HTTP Status 401 - Authentication Failed: Unable to process claimed identity

No other computer can connect either :frowning:

I did not do anything special, just installed odk aggregate with defaults,
I am using mysql as my backend database and seeing that ODK has populated
the tables in mysql. I am on Mac OSX Lion and java version is

java -version
java version "1.6.0_33"
Java(TM) SE Runtime Environment (build 1.6.0_33-b03-424-11M3720)
Java HotSpot(TM) 64-Bit Server VM (build 20.8-b03-424, mixed mode)

What could I do next?

Thanks,
Meena

··· On Tue, Aug 7, 2012 at 9:37 AM, Mitch S wrote:

The nonce timestamp is in UTC (GMT). PDT is GMT - 0700, so

2012-08-07T05:21:32 minus 7 hours

is 2012-08-06T22:21:32 PDT

So the times check out (the nonce is generated by the server, sent to the
client, then returned from the client to the server; it is used to verify
that the server is not experiencing a "replay attack").

Try logging on from other computers. If no computer can log on, then the
problem must be on the server (or in the network between the server and the
computers you're trying to use).

If other computers can connect, then the problem is with your laptop.

If the problem is with the server (as seems likely), I am uncertain how to
debug this. Are you doing anything special with the server installation?
e.g., proxies, port mappings, etc.? We use Oracle's Java (as opposed to
OpenJDK). What operating system is it running?

Mitch

On Mon, Aug 6, 2012 at 10:32 PM, Meena Rajvaidya < meena.rajvaidya@gmail.com> wrote:

I checked that the date on my computer

$ date
Mon Aug 6 22:25:17 PDT 2012

Also, from logs you could see that tomcat is logging using correct time
zone, however not sure why I am getting different timezone in the warning?

Aug 6, 2012 10:23:46 PM org.openid4java.consumer.AbstractNonceVerifier
seen
WARNING: Nonce is too old: 2012-08-07T05:21:32ZeX3xvdfuAgutcg
Aug 6, 2012 10:23:46 PM org.openid4java.consumer.ConsumerManagerImpl
verify
SEVERE: Nonce verification failed.

Thanks,
Meena

On Mon, Aug 6, 2012 at 6:29 PM, Mitch S mitchellsundt@gmail.com wrote:

Either the server or your laptop have the wrong time or timezone
setting. One or the other needs to be changed. If you open a terminal
window, and type:

date

You should see something like:

Mon Aug 6 18:45 PDT 2012

verify that the time and timezone are correct. One or the other is wrong
on your laptop or server. Correct that problem, and you will be able to
connect.

Mitch

On Mon, Aug 6, 2012 at 3:15 PM, meena.rajvaidya@gmail.com wrote:

Thanks for the response, I am on mac book pro, my server is running on
PDT timezone and I am accessing ODKAggregate from the same machine how can
I fix timezone error in this case?

Thanks,
Meena

On Monday, August 6, 2012 10:21:31 AM UTC-7, Mitch wrote:

From the logs:

Aug 5, 2012 10:52:22 PM
org.openid4java.consumer.AbstractNonceVerifier seen

WARNING: Nonce is too old: 2012-08-06T05:50:11Z0rRSQZLRSzWDcA
Aug 5, 2012 10:52:22 PM org.openid4java.consumer.ConsumerManagerImpl
verify
SEVERE: Nonce verification failed.

So
check your time zone and the time of the server. This often happens
if
you set the computer to run in "UTC" timezone but set the time to the
local time.

Mitch

On Sun, Aug 5, 2012 at 10:56 PM, meena.rajvaidya@gmail.com wrote:

On Tuesday, February 21, 2012 10:09:36 AM UTC-8, Mitch wrote:

Please don't send attachments like this to the main list -- send
them directly to me ( mitchellsundt@gmail.com ).

Yes, this log file does not include the time period when Tomcat was
started. To see the start-up, you would need to stop Tomcat, delete all
the log files in the logs directory, then start Tomcat. The catalina log
file that is produced will then log the superUserEmail once (as Tomcat
starts the ODK Aggregate web application).

Mitch

On Sun, Feb 19, 2012 at 8:32 AM, christopher serumola < serumolac@gmail.com> wrote:

I have not found any line containing "superUserEmailVerify .....". I

attach here the catalina log file for your review,

Thanks.

On 2/18/12, Mitch S mitchellsundt@gmail.com wrote:

The 401 is because the e-mail isn't being recognized by Google
(the

firewall settings or hostname aren't important for this step).

Look in the catalina log file (in the logs directory under the
Tomcat

installation).

You should see a line containing:

superUserEmailVerify that the e-mail appearing there is the
e-mail address

that Google believes you have logged in as. Google converts
e-mail address

to lowercase; ODK Aggregate, however, does case-sensitive
comparisons.

Double-check that this value is all lower-case. If it isn't,
re-run the

installation wizard and enter an all-lower-case email address
when prompted.

Mitch

On Fri, Feb 17, 2012 at 1:44 PM, serumolac@gmail.com wrote:

I have installed odk 1.04, tomcat 6.0.30,postgresql 9.0 on
windows 2003

server (sp2). The installation was successful. However, when it
comes to

google authentication i get redirected to login to gmail which i
then do

using the email(gmail) address added during odk installation. I
get HTTP

status 401 messages like ".....identity could not be verified". i

uninstalled and reinstalled all the above many times now but
only to get

the same result. I also disabled the firewall and antivirus on
the server

but still get the same error messages. I am using dynamic dns
name which

works very well. What could be the problem?

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

I am getting the same error with ODK 1.2 on mac osx. I also tried the
steps in this thread
https://groups.google.com/forum/?fromgroups#!topic/opendatakit/6iq9ycVCupIhowever get the same error. I will send catalina to Mitch.

P.S. Posting to this list for the first time so please excuse me.

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

Just to check further -- can you log onto ODK Aggregate from a browser
running on your server box?

And if you could

  • stop your tomcat server,
  • delete all the files in .../Tomcat 6.0/logs, (or wherever that lives on
    OSX)
  • start the server,
  • attempt a login from your laptop,
  • stop the server,
    and send me (directly, mitchellsundt@gmail.com -- not to the list) all the
    files in the /Tomcat 6.0/logs directory, I'll look at those again to see if
    anything there is strange.

Aggregate was developed and tested on Tomcat 6.0.35 (available at
http://tomcat.apache.org/download-60.cgi )
I assume you are using that, and not any Tomcat version that might have
come pre-installed on OSX (not sure whether anything does).

Mitch

··· On Tue, Aug 7, 2012 at 10:54 PM, Meena Rajvaidya wrote:

No other computer can connect either :frowning:

I did not do anything special, just installed odk aggregate with defaults,
I am using mysql as my backend database and seeing that ODK has populated
the tables in mysql. I am on Mac OSX Lion and java version is

java -version
java version "1.6.0_33"
Java(TM) SE Runtime Environment (build 1.6.0_33-b03-424-11M3720)
Java HotSpot(TM) 64-Bit Server VM (build 20.8-b03-424, mixed mode)

What could I do next?

Thanks,
Meena

On Tue, Aug 7, 2012 at 9:37 AM, Mitch S mitchellsundt@gmail.com wrote:

The nonce timestamp is in UTC (GMT). PDT is GMT - 0700, so

2012-08-07T05:21:32 minus 7 hours

is 2012-08-06T22:21:32 PDT

So the times check out (the nonce is generated by the server, sent to the
client, then returned from the client to the server; it is used to verify
that the server is not experiencing a "replay attack").

Try logging on from other computers. If no computer can log on, then the
problem must be on the server (or in the network between the server and the
computers you're trying to use).

If other computers can connect, then the problem is with your laptop.

If the problem is with the server (as seems likely), I am uncertain how
to debug this. Are you doing anything special with the server
installation? e.g., proxies, port mappings, etc.? We use Oracle's Java
(as opposed to OpenJDK). What operating system is it running?

Mitch

On Mon, Aug 6, 2012 at 10:32 PM, Meena Rajvaidya < meena.rajvaidya@gmail.com> wrote:

I checked that the date on my computer

$ date
Mon Aug 6 22:25:17 PDT 2012

Also, from logs you could see that tomcat is logging using correct time
zone, however not sure why I am getting different timezone in the warning?

Aug 6, 2012 10:23:46 PM org.openid4java.consumer.AbstractNonceVerifier
seen
WARNING: Nonce is too old: 2012-08-07T05:21:32ZeX3xvdfuAgutcg
Aug 6, 2012 10:23:46 PM org.openid4java.consumer.ConsumerManagerImpl
verify
SEVERE: Nonce verification failed.

Thanks,
Meena

On Mon, Aug 6, 2012 at 6:29 PM, Mitch S mitchellsundt@gmail.com wrote:

Either the server or your laptop have the wrong time or timezone
setting. One or the other needs to be changed. If you open a terminal
window, and type:

date

You should see something like:

Mon Aug 6 18:45 PDT 2012

verify that the time and timezone are correct. One or the other is
wrong on your laptop or server. Correct that problem, and you will be able
to connect.

