☰
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
chvgms
Level 10
Report Inappropriate Content
Message 1 of 6
‎08-27-2019 08:34 AM

Re Enabling 4711 via CLI

Jump to solution

Hi,

 

By mistake i have disabled port 4711 without knowing 4712 requires firewall to be opened :-(, how do i re enable 4711 (https) via CLI?

 

Thanks

Sridhar

0 Kudos
Reply
1 Solution

Accepted Solutions
chvgms
Level 10
Report Inappropriate Content
Message 6 of 6
‎08-28-2019 04:48 AM

Re: Re Enabling 4711 via CLI

Jump to solution

hi, i was able to resolve this by accessing from the same subnet 🙂

View solution in original post

0 Kudos
Reply
5 Replies
aloksard
Employee
Employee
Report Inappropriate Content
Message 2 of 6
‎08-27-2019 09:50 AM

Re: Re Enabling 4711 via CLI

Jump to solution

Hi Sridhar,

 

You can do this from CLI by modifying file mwg-ui/server.xml.

 

 /etc/mwg-ui/server.xml

 

Below is the default output :-

[root@mwgappl ~]# cat /etc/mwg-ui/server.xml
<?xml version='1.0' encoding='utf-8'?>

<!--
This file is managed by MWG System Configuration Daemon.
Changes to this file will be lost. Use User Interface to configure
connectors and services.
-->

<Server port="8005" shutdown="36kwhjb3l2n3gqjd">
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
<Listener className="org.apache.catalina.core.JasperListener" />
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
<Service name="Konfigurator">
<Engine name="Konfigurator" defaultHost="localhost">
<Host name="localhost" appBase="webapps" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
<Parameter name="Redirect" value="=/Konfigurator/request" />
</Context>
<Context path="/Konfigurator" override="true" cookies="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="true" />
</Context>

</Host>
</Engine>
<Connector server="mwg-ui" URIEncoding="UTF-8" port="4712"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4711"
protocol="HTTP/1.1" maxThreads="500" connectionTimeout="20000"
redirectPort="8443" maxPostSize="2048" maxSavePostSize="0" />

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4710" address="127.0.0.1"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

</Service>
<Service name="FileServer">
<Engine name="FileServer" defaultHost="localhost">
<Host name="localhost" appBase="fileserver" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
</Context>

</Host>
</Engine>

</Service>
</Server>

 

 

 

When you disable port 4711, the output looks like below:-

 

[root@mwgappl ~]# cat /etc/mwg-ui/server.xml
<?xml version='1.0' encoding='utf-8'?>

<!--
This file is managed by MWG System Configuration Daemon.
Changes to this file will be lost. Use User Interface to configure
connectors and services.
-->

<Server port="8005" shutdown="36kwhjb3l2n3gqjd">
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
<Listener className="org.apache.catalina.core.JasperListener" />
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
<Service name="Konfigurator">
<Engine name="Konfigurator" defaultHost="localhost">
<Host name="localhost" appBase="webapps" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
<Parameter name="Redirect" value="=/Konfigurator/request" />
</Context>
<Context path="/Konfigurator" override="true" cookies="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="true" />
</Context>

</Host>
</Engine>
<Connector server="mwg-ui" URIEncoding="UTF-8" port="4712"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4710" address="127.0.0.1"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

</Service>
<Service name="FileServer">
<Engine name="FileServer" defaultHost="localhost">
<Host name="localhost" appBase="fileserver" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
</Context>

</Host>
</Engine>

</Service>
</Server>

 

 

You need to modify this file using vi command  and add below entry:-

 

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4711"
protocol="HTTP/1.1" maxThreads="500" connectionTimeout="20000"
redirectPort="8443" maxPostSize="2048" maxSavePostSize="0" />

 

 

After making above change restart mwg-ui service using below command:-

 

service mwg-ui restart

 

Regards

Alok Sarda

0 Kudos
Reply
chvgms
Level 10
Report Inappropriate Content
Message 3 of 6
‎08-28-2019 01:55 AM

Re: Re Enabling 4711 via CLI

Jump to solution

Hi Alok,

Thx for the response. i am getting the attached error. I have pasted the configuration for your reference.

