Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

Prime LMS 4.2 no http/https access after installation

Hi friends,

I installed the LMS as ova template on ESXi and be able to connect via SSH, but when I try to connect via http or https I got the following error.

Forbidden

You don't have permission to access / on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Is there anything I can do?? I read a lot of documents and google results but never get an satisfied answer.

regards,

Sebastian

11 REPLIES
New Member

Prime LMS 4.2 no http/https access after installation

I had a similar problem with LMS 4.1 on Windows, which I described here:

http://teknowfile.blogspot.com/2012/02/obscure-problem-with-lms-41.html

Basically, you may try to go to Admin » Trust Management » Local Server » Browser-Server Security Mode Setup, select Change Setting To: Enable and apply.

I have also just started to run LMS 4.2 on a soft appliance and I see it has changed from 4.1 so this may or may not solve your problem.

Prime LMS 4.2 no http/https access after installation

Hi,

Thanks for that reply, but that don't help because I'm not able to open the GUI. I never was it. I always get the error message!

New Member

Prime LMS 4.2 no http/https access after installation

In that case, you may want to try getting into the shell (ssh to the box then "shell") and do this:

# lsof -i tcp | grep web_serve

You should see "web_serve" processes listening on port 443 (cscoapch_ssl) or 1741 (cscoapch) -- you should be able to see what port it is running on either way.

Prime LMS 4.2 no http/https access after installation

I see not the default ports and the other ports are not working, I guess they are internal ports for use.

I already restated the server and the daemon dmgtd.

thats what I see:

[lms01/root-ade ~]# lsof -i tcp | grep web_serve

web_serve  1712 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  1712 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  1712 casuser   19u  IPv4 570956       TCP localhost.localdomain:58788->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  1724 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  1724 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  1724 casuser   19u  IPv4 571589       TCP localhost.localdomain:37114->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  1725 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  1725 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  1725 casuser   19u  IPv4 572194       TCP localhost.localdomain:42972->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  9557 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  9557 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  9557 casuser   19u  IPv4 578575       TCP localhost.localdomain:53615->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  9565 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  9565 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  9565 casuser   19u  IPv4 579214       TCP localhost.localdomain:49750->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve  9566 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve  9566 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve  9566 casuser   19u  IPv4 579805       TCP localhost.localdomain:38145->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve 16258 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve 16258 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve 16258 casuser   19u  IPv4 555407       TCP localhost.localdomain:49648->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve 22281 casuser    4u  IPv4  43620       TCP *:cscoapch_ssl (LISTEN)

web_serve 22281 casuser    5u  IPv4  43622       TCP *:cscoapch (LISTEN)

web_serve 22281 casuser   18u  IPv4 373369       TCP srvcslms01:cscoapch->srvcslms01:53997 (ESTABLISHED)

Prime LMS 4.2 no http/https access after installation

OH my goodness, it works

I always tried by IE and it never works...once I checked the log of the appache and checked the httpd config I got the idea to try firefox...it works...Now IE with the full URL I need works too...crazy but good, now I can go on with testting this software to convince my business...

thanks for you replies..

regards,

sebastian

New Member

Prime LMS 4.2 no http/https access after installation

Hey Sebastian,

How did you fixed it? Is there any configuration you did?

Thanks

Prime LMS 4.2 no http/https access after installation

Hey,

no I did nothing, I just used another browser and only http I saw now that https was not enabled...

I guess the redirect in the IE was not working like expect.

regards,
Sebastian

Cisco Employee

Prime LMS 4.2 no http/https access after installation

If the LMS is not accesible via GUI, one of the things which can be tried is via CLI to enable/Disable SSL for HTTP/HTTPS communictaion.

This can be done via Script :

CSCOpx\MDC\Apache>perl ConfigSSL.pl -disable (to disable SSL and get HTTP)

CSCOpx\MDC\Apache>perl ConfigSSL.pl -enable (to enable SSL and get HTTPS).

Also, IE always has issues with redirects and sometimes needs registry modification to fix that issue.

-Thanks.

Vinod

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Prime LMS 4.2 no http/https access after installation

Dear all,

thanks for all the replys...

for me the case was closed after I got access with Firefox .

regards,
Sebastian

New Member

Prime LMS 4.2 no http/https access after installation

I got an email from DavidZC12 <supportforums-donotreply@supportforums.cisco.com> regarding this thread. But following the link in the mail (View the full discussion) led me to a "Not Found" page.

