Hi all, I am a longtime openfire admin and i finally need some help.
I tried adding IP addresses to the whitelist in the admin console and now I have no access to the admin console. I tried localhost with 9090 and 9091. I tried ipaddress:port from ip addresses that i whitelisted. All give me http error 403 forbidden (in danish for some reason).
This is a Windows machine. Using sql server and openfire 4.8.3. I’m not sure how to get access back to the admin console.
instead of localhost or the loopback, try the interface ip from the local machine.
If you locked yourself out through the “Admin Console Access” pages, then that’s hard to undo.
You’ll need to manually go in the database, then look at the table named ofProperty
. From that table, delete the rows for adminConsole.access.ip-blocklist
and dminConsole.access.ip-allowlist
.
Obviously, backup everything before you make any changes. Also, you’ll likely need to restart Openfire after appying this change.
I tried that just now. still no luck.
I rebooted the machine and now I just get “This site can’t be reached”
I think this is what I need. Embarrassingly I don’t know where the database resides and I can’t get in to admin console to see what it says.
I said sql server. It is MySql. I’m not finding the database under MySql or Openfire folders.
Have a look in the file openfire.xml
- it should list the connection string, which will hold a reference to the host that it lives on.
I took some time for lunch. When I came back I looked at the openfire.xml. Previously it had the 127.0.0.1, but this time it was missing the leading interface tag and the ip address. I added the interface tag back, without the IP, and saved. When I went back to the browser and called up 127.0.0.1:9090 I got the setup page again.
I go through the setup (not really a big deal since this is an empty installation). When I get to the last step it says “Setup complete! This installation of Openfire is now complete. To continue: Unable to save conf/openfire.xml file - check that it is writable.”
Well of course it is locked because I have the service running. How do I complete setup if it won’t save the xml? Or should I do something else?
I’m not real sure what I did, but localhost is working again (minus all of my original settings). So now my question is how do I whitelist in a way that I don’t lose localhost when I hit save?
I’d recommend first adding a remote IP address (that you have access to) to the allow-list, test that this is working well, then start adding local IP addresses. That way, you will always have access through the remote IP address even if adding the local ones break something.
I believe that is what i was trying to do when I lost all access. I was adding IPs to the Allowlist under ServerManager-AdminConsoleAccess.
I think I am going to uninstall and install a fresh setup. I now am having issues with clients not finding the server. We’ll see what happens with a fresh install.