 

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4712"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4710" address="127.0.0.1"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

</Service>
<Service name="FileServer">
<Engine name="FileServer" defaultHost="localhost">
<Host name="localhost" appBase="fileserver" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
</Context>

</Host>
</Engine>
<Connector server="mwg-ui" URIEncoding="UTF-8" port="4711"
protocol="HTTP/1.1" maxThreads="500" connectionTimeout="20000"
scheme="http" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
redirectPort="8443" maxPostSize="2048" maxSavePostSize="0" />

</Service>
</Server>

0 Kudos
Reply
aloksard
Employee
Employee
Report Inappropriate Content
Message 4 of 6
‎08-28-2019 02:06 AM

Re: Re Enabling 4711 via CLI

Jump to solution

Hi,

 

4711 is the default port for HTTP. As per the screenshot attached you are trying to access MWG GUI over HTTP on port 4711.

 

You need to add below link in the file:-

 

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4711"
protocol="HTTP/1.1" maxThreads="500" connectionTimeout="20000"
redirectPort="8443" maxPostSize="2048" maxSavePostSize="0" />

 

 

Request you to once look into the content of the file as mentioned in my previous reply.

 

Regards

Alok Sarda

0 Kudos
Reply
chvgms
Level 10
Report Inappropriate Content
Message 5 of 6
‎08-28-2019 03:20 AM

Re: Re Enabling 4711 via CLI

Jump to solution

hi,

i have added those lines, plz see below highligted in RED and suggest.

 

[root@MWGA ~]# cat /etc/mwg-ui/server.xml
<?xml version='1.0' encoding='utf-8'?>

<!--
This file is managed by MWG System Configuration Daemon.
Changes to this file will be lost. Use User Interface to configure
connectors and services.
-->

<Server port="8005" shutdown="y412dpvvw3x8pp9u">
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
<Listener className="org.apache.catalina.core.JasperListener" />
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
<Service name="Konfigurator">
<Engine name="Konfigurator" defaultHost="localhost">
<Host name="localhost" appBase="webapps" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
<Parameter name="Redirect" value="=/Konfigurator/request" />
</Context>
<Context path="/Konfigurator" override="true" cookies="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="true" />
</Context>

</Host>
</Engine>
<Connector server="mwg-ui" URIEncoding="UTF-8" port="4712"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

<Connector server="mwg-ui" URIEncoding="UTF-8" port="4710" address="127.0.0.1"
protocol="HTTP/1.1" SSLEnabled="true" maxThreads="500"
connectionTimeout="20000" scheme="https" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
maxPostSize="2048" maxSavePostSize="0" />

</Service>
<Service name="FileServer">
<Engine name="FileServer" defaultHost="localhost">
<Host name="localhost" appBase="fileserver" unpackWARs="true"
autoDeploy="false" deployOnStartup="true">
<Context path="" override="true" cookies="false"
allowLinking="true" clearReferencesStopTimerThreads="true" useHttpOnly="false" xmlValidation="false" xmlNamespaceAware="false">
<Manager pathname="" maxActiveSessions="0" />
<Parameter name="XSSFilter" value="true" />
<Parameter name="DenyFrames" value="false" />
</Context>

</Host>
</Engine>
<Connector server="mwg-ui" URIEncoding="UTF-8" port="4711"
protocol="HTTP/1.1" maxThreads="500" connectionTimeout="20000"
scheme="http" secure="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2" SSLCipherSuite="HIGH:!aNULL:!eNULL"
SSLHonorCipherOrder="true" SSLCertificateFile="/usr/share/mwg-ui/ssl/servercert.pem"
SSLCertificateKeyFile="/usr/share/mwg-ui/ssl/serverkey.pem"
redirectPort="8443" maxPostSize="2048" maxSavePostSize="0" />

</Service>
</Server>

0 Kudos
Reply
chvgms
Level 10
Report Inappropriate Content
Message 6 of 6
‎08-28-2019 04:48 AM

Re: Re Enabling 4711 via CLI

Jump to solution

hi, i was able to resolve this by accessing from the same subnet 🙂

0 Kudos
Reply
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use our Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from product experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by employees.
Join the Community
Join the Community

TrellixSkyhigh Security | Support Trellix.com SkyhighSecurity.com

Legal Privacy Copyright © 2023 Musarubra US LLC