Mitch

On Mon, Aug 6, 2012 at 3:15 PM, meena.rajvaidya@gmail.com wrote:

Thanks for the response, I am on mac book pro, my server is running on
PDT timezone and I am accessing ODKAggregate from the same machine how can
I fix timezone error in this case?

Thanks,
Meena

On Monday, August 6, 2012 10:21:31 AM UTC-7, Mitch wrote:

From the logs:

Aug 5, 2012 10:52:22 PM
org.openid4java.consumer.AbstractNonceVerifier seen

WARNING: Nonce is too old: 2012-08-06T05:50:11Z0rRSQZLRSzWDcA
Aug 5, 2012 10:52:22 PM org.openid4java.consumer.ConsumerManagerImpl
verify
SEVERE: Nonce verification failed.

So
check your time zone and the time of the server. This often happens
if
you set the computer to run in "UTC" timezone but set the time to the
local time.

Mitch

On Sun, Aug 5, 2012 at 10:56 PM, meena.rajvaidya@gmail.com wrote:

On Tuesday, February 21, 2012 10:09:36 AM UTC-8, Mitch wrote:

Please don't send attachments like this to the main list -- send
them directly to me ( mitchellsundt@gmail.com ).

Yes, this log file does not include the time period when Tomcat
was started. To see the start-up, you would need to stop Tomcat, delete
all the log files in the logs directory, then start Tomcat. The catalina
log file that is produced will then log the superUserEmail once (as Tomcat
starts the ODK Aggregate web application).

Mitch

On Sun, Feb 19, 2012 at 8:32 AM, christopher serumola < serumolac@gmail.com> wrote:

I have not found any line containing "superUserEmailVerify .....".
I

attach here the catalina log file for your review,

Thanks.

On 2/18/12, Mitch S mitchellsundt@gmail.com wrote:

The 401 is because the e-mail isn't being recognized by Google
(the

firewall settings or hostname aren't important for this step).

Look in the catalina log file (in the logs directory under the
Tomcat

installation).

You should see a line containing:

superUserEmailVerify that the e-mail appearing there is the
e-mail address

that Google believes you have logged in as. Google converts
e-mail address

to lowercase; ODK Aggregate, however, does case-sensitive
comparisons.

Double-check that this value is all lower-case. If it isn't,
re-run the

installation wizard and enter an all-lower-case email address
when prompted.

Mitch

On Fri, Feb 17, 2012 at 1:44 PM, serumolac@gmail.com wrote:

I have installed odk 1.04, tomcat 6.0.30,postgresql 9.0 on
windows 2003

server (sp2). The installation was successful. However, when it
comes to

google authentication i get redirected to login to gmail which
i then do

using the email(gmail) address added during odk installation. I
get HTTP

status 401 messages like ".....identity could not be verified".
i

uninstalled and reinstalled all the above many times now but
only to get

the same result. I also disabled the firewall and antivirus on
the server

but still get the same error messages. I am using dynamic dns
name which

works very well. What could be the problem?

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

I am getting the same error with ODK 1.2 on mac osx. I also tried
the steps in this thread
https://groups.google.com/forum/?fromgroups#!topic/opendatakit/6iq9ycVCupIhowever get the same error. I will send catalina to Mitch.

P.S. Posting to this list for the first time so please excuse me.

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

Hi Mitch,

I am using my laptop as server ( sorry if I didn't make this clear
earlier), so I have only one laptop, on which I am running tomcat 6.0.35. I
can not connect to ODKAggregate from this laptop, from any other laptop or
from any mobile browser.

Thanks,
Meena

··· On Wed, Aug 8, 2012 at 10:20 AM, Mitch S wrote:

Just to check further -- can you log onto ODK Aggregate from a browser
running on your server box?

And if you could

  • stop your tomcat server,
  • delete all the files in .../Tomcat 6.0/logs, (or wherever that lives on
    OSX)
  • start the server,
  • attempt a login from your laptop,
  • stop the server,
    and send me (directly, mitchellsundt@gmail.com -- not to the list) all
    the files in the /Tomcat 6.0/logs directory, I'll look at those again to
    see if anything there is strange.

Aggregate was developed and tested on Tomcat 6.0.35 (available at
http://tomcat.apache.org/download-60.cgi )
I assume you are using that, and not any Tomcat version that might have
come pre-installed on OSX (not sure whether anything does).

