used for Proprietary Guard (version 1.2 and earlier). NOT used for PGP # If your region allows the suggested values are as follows: # AES_Key_Length: 256 # RSA_Key_Length: 2048 (Recco 2048) com.openexchange.guard.aesKeyLength=256 com.openexchange.guard.rsaKeyLength=2048 # PGP Keys can have an expiration date. The default is 10 years, or 3650 days # Set the number of days the keys will be valid for. The user will have to # create new keys after this date. # Set to 0 if no expiration date com.openexchange.guard.keyValidDays=3650 # Remote Public Key lookup. You can list Public PGP Servers here, preferrably # servers that have verified keys. Comma separated list. Can specify port # https only on port 443. # In addition it is possible to add an optional base request path; for example hkp://example.org:11371/custom/path/to/pks/lookup? com.openexchange.guard.publicPGPDirectory = hkp://keys.gnupg.net:11371, hkp://pgp.mit.edu:11371 # PGP Key's from the remote servers are stored in a cache for a set period of time # before the remote servers are queried again. Set the time for the cache here com.openexchange.guard.pgpCacheDays = 7 # Specify how long emails sent to external users should be cached in the Guard backend. # This caching is used for fast access and easy decoding of the encrypted mail content. com.openexchange.guard.cacheDays=30 # At what hour of the day should the Guard service execute the # internal maintenance cron jobs? Possible values are: # 0 - 23 com.openexchange.guard.cronHour=2 # Specify the SMTP server information for replies of external recipients. Those recipients # are able to decrypt, display and reply to eMails they receive via the link to the Guard # reader in those encrypted eMails. # The SMTP server is also used for sending password reset emails com.openexchange.guard.guestSMTPServer=<myMailServer> com.openexchange.guard.guestSMTPPort=456 com.openexchange.guard.guestSMTPUsername=hostmaster@<myTLD> com.openexchange.guard.guestSMTPPassword=<mySMTPPassword> # Emails with new passwords are sent to internal ox users when they have a new email # sent to them. These password emails are used for password reset, and when a new # key is generated for a user. This can be configured through the senders configuration # cascade, but should be sent here for system email address com.openexchange.guard.passwordFromAddress=hostmaster@<myTLD> com.openexchange.guard.passwordFromName=<myName>
Thanks for your help!
Leave a comment: