1 2 Previous Next 19 Replies Latest reply on Jun 13, 2018 9:15 AM by glowery

    Installing JMP

    sjesse Expert

      Has anyone got this to setup, I am trying to setup a test lab with

       

      vsphere 6.7

      horizon 7.5

      appvolumes 2.14

      uem 9.4

       

      but I can't get the jmp server to register, it keeps saying

       

       

      and I can't figure out the logs to see more. If I go to the jmp server with a webbrowers I see a 404, which I can't figure out is expected or not, I think so since this is probably just an server to make api calls to. I am using all self signed certificated, but I copied each of the verts  to the folders listed in

       

      https://docs.vmware.com/en/VMware-Horizon-7/7.5/horizon-JMP-server-installation/GUID-A547DD1C-DBB1-463B-B5BA-B3B3302BC2E8.html#GUID-A547DD1C-DBB1-463B-B5BA-B3B3302BC2E8

       

      but I can't seem to get it to work. Any suggestions would be great

      av-selfsigned.cert.pem

        • 1. Re: Installing JMP
          adarshm Novice

          Can you share the http response for login call(JMP Server registration call)?

          Have few questions:

          1. Is your Jmp server's self signed certificate replaced with CA signed?

          2. Are the jmp server services up? Try hitting this url from your browser https://<jmp-server-ip>/xmp/system/versions , it should return 200 OK.

          3. Is the horizon certificate  copied into "/vmware/jmp/com" folder as "horizon.cert.pem".

          4. Are you logged into horizon as domain/admin or are you using horizon servers local account?

          • 2. Re: Installing JMP
            sjesse Expert

            I'm not near in right now but I wanted to answer the other questions. I'll check the http resoponse when I can.

             

            1. Is your Jmp server's self signed certificate replaced with CA signed?

             

            No I'm using all self signed certs. I setup a small lab to test this, previous labs didn't need real certs.

            2. Are the jmp server services up? Try hitting this url from your browser https://<jmp-server-ip>/xmp/system/versions , it should return 200 OK.

            thanks for this, going directly to the https://<jmp-server-ip> provides a 503 tomcat error if I remember, I'll try this url later

            3. Is the horizon certificate  copied into "/vmware/jmp/com" folder as "horizon.cert.pem".

            I have both the horizon and appvolumes certificates here, both self signed

            4. Are you logged into horizon as domain/admin or are you using horizon servers local account?

            using the domiain\admin account.

             

            This is all in vmware workstation in two nested esxi servers so I'm not sure if thats related. Everything is on the same subnet.

            • 3. Re: Installing JMP
              sjesse Expert

              {"success":"ok","data":{"type":"Version","name":"v100","current":true,"deployment_mode":"wem","product_name":"VMware App Volumes XMP","version":"1.0.0","product_version":"1.0"}}

               

              is what https://<jmp-server-ip>/xmp/system/versions  returns. So it looks like the horizon part isn't working?

              • 4. Re: Installing JMP
                sjesse Expert

                The response I get back when I try to add it is

                 

                {"code":403,"error":"Error: Unable to verify Horizon JWT","error_code":"1044","error_type":"horizonJwtVerificationError"}

                • 5. Re: Installing JMP
                  sjesse Expert

                  I get this sometimes too

                   

                  1. {message: "Jwt token can not be generated by session created with token based Authentication",…}
                    1. category:1
                    2. message:"Jwt token can not be generated by session created with token based Authentication"
                    3. name:"com.vmware.vdi.vlsi.binding.vdi.fault.InvalidRequest"
                  • 6. Re: Installing JMP
                    sjesse Expert

                    I got it to work finnally. The last error I got was

                     

                    1. {errors: {}, error: "Insufficient Horizon Privileges", code: 400}
                      1. code:400
                      2. error:"Insufficient Horizon Privileges"
                      3. errors:{}

                     

                    To get it to work I had add my admin account directly in horizon, I couldn't use the ad group I had set for administrators. Then I needed to logon directly to the horizon console, before I used the horizon console from the flash interface. I think thats the token based session. Once I did both of these the jmp server validated successfully.

                    • 7. Re: Installing JMP
                      glowery Novice

                      I've tried the same steps that you described here and when browsing to https://<jmp-server-ip>/xmp/system/versions it's successfull.  However when I browser directly to  https://<jmp-server-ip> I get an nginx 404 error.  There doesn't seem to be anything that sticks out in the nginx logs either.

                       

                      Has anyone else come across this 404 error?

                       

                      All of the other steps that are suggested I can verify are correct.

                       

                      Anyone have any further ideas or things to lookout for troubleshooting?

                       

                       

                      • 8. Re: Installing JMP
                        sjesse Expert

                        the 404 nginx error is expected I think, you never go there directly, you  access the jmp services from the new horizon console. I've installed this in two different enviornments now successfully. To get the true error codes enable web developer tools in a browser like firefox to watch the http requests

                         

                        Network Monitor - Firefox Developer Tools | MDN

                         

                        go to the new admin console on the connection server and attempt to add the jmp server. Look at the last request that was attempted, if you click on the response from that attempt its where I got the message. The key things I learned that I don't think are in the instructions

                         

                        1.)The account you are logging into the newadmin console needs to be added directly to the administrators group in horizon. I had a AD group we use for administrators, but it looks like the API doesn't like the security groups

                         

                        2.)You need to go directy the to new admin console(https:/connectionserver.url.new admin. You can't go through the old console and click on the horiozn console button at the top, that uses a token based login, which the jmp server doesn't like

                         

                        Out side of this the other most important part is to make sure the ssl certificates from appvolumes and horizon are in the jmp/com folder listed here

                        ,

                        Configuring TLS Certificates and Cipher Suites for JMP Server

                        • 9. Re: Installing JMP
                          mouraMXmouraMX Lurker

                          Hey sjesse,

                           

                          Did you got a 504 error in your troubleshoot?

                           

                          504 Gateway Timeout

                          Request URL: https://jmpserver/xmp/jmp/login

                           

                          I'm checking with the developer tool in Chrome Browser.

                          I'm able to connect HTTPS 443, Horizon CS and JMP are in the same network.

                           

                          Every service is up and running, and certificates ok as well.

                          Using Self-Signed for JMP and got both CA-Signed (Horizon and AppVolumes) in the COM folder.

                          Domain Account added in Horizon Administrator as well.

                           

                          When i try to Add the JMP server and hit save, it connects and after a few seconds, it shows the 504 error.

                           

                          Any ideas?

                          Thanks

                          • 10. Re: Installing JMP
                            sjesse Expert

                            I did not see that issue. See if you can ping the server from the horizon connection serer, and from your desktop. Also make sure the jmp server has proper dns, you just have jmpserver as the fqdn. Since this requires ad make sure its connected to the domain and then when you add it use the full domain name.

                            • 11. Re: Installing JMP
                              mouraMXmouraMX Lurker

                              Hey,

                               

                              Yes, i can ping from the Horizon CS and Desktop.

                              I'm also using a proper dns configuration, with fqdn, registered in domain/dns, everything works.

                               

                              Could you please confirm for me what it shows, using this url for your environment: https://yourjmpserver.com/xmp/jmp/login

                              For me is this message: {"code":"NotFound","message":"/xmp/jmp/login"}

                               

                              Just checking if it trying to connecting to a service/api that is not properly running or if this is a common message for it.

                               

                              Thanks,

                              • 12. Re: Installing JMP
                                sjesse Expert

                                In the horizon server new admin console where you add the jmp server its just the jmp.server.com address. Don't add anymore.

                                • 13. Re: Installing JMP
                                  sjesse Expert

                                  Actually its the https://jmp.server.com address don't add the part after the /

                                  • 14. Re: Installing JMP
                                    glowery Novice

                                    Actually I'm experiencing this exact same thing as mouraMXmouraMX too.

                                     

                                    I have been using the developer view as suggested by sjesse a few posts early to further troubleshoot and thats the same error in regards to https://yourjmpserver.com/xmp/jmp/login that I'm seeing in the Network view of developer mode in Firefox. Very odd to say the least. 

                                    1 2 Previous Next