HI Everyone,

I have been working on Integrating the New Cloud Portal Business Manager 1.4 with my CloudPlatform 3.0.3 (formerly CloudStack) in my test lab for a POC. I am using XenServer 6.0.2 as my Hypervisor. I have 2 dedicated machines that I have installed CPBM and CS on respectively all running CentOS 6.2 X64.

Individually the install was quite simple and I have both machines up and running. The CS machine is happily integrated into XenServer and I have my Zones, Pods and clusters all set to go. I then ran the CPBM install.sh script to execute the "Integrate Into CloudStack" script and I manually added an IPTABLES rule for the API port 8096.

I can CURL to the 8096 port with no issues and even browse via chrome from my laptop in my test lab. So far everything seems to be in order. The issues come when I try and actually make the two communicate with each other.

On my CPBM server I edited the cloud.properties file section:

################################################################################
# CloudStack Usage Database configuration
################################################################################
usage.jdbc.url=jdbc:mysql://172.17.7.206/cloud_usage?useUnicode=true&characterEncoding=utf8
usage.jdbc.username=[username]
usage.jdbc.password=[username]
usage.jdbc.database.schemaname=cloud_usage

# Cloud Stack core Database Configuration
cloud.jdbc.url=jdbc:mysql://172.17.7.206/cloud?useUnicode=true&characterEncoding=utf8
cloud.jdbc.username=[username]
cloud.jdbc.password=[password]
cloud.jdbc.database.schemaname=cloud

################################################################################
# CloudStack Server information
################################################################################
vmops.mgmt.server.publicHost=172.17.7.206
vmops.mgmt.server.publicPort=8080
vmops.mgmt.server.publicProtocol=http

# Semicolon separated list of host:port pairs of management server instances
vmops.mgmt.server.serverList=172.17.7.206:8096
vmops.mgmt.server.nonAdminServerList=172.17.7.206:8080

I have also verified that the admin user in the cloud_portal.cloud_users has the api_key and secret_key from the CS system with the following API call:

http://172.17.7.206:8096/client/api?command=listConfigurations&name=security.singlesignon.key

and

http://172.17.7.206:8096/client/api?command=listUsers&username=admin

I then made sure that the security.singlesignon.key was populated from the 1st query above with the API key from CS. I had to do all this manually as it never transferred automatically. I then reboot both servers and lowered the firewalls through a "service iptables stop" just to be sure that there is nothing blocking on either side.

When I go into my CPBM I finally saw my stats populated after about 20 minutes. When I click the "Launch Console" button it opens another window with the following URL:

http://172.17.7.206:8080/client/?username=admin&domainid=1&timestamp=1341254450556&signature=%2FsxMl%2F4mE%2FQJAQWtVM9p7nnvL7c%3D&tz=5.50&currencyFormat=%23%23%23%2C%23%23%23.%23%23%3B%28%23%23%23%2C%23%23%23.%23%23%29&ticketCapabilities=C&showDelinquent=false&currencyPrecision=none&sharedCloudAccount=false&minFractionDigits=2

It fails to connect with a message of:

"Login to CloudSTack failed"

It goes on to say:

"The webpage your viewing is trying to close the tab"

If I hit no to not close the tab, I am starring at the CloudStack login page with the above URL. I can however login without issue.

Since I am so close to getting everything to work, I am going to assume I have something screwy in the cloudstack section of the cloud.properties config file on my CPBM server. Obviously my DB is working correctly since I can see stats. But the launch cloud console I though depended on the API key from the singleton settings in the Global Settings. I know they are correct as I have compared them dozens of times.

Any help I can get to get the other half of this stack working would be awesome. I will write a rant about ProdDocs later :-)

Edited by: Timothy Schilbach on Jul 3, 2012 3:35 PM

Hey all,

so there is the confusing Integration of CPBM and CS....

My Setup:

2 Cloudstack 3.0.4 Management Servers
2 Cloud Portal Business Manager 1.4 Servers
2 MYSQL Nodes - conifgured as Cluster for the CPBM and CS DB
2 Netsaler MPX 7500 for Loadbalancing (CPBM and CS)

Integration in General works, i had done some customizing on the install.sh script of CPBM (Path failure and remote mysql). I also set the API Port in CS. I edited my conf file to use http over 8080 insteaf of https.