Mitch

On Tue, Aug 7, 2012 at 10:54 PM, Meena Rajvaidya < meena.rajvaidya@gmail.com> wrote:

No other computer can connect either :frowning:

I did not do anything special, just installed odk aggregate with
defaults, I am using mysql as my backend database and seeing that ODK has
populated the tables in mysql. I am on Mac OSX Lion and java version is

java -version
java version "1.6.0_33"
Java(TM) SE Runtime Environment (build 1.6.0_33-b03-424-11M3720)
Java HotSpot(TM) 64-Bit Server VM (build 20.8-b03-424, mixed mode)

What could I do next?

Thanks,
Meena

On Tue, Aug 7, 2012 at 9:37 AM, Mitch S mitchellsundt@gmail.com wrote:

The nonce timestamp is in UTC (GMT). PDT is GMT - 0700, so

2012-08-07T05:21:32 minus 7 hours

is 2012-08-06T22:21:32 PDT

So the times check out (the nonce is generated by the server, sent to
the client, then returned from the client to the server; it is used to
verify that the server is not experiencing a "replay attack").

Try logging on from other computers. If no computer can log on, then the
problem must be on the server (or in the network between the server and the
computers you're trying to use).

If other computers can connect, then the problem is with your laptop.

If the problem is with the server (as seems likely), I am uncertain how
to debug this. Are you doing anything special with the server
installation? e.g., proxies, port mappings, etc.? We use Oracle's Java
(as opposed to OpenJDK). What operating system is it running?

Mitch

On Mon, Aug 6, 2012 at 10:32 PM, Meena Rajvaidya < meena.rajvaidya@gmail.com> wrote:

I checked that the date on my computer

$ date
Mon Aug 6 22:25:17 PDT 2012

Also, from logs you could see that tomcat is logging using correct time
zone, however not sure why I am getting different timezone in the warning?

Aug 6, 2012 10:23:46 PM org.openid4java.consumer.AbstractNonceVerifier
seen
WARNING: Nonce is too old: 2012-08-07T05:21:32ZeX3xvdfuAgutcg
Aug 6, 2012 10:23:46 PM org.openid4java.consumer.ConsumerManagerImpl
verify
SEVERE: Nonce verification failed.

Thanks,
Meena

On Mon, Aug 6, 2012 at 6:29 PM, Mitch S mitchellsundt@gmail.comwrote:

Either the server or your laptop have the wrong time or timezone
setting. One or the other needs to be changed. If you open a terminal
window, and type:

date

You should see something like:

Mon Aug 6 18:45 PDT 2012

verify that the time and timezone are correct. One or the other is
wrong on your laptop or server. Correct that problem, and you will be able
to connect.

Mitch

On Mon, Aug 6, 2012 at 3:15 PM, meena.rajvaidya@gmail.com wrote:

Thanks for the response, I am on mac book pro, my server is running
on PDT timezone and I am accessing ODKAggregate from the same machine how
can I fix timezone error in this case?

Thanks,
Meena

On Monday, August 6, 2012 10:21:31 AM UTC-7, Mitch wrote:

From the logs:

Aug 5, 2012 10:52:22 PM
org.openid4java.consumer.AbstractNonceVerifier seen

WARNING: Nonce is too old: 2012-08-06T05:50:11Z0rRSQZLRSzWDcA
Aug 5, 2012 10:52:22 PM
org.openid4java.consumer.ConsumerManagerImpl verify
SEVERE: Nonce verification failed.

So
check your time zone and the time of the server. This often
happens if
you set the computer to run in "UTC" timezone but set the time to
the
local time.

Mitch

On Sun, Aug 5, 2012 at 10:56 PM, meena.rajvaidya@gmail.com wrote:

On Tuesday, February 21, 2012 10:09:36 AM UTC-8, Mitch wrote:

Please don't send attachments like this to the main list -- send
them directly to me ( mitchellsundt@gmail.com ).

Yes, this log file does not include the time period when Tomcat
was started. To see the start-up, you would need to stop Tomcat, delete
all the log files in the logs directory, then start Tomcat. The catalina
log file that is produced will then log the superUserEmail once (as Tomcat
starts the ODK Aggregate web application).

Mitch

On Sun, Feb 19, 2012 at 8:32 AM, christopher serumola < serumolac@gmail.com> wrote:

I have not found any line containing "superUserEmailVerify
.....". I

attach here the catalina log file for your review,

Thanks.

