Unable to authenticate with Management Server (403 Access Denied.)

Not applicable

I am looking forward to get a answer as soon as possible.

I uses v4.17.01 .

Management Server installation failed.

It seems that "403 Access Denied" error has occurred in the request to "http://127.0.0.1:8080/v1/servers/self/uuid".

The following is an excerpt of the log.

apigee-service: edge-management-server: edge-management-server is not running
apigee-configutil: edge-management-server: # OK
apigee-service: edge-management-server: Not running (NO_LOCKFILE)
apigee-service: edge-management-server: status=2, continuing
apigee-service: edge-management-server: OK
apigee-service: edge-management-server: edge-management-server is running
Checking for management-server on 127.0.0.1 port 8080  ...... OK
Checking for management-server uuid  <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>ERROR: The requested URL could not be retrieved</title>
<style type="text/css"><!--
 /*
 * Copyright (C) 1996-2016 The Squid Software Foundation and contributors
 *
 * Squid software is distributed under GPLv2+ license and includes
 * contributions from numerous individuals and organizations.
 * Please see the COPYING and CONTRIBUTORS files for details.
 */


/*
 Stylesheet for Squid Error pages
 Adapted from design by Free CSS Templates
 http://www.freecsstemplates.org
 Released for free under a Creative Commons Attribution 2.5 License
*/


/* Page basics */
* {
	font-family: verdana, sans-serif;
}


html body {
	margin: 0;
	padding: 0;
	background: #efefef;
	font-size: 12px;
	color: #1e1e1e;
}


/* Page displayed title area */
#titles {
	margin-left: 15px;
	padding: 10px;
	padding-left: 100px;
	background: url('/squid-internal-static/icons/SN.png') no-repeat left;
}


/* initial title */
#titles h1 {
	color: #000000;
}
#titles h2 {
	color: #000000;
}


/* special event: FTP success page titles */
#titles ftpsuccess {
	background-color:#00ff00;
	width:100%;
}


/* Page displayed body content area */
#content {
	padding: 10px;
	background: #ffffff;
}


/* General text */
p {
}


/* error brief description */
#error p {
}


/* some data which may have caused the problem */
#data {
}


/* the error message received from the system or other software */
#sysmsg {
}


pre {
    font-family:sans-serif;
}


/* special event: FTP / Gopher directory listing */
#dirmsg {
    font-family: courier;
    color: black;
    font-size: 10pt;
}
#dirlisting {
    margin-left: 2%;
    margin-right: 2%;
}
#dirlisting tr.entry td.icon,td.filename,td.size,td.date {
    border-bottom: groove;
}
#dirlisting td.size {
    width: 50px;
    text-align: right;
    padding-right: 5px;
}


/* horizontal lines */
hr {
	margin: 0;
}


/* page displayed footer area */
#footer {
	font-size: 9px;
	padding-left: 10px;
}




body
:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }
:lang(he) { direction: rtl; }
 --></style>
</head><body id=ERR_ACCESS_DENIED>
<div id="titles">
<h1>ERROR</h1>
<h2>The requested URL could not be retrieved</h2>
</div>
<hr>


<div id="content">
<p>The following error was encountered while trying to retrieve the URL: <a href="http://127.0.0.1:8080/v1/servers/self/uuid">http://127.0.0.1:8080/v1/servers/self/uuid</a></p>


<blockquote id="error">
<p><b>Access Denied.</b></p>
</blockquote>


<p>Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.</p>


<p>Your cache administrator is <a href="mailto:root?subject=CacheErrorInfo%20-%20ERR_ACCESS_DENIED&body=CacheHost%3A%20unknown%0D%0AErrPage%3A%20ERR_ACCESS_DENIED%0D%0AErr%3A%20%5Bnone%5D%0D%0ATimeStamp%3A%20Fri,%2016%20Feb%202018%2004%3A39%3A50%20GMT%0D%0A%0D%0AClientIP%3A%2010.105.3.137%0D%0A%0D%0AHTTP%20Request%3A%0D%0AGET%20%2Fv1%2Fservers%2Fself%2Fuuid%20HTTP%2F1.1%0AUser-Agent%3A%20curl%2F7.29.0%0D%0AAccept%3A%20*%2F*%0D%0AProxy-Connection%3A%20Keep-Alive%0D%0AHost%3A%20127.0.0.1%3A8080%0D%0A%0D%0A%0D%0A">root</a>.</p>
<br>
</div>


<hr>
<div id="footer">
<p>Generated Fri, 16 Feb 2018 04:39:50 GMT by unknown (squid)</p>
<!-- ERR_ACCESS_DENIED -->
</div>
</body></html>
Checking if management-server is up .............................................................
management-server is not up.


Finished edge-management-server setup


Checking for required variables
Checking required variable MSIP...OK
Checking required variable ADMIN_EMAIL...OK


Checking for optional variables
Found optional variable APIGEE_ADMINPW...OK
Found optional variable APIGEE_PORT_HTTP_MS...OK
http://10.105.3.137:8080/v1/servers/self.
Unable to authenticate with Management Server
Error: setup.sh: /opt/apigee/apigee-service/bin/apigee-service exited with unexpected status 1

The following is the config file.

IP1="10.105.3.132"
IP2="10.105.3.134"
IP3="10.105.3.135"
IP4="10.105.3.136"
IP5="10.105.3.137"
IP6="10.105.3.138"
IP7="10.105.3.140"

HOSTIP="$(hostname -i)"
MSIP="$IP5"
ADMIN_EMAIL="admin@apigee.com"
APIGEE_ADMINPW="Secret123@"
LICENSE_FILE="/opt/InstallSet_apigee/apigee-files/license.txt"

USE_LDAP_REMOTE_HOST="n"
LDAP_TYPE="1"
APIGEE_LDAPPW="Secret123@"
MP_POD="gateway"
REGION="dc-1"
ZK_HOSTS="$IP2 $IP3 $IP4"
ZK_CLIENT_HOSTS="$IP2 $IP3 $IP4"
CASS_HOSTS="$IP2:1,1 $IP3:1,1 $IP4:1,1"
CASS_CLUSTERNAME="Apigee"
SKIP_SMTP="y"

BIND_ON_ALL_INTERFACES="y"

I attached the whole amount of the log.

log-and-config-file.zip

Regards.

0 2 976
2 REPLIES 2

Not applicable

I confirmed the system.log, it turned out that OutOfMemoryError occurred.

I increased the memory and reinstalled, but again the same error occurred.

I attach system.log when I reinstalled it.

systemlog.txt

Looks you are using incorrect credentials.

-==

http://10.105.3.137:8080/v1/servers/self.
Unable to authenticate with Management Server

==

Simple run below sample command on MS providing the admin credentials.

curl -v http://localhost:8080/v1/servers -u <<admin user>>