Anyway, here is my response followed by the contents of the email:

Cisco renamed those port numbers:

$ grep cscoapch /etc/services

cscoapch                 1741/tcp     # CSCO NM HTTP for Apache

cscoapch_ssl               443/tcp     # CSCO NM HTTPS for Apache

So it looks like your LMS server is listening on both those ports. To troubleshoot further, I think it should be able to tcpdump incoming requests on either of those ports.

Re:   Prime LMS 4.2 no http/https access after installation

created by DavidZC12 in Network   Management - View the full   discussion


I'm   having the same exact issue on a new install, but the different browser did   not resolve the issue for me.  Any other ideas? I tried disabling the   SSL, to which it already said it was disabled it, so I re-enabled it.    Still no go.  I also do not see the 443 listener.

lsof   -i tcp | grep web_serve

web_serve    1840  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    1840  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    1840  casuser   19u  IPv4   2967541       TCP   localhost.localdomain:54150->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    3357  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    3357  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    3357  casuser   19u  IPv4   2998264       TCP   localhost.localdomain:32841->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    5065     root    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    5065     root    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   10485  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser   19u  IPv4   2944173       TCP localhost.localdomain:38569->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   13453  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13453  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13453  casuser   19u  IPv4   3006618       TCP   localhost.localdomain:60778->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   13454  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13454  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13454  casuser   19u  IPv4   3007255       TCP   localhost.localdomain:41570->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   14536  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   14536  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   14536  casuser   19u  IPv4   2857823       TCP   localhost.localdomain:38554->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   16835  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   16835  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   16835  casuser   18u  IPv4   2969407       TCP   :cscoapch->:58390 (ESTABLISHED)

web_serve   16835  casuser   19u  IPv4   2919945       TCP   localhost.localdomain:51509->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   20097  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   20097  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   20097  casuser   19u  IPv4   2983527       TCP   localhost.localdomain:36869->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   21227  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   21227  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   21227  casuser   19u  IPv4   3014840       TCP localhost.localdomain:35828->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   29269  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   29269  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   29269  casuser   19u  IPv4   2992519       TCP localhost.localdomain:51496->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   30419  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   30419  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   30419  casuser   19u  IPv4   3022653       TCP   localhost.localdomain:44728->localhost.localdomain:Ajp13 (ESTABLISHED)

lsof   -i tcp | grep web_serve

web_serve    1840  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    1840  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    1840  casuser   19u  IPv4   2967541       TCP   localhost.localdomain:54150->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    3357  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    3357  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve    3357  casuser   19u  IPv4   2998264       TCP   localhost.localdomain:32841->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve    5065     root    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve    5065     root    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   10485  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   10485  casuser   19u  IPv4   2944173       TCP   localhost.localdomain:38569->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   13453  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13453  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13453  casuser   19u  IPv4   3006618       TCP   localhost.localdomain:60778->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   13454  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   13454  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   13454  casuser   19u  IPv4   3007255       TCP   localhost.localdomain:41570->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   14536  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   14536  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   14536  casuser   19u  IPv4   2857823       TCP   localhost.localdomain:38554->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   16835  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   16835  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   16835  casuser   18u  IPv4   2969407       TCP   :cscoapch->:58390 (ESTABLISHED)

web_serve   16835  casuser   19u  IPv4   2919945       TCP   localhost.localdomain:51509->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   20097  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   20097  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   20097  casuser   19u  IPv4   2983527       TCP localhost.localdomain:36869->localhost.localdomain:Ajp13   (ESTABLISHED)

web_serve   21227  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   21227  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   21227  casuser   19u  IPv4 3014840         TCP localhost.localdomain:35828->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   29269  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   29269  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   29269  casuser   19u  IPv4   2992519       TCP   localhost.localdomain:51496->localhost.localdomain:Ajp13 (ESTABLISHED)

web_serve   30419  casuser    4u  IPv4     13172       TCP *:cscoapch_ssl (LISTEN)

web_serve   30419  casuser    5u  IPv4     13174       TCP *:cscoapch (LISTEN)

web_serve   30419  casuser   19u  IPv4   3022653       TCP   localhost.localdomain:44728->localhost.localdomain:Ajp13 (ESTABLISHED)

Reply   to this message by going to Home

Start   a new discussion in Network Management at Home

New Member

Prime LMS 4.2 no http/https access after installation

I had the same issue, I believe I restarted all webservices (not the daemon) to gain access.  I think I  remember it being a simple fix...

3872
Views
6
Helpful
11
Replies
CreatePlease to create content