My question is, whats with the proxy.
For my understanding, is it necessary to configure at least one Apache host as Proxy for accessing the portal and CS.

The documetation is very confusing and has many gaps.
So my question is, it is possible to use the Netscaler as Proxy for the Portal and CS Access? From my side that should work, the apache doing only Loadbalancing. In that case the Tomcat catalina provides the Portal and the apache deamon should be stopped.

I think i have to configure one virtual Server on the Netscaler with Content Redirection which should balance

all requests to the FQDN + /portal --> 20410 and 8080 to the CPBM Servers
all requests to the FQDN + /client --> 80 to the CS Servers

The FQDN is assigned over DNS to the Virtual IP of the Netscaler Appliances.

But i have some trouble with this constellation. When i try to launch the cloud console over CPBM it only shows me a white screen.

Anyone some experience with that constellation?

BR

On a fresh install of CentOS 6.3 plus MySql 5.1, I run the CloudPortal 1.4 install (CloudPortal-1.4.4-1-centos.tar.gz). During the package installs, I see invalid mirror url messages (see below). I believe the mirror issues are coming from the jpackage yum dependencies. Tomcat failed to install. Then, when it gets to the configuration step, because packages failed to install, it can't find the cloud.properties file. Am I missing something? Thanks.

Loading mirror speeds from cached hostfile
epel/metalink | 12 kB 00:00
* base: mirror.web-ster.com
* epel: mirror.pnl.gov
* extras: linux.mirrors.es.net
* jpackage: mirrors.dotsrc.org
* updates: mirrors.loosefoot.com
epel | 4.3 kB 00:00
epel/primary_db | 4.7 MB 00:03
http://mirrors.dotsrc.org/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 403"
Trying other mirror.
http://mirror.ibcp.fr/pub/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 403"
Trying other mirror.
http://sunsite.informatik.rwth-aachen.de/ftp/pub/Linux/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 403"
Trying other mirror.
http://ftp.heanet.ie/pub/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 403"
Trying other mirror.
http://sunsite.rediris.es/mirror/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 403"
Trying other mirror.
ftp://ftp.pbone.net/pub/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 9 - "Server denied you to change to the given directory"
Trying other mirror.
ftp://jpackage.hmdc.harvard.edu/JPackage/6.0/generic/free/repodata/repomd.xml: [Errno 14] PYCURL ERROR 9 - "Server denied you to change to the given directory"
Trying other mirror.
ftp://gsa10.eps.cdf.udc.es/jpackage/6.0/generic/free/repodata/repomd.xml: [Errno 12] Timeout on ftp://gsa10.eps.cdf.udc.es/jpackage/6.0/generic/free/repodata/repomd.xml: (28, 'connect() timed out!')
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: jpackage. Please verify its path and try again

Checking if Iptables enabled

Iptables is enabled
Deleting the rule for accepting connection on 8080
This will not have any effect if this rule does not exist

iptables: Bad rule (does a matching rule exist in that chain?).

Adding the rule to accept connection on 8080

Deleting the rule for accepting connection on 20410
This will not have any effect if this rule does not exist

iptables: Bad rule (does a matching rule exist in that chain?).

Adding the rule to accept connection on 8080

iptables: Saving firewall rules to /etc/sysconfig/iptables:[ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
Rule added
error: Failed dependencies:
tomcat-native is needed by cloud-portal-1.4.4-1.x86_64
tomcat6 is needed by cloud-portal-1.4.4-1.x86_64
error: Failed dependencies:
cloud-portal is needed by cloud-portal-plugins-cas-1.4.4-1.x86_64
=================================================
NOTE: You've successfully installed CloudPortal Business Manager.
Now proceed to configure the CloudPortal Business Manager...
=================================================
--------------------------------------------------------------------------------

Welcome to the Citrix CloudPortal Business Manager Configuration Tool.

Provide CloudPortal Public Server information
--------------------------------------------------------------------------------
sed: can't read /usr/share/cloud/portal/conf/cloud.properties: No such file or directory
Host Name []:

Hi,

What is the preffered CentOS version for CP 1.3.4 or 1.3.5?
My install in CentOS 6.2 doesn't work and the catalina.out log files complains about java errors...could this be centos related...

