Cannot make server to server connection-help

Openfire Openfire Support
22

This doesn’t really show much, other than that a user named ‘stan.braithwaite’ is probably using an incorrect password in an attempt to log in.

I’d advice you to use the ‘all.log’ file, not ‘debug’.

23

i enabled debug again, this is from the all log, tonyg sending to todd stuhmer

2019.09.18 14:15:30 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event SESSION_IDLE to session 315
Queue : [SESSION_IDLE, ]

2019.09.18 14:15:30 DEBUG [socket_c2s-thread-11]: org.jivesoftware.openfire.nio.ClientConnectionHandler - ConnectionHandler: Pinging connection that has been idle: org.jivesoftware.openfire.nio.NIOConnection@1ed8394 MINA Session: (0x0000013B: nio socket, server, /172.30.4.27:56894 => /172.30.0.14:5222)
2019.09.18 14:15:31 DEBUG [socket_c2s-thread-11]: org.apache.mina.filter.ssl.SslFilter - Session Server[315](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=120 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 67 65 74 22 20 69...]
2019.09.18 14:15:31 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 315
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:31 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[315](SSL): Message received : HeapBuffer[pos=0 lim=117 cap=128: 17 03 03 00 70 3B D2 17 05 80 16 31 A9 53 16 E5...]
2019.09.18 14:15:31 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslHandler - Session Server[315](SSL) Processing the received message
2019.09.18 14:15:31 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[315](SSL): Processing the SSL Data
2019.09.18 14:15:31 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 315
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:31 DEBUG [socket_c2s-thread-15]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 315
2019.09.18 14:15:32 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event SESSION_IDLE to session 327
Queue : [SESSION_IDLE, ]

2019.09.18 14:15:32 DEBUG [socket_c2s-thread-4]: org.jivesoftware.openfire.nio.ClientConnectionHandler - ConnectionHandler: Pinging connection that has been idle: org.jivesoftware.openfire.nio.NIOConnection@443e2f14 MINA Session: (0x00000147: nio socket, server, /172.30.4.103:57307 => /172.30.0.14:5222)
2019.09.18 14:15:32 DEBUG [socket_c2s-thread-4]: org.apache.mina.filter.ssl.SslFilter - Session Server[327](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=124 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 67 65 74 22 20 69...]
2019.09.18 14:15:32 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 327
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:32 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[327](SSL): Message received : HeapBuffer[pos=0 lim=117 cap=128: 17 03 03 00 70 99 B4 99 EE 35 C2 E6 C1 1A 19 D2...]
2019.09.18 14:15:32 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslHandler - Session Server[327](SSL) Processing the received message
2019.09.18 14:15:32 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[327](SSL): Processing the SSL Data
2019.09.18 14:15:32 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 327
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:32 DEBUG [socket_c2s-thread-11]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 327
2019.09.18 14:15:33 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[328](SSL): Message received : HeapBuffer[pos=0 lim=41 cap=64: 17 03 03 00 24 00 00 00 00 00 00 00 32 F3 7E BB...]
2019.09.18 14:15:33 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslHandler - Session Server[328](SSL) Processing the received message
2019.09.18 14:15:33 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[328](SSL): Processing the SSL Data
2019.09.18 14:15:33 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 328
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:33 DEBUG [socket_c2s-thread-14]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 328
2019.09.18 14:15:33 DEBUG [Queued Packets Processor]: org.apache.mina.filter.ssl.SslFilter - Session Server[328](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=236 cap=4096: 3C 6D 65 73 73 61 67 65 20 69 64 3D 22 6D 69 72...]
2019.09.18 14:15:33 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 328
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:33 DEBUG [Queued Packets Processor]: org.jivesoftware.openfire.server.OutgoingSessionPromise$PacketsProcessor - Error sending packet to domain 'uedi-gbs.com' (outbound queue full):
<message type="chat" to="todd.stuhmer@uedi-gbs.com" id="mireb4b4f876852209c_28" from="tonyg@ultra-fei.com/Miranda">
  <body>another test</body>
</message>
2019.09.18 14:15:34 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event SESSION_IDLE to session 319
Queue : [SESSION_IDLE, ]

