Webclient Setup problems

[manu]

Cool! Thanks for testing!

As Veg pointed there's an issue with the date format so this version is not having the date filter, its a full changesets/branches query to the server, it's slower but at least you can review the information.

We'll fix the issue soon. Now you can continue testing!

[wvd_vegt]

Hi Manu

It also works lice charm on both my Windows7 machine and the whs 2011 (Windows Server 2003).

Thanks for fixing this!

I just confirmed that Everyone needs read/write access on at least the storage directory (and bin if logging is turned on). Otherwise no graphs. The built-in IUsr user does not do the trick.

'Everyone' is not a good choice for this and it should be changed into something more secure.

regards

[manu]

It also works lice charm on both my Windows7 machine and the whs 2011 (Windows Server 2003).

Thanks for fixing this!

You are welcome! But it's actually not a fix, it's a dirty patch we'll come with something better.

I just confirmed that Everyone needs read/write access on at least the storage directory (and bin if logging is turned on). Otherwise no graphs. The built-in IUsr user does not do the trick.

'Everyone' is not a good choice for this and it should be changed into something more secure.

regards

Sure, I agree. This is in our TODO list.

You can tune the security and grant permissions only for the user that is running the IIS service.

[wvd_vegt]

Hi Manu

New feature request & status update!

Sort the repositories alphabetical on their name instead of on repository id.

Btw the commit charts are back (I just removed all files in chartscripts and storage and pressed F5 in the browser). So it seems like the generation of data somehow got interupted and did not continue again later.

The avatar image is still missing.

regards.

[manu]

Cool! Let me add some log to the avatar area, we are almost blind....

I'll add the idea into the TODO list. Thanks!

[wvd_vegt]

Hi Manu

I found one error in the webui.log.txt

2012-10-24 12:25:15,579 ERROR CmConnection: Error retrieving server proxy. Server: localhost:8087, Name: RepositoryHandler. Remoting configuration failed with the exception 'System.Runtime.Remoting.RemotingException: The channel 'normal' is already registered.

at System.Runtime.Remoting.Channels.ChannelServices.RegisterChannelInternal(IChannel chnl, Boolean ensureSecurity)

at System.Runtime.Remoting.Channels.ChannelServices.RegisterChannel(IChannel chnl, Boolean ensureSecurity)

at System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

at System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)'.

2012-10-24 12:30:12,191 INFO Global: Application recycled

regards

[manu]

Interesting!

Take a look into the last message for the avatars issue: http://www.plasticscm.net/index.php?/topic/1214-webui-todo/page__fromsearch__1

[wvd_vegt]

Hi Manu

Yesterday, even after deleting all data in storage I have some project that do not show graphs in the repo list (although the dummy one is gone). For those projects i see all chart titles under charts but not the charts themselves.

Today however all graphs in the repo list are gone again and replaced by dummy 'Commit graph not available yet' ones (I only logged off yesterday and logged on again this morning). The charts in each repo are present. The projects that did charts unde the charts tab yesterday are still missing charts under the charts tab.

The oonly thing i did was sync some projects to this machine yesterday evening.

regards

[manu]

Ok, let me include more log.

[CG]

Does the WEB UI support connecting to the Plastic Server over SSL?

I run the plastic server with just the SSL channel available for connections. I am unable to figure out how to connect the Web UI to the plastic server in this setup. I tried using "ssl://hostname:port" for the value of the "Server" key in the web.config file, but no luck. When I attempt to login it tells me : "Login failed. The user name or password provided is incorrect." I am using LDAP Authentication on the server. I do not have this problem if I connect to the server over an unsecured transport channel (non-SSL).

The webui.log.txt file shows:

2012-11-21 15:25:33,385 ERROR CmProxy: Error invoking method [CheckConnection] [ssl://myservername.com:8010/RepositoryHandler] Exception has been thrown by the target of an invocation.: myservername.com:8010

[manu]

Let's see, I haven't tried it but theoretically it should work.

Inside the "c:\inetpub\wwroot\plastic\bin" directory there's a "remoting.conf" file, inside it you have should have both channels, the secure (SSL) and the regular one. Nothing to do there if you have both.

Then, you should edit the "c:\inetpub\wwroot\plastic\Web.config" and configure the "<add key="Server" " key with the "ssl://localhost:8088" value.

And finally accept the certificate permanently in the machine, configure the SSL configuration for the Plastic SCM client and make sure you are not prompted to accept the certificate each time you launch the GUI or you issue "cm" commands.

Restart everything to make sure the new configuration is loaded and test it again.