Is there a commandline to undo the CP integration on CS?

A quick setup guide around CP would be nice :-)

Any tips around single-node installation? (OS, CS & CP versions)

Thanks,
Ralf

Hi all,
I've installed CPBM 1.4.2-1 on CentOS 6.3 with much difficulty but after the installation and configuration it'll not start. I get the following errors in the catalina.out log file:
-sh: line 0: export: `.': not a valid identifier
-sh: line 0: export: `/etc/cloud/portal/tomcat6.conf': not a valid identifier
-sh: line 0: export: `.': not a valid identifier
-sh: line 0: export: `/etc/cloud/portal/tomcat6.conf': not a valid identifier
/usr/sbin/dtomcat6: line 30: /logs/catalina.out: No such file or directory
-sh: line 0: export: `.': not a valid identifier
-sh: line 0: export: `/etc/cloud/portal/tomcat6.conf': not a valid identifier
-sh: line 0: export: `.': not a valid identifier
-sh: line 0: export: `/etc/cloud/portal/tomcat6.conf': not a valid identifier
/usr/sbin/dtomcat6: line 60: /logs/catalina.out: No such file or directory

When I do a "service cloud-portal status" I get a "cloud-portal dead but pid file exists" response. I believe the issue is linked to CentOS lsb because I couldn't install tomcat6 without installing redhat-lsb.

I've searched the forum but not come across anything like this. Has anyone had such an experience? Can anyone point me in the right direction?

TIA

Hi Team,

I'm following Doc http://support.citrix.com/proddocs/topic/cloudportalbusiness-14/ccpb-install.html

While Installing CPBM I got the jpackage error repo and I download manually epel repo to install tomcat-native package. My issue is somehow similar as http://forums.citrix.com/thread.jspa?threadID=315744 & http://forums.citrix.com/thread.jspa?threadID=315745&tstart=0

CS 3.0.4
CPBM 1.4.4

After Integrating with CS, http://CS-IP:8080/client/?direct=true is accessible

But http://CPBM-IP:8080/portal not Accessible.

PFA Catalina.out logs

Regards,
Anoop Mohan

In a fresh install of CPBM 1.4.5, created/published new bundles and added/activated the new catalog. When browsing the catalog as a anonymous user from the link on the login screen all the new bundles are visible.

However, when logged in as a tenant and clicking Launch VM to view the catalog no bundles appear. All the bundles are published and have pricing as does the rate card and the current catalog shows the bundles when viewed by root.

Any ideas what the problem can be or what to check?

Hi,

I do want to publish a bundle.
When trying this on a bundle I created it says I have to define "current charges" by editing bundle pricing.
However the only option I see on a bundle perspective is to set the charge frequency (which is annual in this case).
The single products of the bundle so far don't have any pricing. E.g. there's a Template group with one Windows VM included which shows on the "product pricing" tab "Effective Date 07/31/2012". No option to change anything.

What am I missing here?
I checked documentation but haven't found a valid answer.

My intent is simple: Just want to create a catalog consisting of 1 VM which a user can select when creating a new instance.

Thanks & Regards,

Christian

On CPBM 1.3.x, is it possible to have an SSO integration with a 3rd party system – say, for example, a monitoring service? If so, how can this be achieved?

Hi guys,

I installed BusinessManager 1.4.6 on one of my servers. So far everything seemed to be working fine. Now I tried to change an image of one of my product bundles. When I try this Google Chrome returns a window with null. Other browsers like safari or IE even don't show an error.

Same thing happened when I tried to register a new user.

Does anyone have an idea what I could have done wrong?

with best regards

Markus

Hey all,

i setup Cloud Plattform 3.0.5 with the option "cloud-setup-databases" and i use the option for Management server key and for database key.

When I use the install script of CPBM 1.4.4 to configure CPBM, there is a point in the setup which is called

"Provide CloudPortal Security Settings"
----------------------------------------------------------------------------------------
Cloud Portal Encryption Key [AlphaMango654321]:

So my question is, for what is this key used? must this the same key as i used for CCP setup as database key?