2019.09.18 14:15:34 DEBUG [socket_c2s-thread-4]: org.jivesoftware.openfire.nio.ClientConnectionHandler - ConnectionHandler: Pinging connection that has been idle: org.jivesoftware.openfire.nio.NIOConnection@418ea136 MINA Session: (0x0000013F: nio socket, server, /172.30.4.17:56580 => /172.30.0.14:5222)
2019.09.18 14:15:34 DEBUG [socket_c2s-thread-4]: org.apache.mina.filter.ssl.SslFilter - Session Server[319](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=119 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 67 65 74 22 20 69...]
2019.09.18 14:15:34 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 319
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:34 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[319](SSL): Message received : HeapBuffer[pos=0 lim=117 cap=128: 17 03 03 00 70 53 E4 C5 B2 25 73 50 15 CE 1C 3B...]
2019.09.18 14:15:34 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslHandler - Session Server[319](SSL) Processing the received message
2019.09.18 14:15:34 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[319](SSL): Processing the SSL Data
2019.09.18 14:15:34 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 319
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:34 DEBUG [socket_c2s-thread-11]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 319
2019.09.18 14:15:42 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[328](SSL): Message received : HeapBuffer[pos=0 lim=42 cap=64: 17 03 03 00 25 00 00 00 00 00 00 00 33 83 06 F4...]
2019.09.18 14:15:42 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslHandler - Session Server[328](SSL) Processing the received message
2019.09.18 14:15:42 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[328](SSL): Processing the SSL Data
2019.09.18 14:15:42 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 328
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:42 DEBUG [socket_c2s-thread-14]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 328
2019.09.18 14:15:42 DEBUG [Queued Packets Processor]: org.apache.mina.filter.ssl.SslFilter - Session Server[328](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=236 cap=4096: 3C 6D 65 73 73 61 67 65 20 69 64 3D 22 6D 69 72...]
2019.09.18 14:15:42 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 328
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:42 DEBUG [Queued Packets Processor]: org.jivesoftware.openfire.server.OutgoingSessionPromise$PacketsProcessor - Error sending packet to domain 'uedi-gbs.com' (outbound queue full):
<message type="chat" to="todd.stuhmer@uedi-gbs.com" id="mireb4b4f876852209c_30" from="tonyg@ultra-fei.com/Miranda">
  <body>another test</body>
</message>
2019.09.18 14:15:47 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event SESSION_IDLE to session 325
Queue : [SESSION_IDLE, ]

2019.09.18 14:15:47 DEBUG [socket_c2s-thread-4]: org.jivesoftware.openfire.nio.ClientConnectionHandler - ConnectionHandler: Pinging connection that has been idle: org.jivesoftware.openfire.nio.NIOConnection@5de88f86 MINA Session: (0x00000145: nio socket, server, /172.30.4.126:49241 => /172.30.0.14:5222)
2019.09.18 14:15:47 DEBUG [socket_c2s-thread-4]: org.apache.mina.filter.ssl.SslFilter - Session Server[325](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=116 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 67 65 74 22 20 69...]
2019.09.18 14:15:47 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 325
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:47 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[325](SSL): Message received : HeapBuffer[pos=0 lim=117 cap=128: 17 03 03 00 70 77 83 2A 85 19 61 43 15 44 F3 B3...]
2019.09.18 14:15:47 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslHandler - Session Server[325](SSL) Processing the received message
2019.09.18 14:15:47 DEBUG [NioProcessor-2]: org.apache.mina.filter.ssl.SslFilter - Session Server[325](SSL): Processing the SSL Data
2019.09.18 14:15:47 DEBUG [NioProcessor-2]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 325
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:47 DEBUG [socket_c2s-thread-11]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 325
2019.09.18 14:15:50 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event SESSION_IDLE to session 202
Queue : [SESSION_IDLE, ]

2019.09.18 14:15:50 DEBUG [socket_c2s-thread-14]: org.jivesoftware.openfire.nio.ClientConnectionHandler - ConnectionHandler: Pinging connection that has been idle: org.jivesoftware.openfire.nio.NIOConnection@257ac11b MINA Session: (0x000000CA: nio socket, server, /172.30.4.3:51145 => /172.30.0.14:5222)
2019.09.18 14:15:50 DEBUG [socket_c2s-thread-14]: org.apache.mina.filter.ssl.SslFilter - Session Server[202](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=119 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 67 65 74 22 20 69...]
2019.09.18 14:15:50 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 202
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:50 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[202](SSL): Message received : HeapBuffer[pos=0 lim=117 cap=128: 17 03 03 00 70 BC 13 9B 2F 8D 19 0B 82 1F 13 E4...]
2019.09.18 14:15:50 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslHandler - Session Server[202](SSL) Processing the received message
2019.09.18 14:15:50 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[202](SSL): Processing the SSL Data
2019.09.18 14:15:50 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 202
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:50 DEBUG [socket_c2s-thread-4]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 202
2019.09.18 14:15:51 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event SESSION_IDLE to session 4
Queue : [SESSION_IDLE, ]

2019.09.18 14:15:51 DEBUG [socket_c2s-thread-3]: org.jivesoftware.openfire.nio.ClientConnectionHandler - ConnectionHandler: Pinging connection that has been idle: org.jivesoftware.openfire.nio.NIOConnection@79719339 MINA Session: (0x00000004: nio socket, server, /172.30.4.37:62550 => /172.30.0.14:5222)
2019.09.18 14:15:51 DEBUG [socket_c2s-thread-3]: org.apache.mina.filter.ssl.SslFilter - Session Server[4](SSL): Writing Message : WriteRequest: HeapBuffer[pos=0 lim=120 cap=4096: 3C 69 71 20 74 79 70 65 3D 22 67 65 74 22 20 69...]
2019.09.18 14:15:51 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_SENT to session 4
Queue : [MESSAGE_SENT, ]