On 2/18/12, Mitch S mitchellsundt@gmail.com wrote:

The 401 is because the e-mail isn't being recognized by Google
(the

firewall settings or hostname aren't important for this step).

Look in the catalina log file (in the logs directory under the
Tomcat

installation).

You should see a line containing:

superUserEmailVerify that the e-mail appearing there is the
e-mail address

that Google believes you have logged in as. Google converts
e-mail address

to lowercase; ODK Aggregate, however, does case-sensitive
comparisons.

Double-check that this value is all lower-case. If it isn't,
re-run the

installation wizard and enter an all-lower-case email address
when prompted.

Mitch

On Fri, Feb 17, 2012 at 1:44 PM, serumolac@gmail.com wrote:

I have installed odk 1.04, tomcat 6.0.30,postgresql 9.0 on
windows 2003

server (sp2). The installation was successful. However, when
it comes to

google authentication i get redirected to login to gmail which
i then do

using the email(gmail) address added during odk installation.
I get HTTP

status 401 messages like ".....identity could not be
verified". i

uninstalled and reinstalled all the above many times now but
only to get

the same result. I also disabled the firewall and antivirus on
the server

but still get the same error messages. I am using dynamic dns
name which

works very well. What could be the problem?

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

I am getting the same error with ODK 1.2 on mac osx. I also tried
the steps in this thread
https://groups.google.com/forum/?fromgroups#!topic/opendatakit/6iq9ycVCupIhowever get the same error. I will send catalina to Mitch.

P.S. Posting to this list for the first time so please excuse me.

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

OK. The situation is clearer. Please send the logs.

··· On Wed, Aug 8, 2012 at 11:20 AM, Meena Rajvaidya wrote:

Hi Mitch,

I am using my laptop as server ( sorry if I didn't make this clear
earlier), so I have only one laptop, on which I am running tomcat 6.0.35. I
can not connect to ODKAggregate from this laptop, from any other laptop or
from any mobile browser.

Thanks,
Meena

On Wed, Aug 8, 2012 at 10:20 AM, Mitch S mitchellsundt@gmail.com wrote:

Just to check further -- can you log onto ODK Aggregate from a browser
running on your server box?

And if you could

  • stop your tomcat server,
  • delete all the files in .../Tomcat 6.0/logs, (or wherever that lives on
    OSX)
  • start the server,
  • attempt a login from your laptop,
  • stop the server,
    and send me (directly, mitchellsundt@gmail.com -- not to the list) all
    the files in the /Tomcat 6.0/logs directory, I'll look at those again to
    see if anything there is strange.

Aggregate was developed and tested on Tomcat 6.0.35 (available at
http://tomcat.apache.org/download-60.cgi )
I assume you are using that, and not any Tomcat version that might have
come pre-installed on OSX (not sure whether anything does).

Mitch

On Tue, Aug 7, 2012 at 10:54 PM, Meena Rajvaidya < meena.rajvaidya@gmail.com> wrote:

No other computer can connect either :frowning:

I did not do anything special, just installed odk aggregate with
defaults, I am using mysql as my backend database and seeing that ODK has
populated the tables in mysql. I am on Mac OSX Lion and java version is

java -version
java version "1.6.0_33"
Java(TM) SE Runtime Environment (build 1.6.0_33-b03-424-11M3720)
Java HotSpot(TM) 64-Bit Server VM (build 20.8-b03-424, mixed mode)

What could I do next?

Thanks,
Meena

On Tue, Aug 7, 2012 at 9:37 AM, Mitch S mitchellsundt@gmail.com wrote:

The nonce timestamp is in UTC (GMT). PDT is GMT - 0700, so

2012-08-07T05:21:32 minus 7 hours

is 2012-08-06T22:21:32 PDT

So the times check out (the nonce is generated by the server, sent to
the client, then returned from the client to the server; it is used to
verify that the server is not experiencing a "replay attack").

Try logging on from other computers. If no computer can log on, then
the problem must be on the server (or in the network between the server and
the computers you're trying to use).

If other computers can connect, then the problem is with your laptop.

If the problem is with the server (as seems likely), I am uncertain how
to debug this. Are you doing anything special with the server
installation? e.g., proxies, port mappings, etc.? We use Oracle's Java
(as opposed to OpenJDK). What operating system is it running?

Mitch

On Mon, Aug 6, 2012 at 10:32 PM, Meena Rajvaidya < meena.rajvaidya@gmail.com> wrote:

I checked that the date on my computer

$ date
Mon Aug 6 22:25:17 PDT 2012

Also, from logs you could see that tomcat is logging using correct
time zone, however not sure why I am getting different timezone in the
warning?