The documentation says nothing about the key and for what is it used...

Thank you and Best Regards

I'm trying to setup CPBM 1.4.7-1 to run against CP 3.0.6-1, but for some reason the "user signature" is lowercase version of the "computed signature", and hence they are not equal to each other, and the authentication fails. I have already followed the troubleshooting tips at: http://support.citrix.com/proddocs/topic/cloudportalbusiness-14/ccpb-troubleshoot.html with no luck. Any ideas why the case difference between the signatures might be occuring?

 INFO  [cloud.user.AccountManagerImpl] (catalina-exec-8:) User signature: ebuyjx6/sc9m5j4fxk7uubie3qs= is not equaled to computed signature: EBuYjx6/SC9m5J4fxK7UubIe3qs= 

WARN  [cloud.api.ApiServer] (catalina-exec-19:) The given command:listzones does not exist

 INFO  [cloud.user.AccountManagerImpl] (catalina-exec-1:) User signature: x0ogmbeq3cn9jwvdhydt/ogjjpm= is not equaled to computed signature: x0OgMBEq3Cn9JWVdHYdT/OGJjpM= 

Hi,

We are evaulating the Citrix cloud portal 1.4.

As per the installtion guide we have successfully installed the Citrix cloud portal 1.4 on CentOS 6.2.

But we are not able to access the portal with URL http://<IP Address>:8080/Portal.

We have also checked the CAS URL http://<IP Address>:8080/cas which is accessible but after loging with root user it will not display anything.

Please help to resolve this issue.

Thanks in advance.

Regards,
Kalpesh P

Is it possible to get email notification when a new account is created (self registration or manual)? If yes, where is the setting that controls which email will get that notification.

Hi experts,

I´ve just installed CP and when I start the cloud-portal service I received this message:

Starting cloud-portal: /etc/rc.d/init.d/tomcat6: line 191: /var/log/cloud-portal/initd.log: No such file or directory
Error code 4 [FAILED]

I´ve tried to reinstall CPBM but I got the same message.

Anyone already saw this message or have idea that I can do to resolve?

Thanks
Dennis

Hey all,

i run two CPBM Servers in Version 1.4.3 and CS 3.0.5

Now, i want to enable LDAP Authentication against a Central Active Directory.

To enable LDAP, i set the ldap.enable in the CPBM UI to true.

After that, i editet my cloud.properties file:

ldap.url=ldap://hostnameofmyDC:389
ldap.base=DC=tus,DC=tc,DC=internal
ldap.userdn=CN=ldap_cpbm,OU=CPBM,OU=Dienstkonten,DC=tus,DC=tc,DC=internaldap.password=PW123

I want that that CPBM searches in the root of the domain and not in a special OU, so i set the Domain DN as ldap.base.

When i create a Account in CPBM, i reach a message that something went wrong and i should contact the technical support.

The Catalina Log Shows me the following:

Error details:
______________

org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'DC=tus,DC=tc,DC=internal'
]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'DC=tus,DC=tc,DC=internal'
]; remaining name 'ou=AA000008,ou=Default'
at org.springframework.ldap.support.LdapUtils.convertLdapException(LdapUtils.java:174)
at org.springframework.ldap.core.LdapTemplate.executeWithContext(LdapTemplate.java:810)
at org.springframework.ldap.core.LdapTemplate.executeReadWrite(LdapTemplate.java:802)

Normally, LDAP error 32 indicates that the BASE DN is invalid or the bind user have not the necessary rights to browse AD.

From my side, tha base DN is correct, its the right domain syntax and an ldap browser shows me the same value. The user for base dn hast standard domain user rights and should be able to browse AD.

Anybody knows what the failure is?

Thanks

I'm testing CP 1.3.4 with CS 3.0.1 and saw that the FW option is not displayed under an account network options.

It is however visible thought CS, is this intentional ? configurable ?

thx,

-Oded

I need help understanding the procedure for customizing the CPBM UI. Specifically, I am interested in the HTML title and tagl line?

Hello,

I am running CloudPortal 1.4.6, as if I launch more than one VM then I will receive emails of their password with the same number of launched VMs.