[CG]

Hmmm...doesn't work. Must be something with the SSL and the LDAP auth. Here's my config (censored):

 <appSettings>
<add key="Language" value="en" />
<add key="SEIDWorkingMode" value="LDAPWorkingMode" />
<add key="Server" value="my.server.name:8087" />
<!--<add key="Server" value="ssl://my.server.name:8010" />-->
<add key="IdleProcessUser" value="myIdleUser@dc1.dc2.dc3.dc4" />
<add key="IdleProcessPassword" value="myuserpassword" />
<add key="LogRequestTime" value="false" />
 </appSettings>

The web UI works just fine in the above configuration. I can log in without any issue. When I swap the server keys (i.e. comment out the first and uncomment the second), I can't log in. The regular plastic clients work just fine connecting and authenticating over the SSL channel. But the WEB UI will not authenticate my user.

When using the SSL channel in the above config, the webui.log.txt fle shows this:

2012-11-26 12:04:33,860 ERROR Codice.Web.Activities.AuthenticationHelper: Cannot retrieve seid for user 'myUserName': Exception has been thrown by the target of an invocation.: my.server.name:8010

2012-11-26 12:04:33,860 INFO Authentication: SEID was null, unable to validate user

Again, I don't have this problem over the non-ssl channel.

[manu]

Let us test it, I can't give you more details right now due to is untested.

I'll return to you ASAP

[CG]

Shoot.....it does work. I missed your step above about configuring the plastic client. I had originally set the plastic client up on the server with the non-ssl channel. When I got my signed certificate, i added in the SSL channel in the remoting.conf file. However, I configured the plastic clients on the workstations for that connection. I never explicitly set the plastic client configuration on the server to use the new channel. I just did that and bam, the webUI connection works just fine.

Thanks so much...it didn't occur to me for some reason that the WEB UI used the plastic client, but it makes perfect sense when you think about it!

[CG]

Ooops...sorry, I jumped the gun. I forgot to switch the app settings back to SSL in the web.config (been doing a lot of testing with it). It still doesn't work over the SSL channel. Still get the same error.

Sorry for the premature conclusion.

Thanks.

[manu]

Don't worry. Let us test it.

[diegohb]

I just set this up today also.

Does your webclient , with AD integration for user control, only show the SIDs for the commit author and not the actual name from AD?

 

I'm seeing this issue as well..

[calbzam]

Hi Diego,

 

I´ve not able to reproduce the issue using AD. Which Plastic SCM version are you using?

 

Can you please open the "wwwroot\plastic\bin\webui.log.conf" file and set all the loggers and root logger to "DEBUG" refresh the view and post us the the content of the "webui.log.txt" file?

 

Regards,

Carlos

[diegohb]

i've updated to version 4.2.39.466 and I'm still seeing the same issues:

1. the diff-viewer is not working (the loading image never stops)

2. the charts are not loading.

3. the web app pool recycles every few minutes.

 

I've modified NTFS EVERYONE allowed MODIFY permissions on the entire web app root and nothing...

 

There are no errors to show from the log file so I don't know what to paste in here.. just the app recycle:

 

 

2013-08-27 07:40:08,181 INFO  Global: Application recycled

2013-08-27 07:40:19,818 INFO  Global: Application started

2013-08-27 07:40:20,099 DEBUG zi: Forest : forestroot.com

DC-Site: \\SERVER.DOMAIN.com

 Client: CLIENT

 

2013-08-27 07:40:20,099 INFO  zi: Found Domain Controller: \\10.xx.xx.10

2013-08-27 07:40:20,224 DEBUG Global: Time setting user:bustamd1 credentials from request:374

2013-08-27 07:40:20,817 INFO  BufferPool: [sinkcompressionPool] BufferPool created with 5.00 Mb size and 5 max buffers

2013-08-27 07:40:20,817 INFO  BufferPool: [uncompressionPool] BufferPool created with 5.00 Mb size and 5 max buffers

2013-08-27 07:40:20,832 DEBUG ServerProfile: Access to the path 'plastic4' is denied.

2013-08-27 07:40:20,879 DEBUG Channel: Create conection 0 ms. (host:scc.mmgct.int port:8087 ssl:False)

2013-08-27 07:40:20,895 DEBUG BufferPool: -> Entering with name SinkcompressionPool (5)

2013-08-27 07:40:20,895 DEBUG BufferPool: SinkcompressionPool [1] buffers allocated

2013-08-27 07:40:20,895 DEBUG BufferPool: -> Entering with name UncompressionPool (5)

2013-08-27 07:40:20,895 DEBUG BufferPool: UncompressionPool [1] buffers allocated

2013-08-27 07:40:20,895 INFO  Serialization: Uncompressed 502 bytes in 788 bytes. Time: 0 ms.