Aug 6, 2012 10:23:46 PM org.openid4java.consumer.AbstractNonceVerifier
seen
WARNING: Nonce is too old: 2012-08-07T05:21:32ZeX3xvdfuAgutcg
Aug 6, 2012 10:23:46 PM org.openid4java.consumer.ConsumerManagerImpl
verify
SEVERE: Nonce verification failed.

Thanks,
Meena

On Mon, Aug 6, 2012 at 6:29 PM, Mitch S mitchellsundt@gmail.comwrote:

Either the server or your laptop have the wrong time or timezone
setting. One or the other needs to be changed. If you open a terminal
window, and type:

date

You should see something like:

Mon Aug 6 18:45 PDT 2012

verify that the time and timezone are correct. One or the other is
wrong on your laptop or server. Correct that problem, and you will be able
to connect.

Mitch

On Mon, Aug 6, 2012 at 3:15 PM, meena.rajvaidya@gmail.com wrote:

Thanks for the response, I am on mac book pro, my server is running
on PDT timezone and I am accessing ODKAggregate from the same machine how
can I fix timezone error in this case?

Thanks,
Meena

On Monday, August 6, 2012 10:21:31 AM UTC-7, Mitch wrote:

From the logs:

Aug 5, 2012 10:52:22 PM
org.openid4java.consumer.AbstractNonceVerifier seen

WARNING: Nonce is too old: 2012-08-06T05:50:11Z0rRSQZLRSzWDcA
Aug 5, 2012 10:52:22 PM
org.openid4java.consumer.ConsumerManagerImpl verify
SEVERE: Nonce verification failed.

So
check your time zone and the time of the server. This often
happens if
you set the computer to run in "UTC" timezone but set the time to
the
local time.

Mitch

On Sun, Aug 5, 2012 at 10:56 PM, meena.rajvaidya@gmail.com wrote:

On Tuesday, February 21, 2012 10:09:36 AM UTC-8, Mitch wrote:

Please don't send attachments like this to the main list -- send
them directly to me ( mitchellsundt@gmail.com ).

Yes, this log file does not include the time period when Tomcat
was started. To see the start-up, you would need to stop Tomcat, delete
all the log files in the logs directory, then start Tomcat. The catalina
log file that is produced will then log the superUserEmail once (as Tomcat
starts the ODK Aggregate web application).

Mitch

On Sun, Feb 19, 2012 at 8:32 AM, christopher serumola < serumolac@gmail.com> wrote:

I have not found any line containing "superUserEmailVerify
.....". I

attach here the catalina log file for your review,

Thanks.

On 2/18/12, Mitch S mitchellsundt@gmail.com wrote:

The 401 is because the e-mail isn't being recognized by Google
(the

firewall settings or hostname aren't important for this step).

Look in the catalina log file (in the logs directory under the
Tomcat

installation).

You should see a line containing:

superUserEmailVerify that the e-mail appearing there is the
e-mail address

that Google believes you have logged in as. Google converts
e-mail address

to lowercase; ODK Aggregate, however, does case-sensitive
comparisons.

Double-check that this value is all lower-case. If it isn't,
re-run the

installation wizard and enter an all-lower-case email address
when prompted.

Mitch

On Fri, Feb 17, 2012 at 1:44 PM, serumolac@gmail.com wrote:

I have installed odk 1.04, tomcat 6.0.30,postgresql 9.0 on
windows 2003

server (sp2). The installation was successful. However, when
it comes to

google authentication i get redirected to login to gmail
which i then do

using the email(gmail) address added during odk installation.
I get HTTP

status 401 messages like ".....identity could not be
verified". i

uninstalled and reinstalled all the above many times now but
only to get

the same result. I also disabled the firewall and antivirus
on the server

but still get the same error messages. I am using dynamic dns
name which

works very well. What could be the problem?

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--

Mitch Sundt

Software Engineer

University of Washington

mitchellsundt@gmail.com

I am getting the same error with ODK 1.2 on mac osx. I also tried
the steps in this thread
https://groups.google.com/forum/?fromgroups#!topic/opendatakit/6iq9ycVCupIhowever get the same error. I will send catalina to Mitch.

P.S. Posting to this list for the first time so please excuse me.

--

Post: opendatakit@googlegroups.com

Unsubscribe: opendatakit+unsubscribe@googlegroups.com

Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com