The problem is:

the mail subject is the same for all sent emails which is "VM Password Notification", so if I want to change the subject to the "launched VM name" how it could be done.

Note: the portal is running on Linux CentOs.

Attached pic may clear the idea.

Regards,

I installed the cpman 3.0.6 successful and want integrate with cpbm. My cpbm version is 1.4.5.

Following is my topology and configuration
192.168.9.157: cpbm (CentOS 6.4 x64, cpbm 1.4.5)
192.168.9.160: cpman(Redhat 6.3 x64, cpman 3.0.6)

.160 - cpman:
ntpd configure
integration.api.port = 8096
install cloud usage monitor
configure database (cpbm, Citrix123)
disable iptables
install "integrate with cloudstack" option (Cloudportal)

.157 - cpbm:

install httpd, sendmail, ntpd and configure
disable iptables
install database server (option D) and configure database user "cloud" /cloud
install CloudPortal Business Manager (option I) successful and configure cloud.properties

I reference this guide "Build your own highly scalable and reliable Amazon-style cloud in 1 day with Citrix CloudPlatform"...But something errors are created in /var/log/cloud/portal/catalina.out
one is "the log time is error ",i checked both cpman&cpbm systems with "date" command ,same time is for both systems. My date is
" Mon Apr 1 10:02:51 CST 2013" for both systems,, but i execute "service cloud-portal restart" and check the log file again, the date is
" Apr 1, 2013 2:05:25 AM"
The other is ,?execute "http://192.168.9.157/portal" from IE 10,The Output is " Cannot display"...I look out the log file (catalina.out),i can find
the " Apr 1, 2013 2:05:25 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 31259 ms", The cloud portal sees fine..
But I cannot see the correct "login" web page How cat i resolve the problems?

I added a none bootable ISO to CS but I cannot add it to CPBM (under products > Add ISO group)

What is the method of adding and exposing none-bootable ISOs in CPBM to users?

Hey all,

maybe someone can help me to better understand how authentication works.

CPBM gives me the option to use LDAP and CAS to give the user the option to sign on with the AD Credentials.
CS gives me the Option to configure LDAP Authentication over the API Call ldap.config.

So what i have to configure that a User is able to sign on to CPBM with his AD Credentials and then make a singlesignon to the Cloudstack Dashboard?

From my side, i think i have to setup LDAP on booth, CS and CPBM and activate CAS because the cas service forwards the crendentials to cloudstack when a user launch the Cloud Console.

Is there a way to synchronzie the AD / CPBM user objects? I run a Script for CLoudstack which synchronizes the AD user to CS but whats with CPBM?

Whats about the roles in CPBM and CS, how thy match?

Thanks for your help

Hi,

I tried to install CPBM 1.3.4 on Centos 6.2 ...
got the tomcat-native error.

error: Failed dependencies:
tomcat-native is needed by cloud-portal-1.3.4-1.x86_64

When I do a rpm-qa|grep tomcat , I see the following
on the lab (6.2) system

rpm -qa|grep tomcat
tomcat6-el-1.0-api-6.0.33-2.jpp6.noarch
tomcat6-6.0.33-2.jpp6.noarch
tomcat6-servlet-2.5-api-6.0.33-2.jpp6.noarch
apache-commons-dbcp-tomcat5-1.3.0-0.r830852.4.jpp6.noarch
apache-commons-pool-tomcat5-1.5.3-6.jpp6.noarch
apache-commons-collections-tomcat5-3.2.1-6.jpp6.noarch
tomcat6-lib-6.0.33-2.jpp6.noarch
tomcat6-jsp-2.1-api-6.0.33-2.jpp6.noarch

I tried this command,
yum install tomcat6 tomcat-native ..and got this

yum install tomcat6 tomcat-native
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
* base: mirror.nus.edu.sg
* extras: mirror.nus.edu.sg
* updates: mirror.nus.edu.sg
219 packages excluded due to repository priority protections
Setting up Install Process
Package tomcat6-6.0.33-2.jpp6.noarch already installed and latest version
No package tomcat-native available.
Nothing to do

Hi All,

In CPBM we have "Network Bandwidth" as a listed product, this product tracks outgoing traffic from the VR public side interface only?