2019.09.18 14:15:51 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[4](SSL): Message received : HeapBuffer[pos=0 lim=117 cap=128: 17 03 03 00 70 61 27 BE 44 23 CB 29 7D 57 9D 3B...]
2019.09.18 14:15:51 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslHandler - Session Server[4](SSL) Processing the received message
2019.09.18 14:15:51 DEBUG [NioProcessor-1]: org.apache.mina.filter.ssl.SslFilter - Session Server[4](SSL): Processing the SSL Data
2019.09.18 14:15:51 DEBUG [NioProcessor-1]: org.apache.mina.filter.executor.OrderedThreadPoolExecutor - Adding event MESSAGE_RECEIVED to session 4
Queue : [MESSAGE_RECEIVED, ]

2019.09.18 14:15:51 DEBUG [socket_c2s-thread-14]: org.apache.mina.filter.codec.ProtocolCodecFilter - Processing a MESSAGE_RECEIVED for session 4
24

This log shows that the message isn’t being delivered, as the queue of messages that are to be delivered to the domain that the recipient is on, is already full. Sadly, the reason why this queue is full isn’t logged.

If you’re in a position to restart Openfire (which will reset that queue), and try again, I suspect that you’ll have a better chance at finding the root cause in the logs.

25

guus, i shut openfire down, deleted the all.log, enabled debug and started back up. here is the startup and an attempt to send to todd stuhmer@uedi-gbs.com
thanks
all.log (305.2 KB)

26

I’m noticing this:

Will not route: Remote domain gbs-vic-chat-1.uedi-gbs.com is not accessible according to our configuration (typical causes: server federation is disabled, or domain is blacklisted).

Can you check:

  1. If server-to-server functionality is enabled?
  2. That the domain that you want to talk to is not blacklisted.

Both of these settings can be found on the same admin console page. I’ll include a screenshot of ours, with the domains that we blocked blurred:

image
image921×1140 114 KB

27

hi, thanks for sticking with this. i have it enabled on both servers. i have a whitelist (a testing step) but originally, i was allowing all connections, did not make a difference

2019-09-19%2013_41_32-Window
2019-09-19%2013_41_32-Window1140×629 18.9 KB

2019-09-19%2013_40_56-Window
2019-09-19%2013_40_56-Window1144×631 18.7 KB

28

hi, can you tell me where you guys are with the fixes for s2s ? I think I am having this issue.

thanks

29

Sorry for the late response. All of those fixes are in 4.4.4. Did any of them fix your issue?

30

Guus, sorry for going dark…in short, no, site to site broke after my upgrade from 4.21 to 4.3 and has never worked since. i am on latest 4.4.4.1 on both ends. the indicators are confusing. the test succeeds from a to b, but not b to a.
I saw another note that you are completely rewriting the s2s code? if so, when will that be out? If you want to see my logs, just let me know.

thanks

31

Any update on this? I am not able to do Openfire to Openfire (s2s). I have tried everything even with no encryption. It just seems broken. I can do s2s to prosody and jabber.org. I have no issues with those. Just seems to be talking to another Openfire server.

32

UG! No! I have not been able to get S2S to work and I am on current 4.5.1…I am pulling my hair out!

33

I guess no one supports this product. I have tried a few times to get it working. I will just stay with prosody. It is a shame. I love the interface and features, but important things like push to IOS and server to server are broken. No way to get developers to look. So hopefully in the future they will fix it, but until then I am staying with what works.

I am beging to think it has something to do with the truststores. I think the s2s is not using the server identity from the client.truststore. I did some checking and I can’t seem to get it to pass validation when testing from: https://xmpp.net/

But even when I disable encryption on both sides I can’t get it to work. So I am at a loss where the true issue is.
Also, the push notification plugin they wrote I can’t get to work either. My guess linked to SSL again.

34

I figured it out: Openfire to Openfire (s2s) not working

35

There are some people who offer their free time to help others at no cost. But of course this means there are no guarantees of service of any sort.

If that sort of guarantee is important to you, feel free to engage one of the professional partners listed at Ignite Realtime: Support - Professional Partners

Greg

1 Like
36

Unfortunately, this is not my issue, I am using java 1.8 and still no S2S!
Java Version: 1.8.0_242 Oracle Corporation -- OpenJDK 64-Bit Server VM

Anyone Else have any Ideas??

37

as a test, would you mind rolling java back to 8u221?

1 Like
38

hi, i would be willing to try that…but i am not sure how to do it…these are installed on centos7…can you point me in the right direction?

39

A post was merged into an existing topic: Connection error connecting from another computer

40

hi, i see this topic was merged with another…but I am pretty sure they are not the same issue. I think I have my dns right and I am think this is some kind of ssl issue. can you please explain how (if at all) you want me to proceed?

thanks a ton!

41

I’m not familiar enough with centos 7, but some update to java in u231 and u241 made changes to crypto and security. Id be curious to see if that is the cause or not.
https://www.oracle.com/technetwork/java/javase/8u-relnotes-2225394.html