Unable to access http://127.0.0.1

hissdev · March 22, 2021, 7:10am

Hello Team,
I did undertake to setup sync endpoint locally.I cannot access http://127.0.0.1 as well as web-ui/login

Any idea

W_Brunette · March 23, 2021, 8:12pm

This only produces the WAR for test or WAR for the swarm. To setup the swarm you need to use GitHub - odk-x/sync-endpoint-default-setup: A cloud server to host data and application files, and to support bi-directional data synchronization across disconnected mobile devices.

hissdev · March 30, 2021, 8:14am

many many thanks @W_Brunette
Is it possible to host data locally using this setup.
I am doing a local setup with the intention of giving it a public ip address once am done with the setup.
Is it possible to use web-ui using a local setup?

W_Brunette · March 30, 2021, 4:54pm

Yes but running HTTPS locally is hard because it’s dependent on obtaining a encryption certificate from signing provider.

Please see my post here:

hissdev · April 15, 2021, 8:45am

I get upto this point(uploaded) using https://127.0.0.1:40000 but cant get to the same using http://127.0.0.1 or http://127.0.0.1:40000
What is it that am not doing right?

Prashant · April 15, 2021, 10:49am

Hi @hissdev ,

Have you tried entering your hostname in the security.server.hostname field in the security.properties file (under the directory config/sync-endpoint)? And, also check the port_number for http and https.

hissdev · April 18, 2021, 9:35am

Many thanks @Prashant
Am doing local server. My host is windows server 2012R2 and I have my installation on ubuntu 18.04 inside oracle virtual Box .The direction given earlier is that when you are using default LDAP you do not need to specify hostname. I have looked for the file security.server.hostname in the security.properties under config/sync-endpoint but I cannot locate it .Am I having the wrong setup
Please please Team I need help on this.
Anyone who has done a local setup and succeeded please guide.

hissdev · April 18, 2021, 2:04pm

Hello team,
Details for my configurations are as attached
What am I not doing right.
I want to setup a local server so that I am able to sync with tablets that are within a local network with a plan to make the server publicly accessible once I can sync the endpoint with the tablets locally

docker images
docker network ls

phpAdminLDAP

Should I go ahead and create users so that finally finally am able to sync with the tablets locally if I point the server address
sync with the server

W_Brunette · April 18, 2021, 3:40pm

Examples of security.properties files from the ODK-X repos (including the ones that run locally in test).

Default Setup

github.com

odk-x/sync-endpoint-default-setup/blob/master/config/sync-endpoint/security.properties

security.server.secureChannelType=ANY_CHANNEL
security.server.channelType=ANY_CHANNEL

# currently supported options are activeDirectory, ldap and dhis2
security.server.authenticationMethod=ldap

#
# Settings for both Active Directory (ldap) and LDAP Authentication
#
# Username and password for doing read-only queries.
# For activeDirectory, use username@domain
# For LDAP, use dn
security.server.ldapQueryUsername=cn=readonly,dc=example,dc=org
security.server.ldapQueryPassword=readonly
#
# Exclude Active Directory (ldap) and LDAP groups that don't begin with groupPrefix + space + ...
# For those that do, replace all punctuation and spaces with underscore and replace
# the groupPrefix with GROUP_ The resulting group membership will be propagated down
# to the device during a sync.
security.server.groupPrefix=default_prefix

This file has been truncated. show original

Here are some from the sync-endpoint tests that run locally. NOTE: they are test so they are not designed for production but you should be able to get them to work and use as examples:

github.com

odk-x/sync-endpoint/blob/master/postgres-test/resources/security.properties

#TODO: Figure out the right way to do this
sync.preference.appName=default
sync.preference.anonymousTablesSync=false
sync.preference.anonymousAttachmentAccess=false

# choose whether to secure everything with https or allow http access.
#
# NOTE: changes also needed to:
# -- server.xml (Tomcat configuration file) to set up the secure channel
#
# issue 648 - REQUIRES_INSECURE_CHANNEL is now the default instead of ANY_CHANNEL
# there are various edge cases that have not been tested in the UI for
# allowing arbitrary accesses, as the session cookie and authentication
# do get set for a specific http: or https: scheme and are not transferrable.
#
# should be REQUIRES_SECURE_CHANNEL but can't unless SSL is available.
security.server.secureChannelType=REQUIRES_INSECURE_CHANNEL
#security.server.secureChannelType=REQUIRES_SECURE_CHANNEL
# either REQUIRES_INSECURE_CHANNEL to secure nothing
# or REQUIRES_SECURE_CHANNEL to secure everything

This file has been truncated. show original

hissdev · April 18, 2021, 3:47pm

Many many thanks @W_Brunette
Let me try these and give feedback

W_Brunette · April 18, 2021, 3:52pm

@hissdev, the Android devices require HTTPS which it’s difficult to get a TLS/SSL certificate for a local address. Therefore you need to access the administrative settings in Services to allow an HTTP connection (which the password will not be secure).See:
https://docs.odk-x.org/services-managing/#accessing-administrator-settings

Other possible useful information (it’s good to search on the forum):