2013-08-27 07:40:20,895 DEBUG BufferPool: <- Releasing with name SinkcompressionPool (4)

2013-08-27 07:40:20,910 DEBUG BufferPool: <- Releasing with name UncompressionPool (4)

2013-08-27 07:40:20,910 DEBUG ClientSink: | GetRepositoryInfo | proc 78 | 9 | 72317504

2013-08-27 07:40:24,732 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,748 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,748 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,779 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,826 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,826 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,842 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,873 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,873 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:24,951 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,325 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,325 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,684 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,684 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,684 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,684 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,684 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,684 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,762 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:40:25,871 DEBUG Global: Time setting user:bustamd1 credentials from request:0

2013-08-27 07:41:20,222 INFO  Global: Application recycled

2013-08-27 07:42:33,699 INFO  Global: Application started

2013-08-27 07:42:33,980 DEBUG zi: Forest : forestroot.com

DC-Site: \\SERVER.DOMAIN.com

 Client: CLIENT

 

2013-08-27 07:42:33,980 INFO  zi: Found Domain Controller: \\10.xx.xx.10

2013-08-27 07:42:34,043 DEBUG Global: Time setting user:bustamd1 credentials from request:312

2013-08-27 07:42:34,713 INFO  BufferPool: [sinkcompressionPool] BufferPool created with 5.00 Mb size and 5 max buffers

2013-08-27 07:42:34,713 INFO  BufferPool: [uncompressionPool] BufferPool created with 5.00 Mb size and 5 max buffers

2013-08-27 07:42:34,713 DEBUG ServerProfile: Access to the path 'plastic4' is denied.

2013-08-27 07:42:34,776 DEBUG Channel: Create conection 0 ms. (host:scc.mmgct.int port:8087 ssl:False)

2013-08-27 07:42:35,727 DEBUG BufferPool: -> Entering with name SinkcompressionPool (5)

2013-08-27 07:42:35,727 DEBUG BufferPool: SinkcompressionPool [1] buffers allocated

2013-08-27 07:42:35,727 DEBUG BufferPool: -> Entering with name UncompressionPool (5)

2013-08-27 07:42:35,727 DEBUG BufferPool: UncompressionPool [1] buffers allocated

2013-08-27 07:42:35,727 INFO  Serialization: Uncompressed 502 bytes in 788 bytes. Time: 0 ms.

[calbzam]

Hi,

 

I´ve tested this version:

- Can you review specially: "scripts" and "storage" folders to check if they have all the permissions. Can you also check if "storage" folder contains any file?

 

- Can you check if there is a "diff.exe" in "bin" folder. If you go to a changeset, and select "Expand all", aren´t  you getting the differences?

 

- Can you also check in "Web.config" if: <add key="LogRequestTime" value="false" />

 

Regards,

Carlos

[diegohb]

1. both scripts and storage folders have permissions - EVERYONE MODIFY. Storage contains a dir for each repo and each folder has .data files in it (3).

2. diff.exe exists in bin folder. Not seeing differences show up.

3. logresuesttime = true... changed to false, and its not working!  very surprising..

 

thanks!

[SilverKnight]

The webclient should translate the user, if it's not doing it it's wrong.

We'll take a look into it.

I can't seem to get these to display user names either - it always shows by SID.  I tried making the app-pool run under a domain user as well, since plastic is configured for AD authentication.  Any word on this issue?  -- it seems only the charts do this - change sets and branches show the actual user name.

[calbzam]

Hi,

 

I´m not able to reproduce the issue. The problem is only happening in the charts? When using Plastic GUI everything is working fine? Did give the permissions to the folder, right? Your machine is joined to the user domain?

 

Regards,

Carlos

[SilverKnight]

Yes, only the charts are showing by SID.  Everything else appears to function just fine.

 

Here is the change set view:

 

And a couple of charts

 

IIS Configuration:

AppPool credentials

 

Default Web Site settings

 

Plastic site under Default Web Site

 

 

I configured the plastic client to NOT use ssl

The application settings for the web are using ADWorkingMode, and I gave it the fqdn of the server (which is the same server Plastic server is running on)

I've logged in as the account I have set as the IdleProcessUser - it is the same user the app pool is configured for to configure the client and an initial workspace.

 

The folder security has FULL CONTROL for Administrators, Users, and IIS_IUSRS - the user in question is a member of Administrators and Users groups

(the logs are generated correctly, and can be written to the directory, so permissions appear to be sufficient)

 

The webui.log doesn't show anything but these types of lines

 2013-09-03 10:32:48,661 INFO  Global: Application started
2013-09-03 10:50:42,517 INFO  Global: Application recycled
 

The computer is a member of the same domain as the user accounts.

I can say that the accounts are NOT sub-items of the "Users" OU on this domain - most, but not all are in a Development OU for domain policy reasons.  I wouldn't expect that to affect a SID to Name look-up though.