5.3 The Advanced Authentication Portals are Inaccessible After Upgrade

Issue: After updating Advanced Authentication, you are unable to open the Advanced Authentication portals except for the Configuration portal (:9443).

Reason: This issue occurs due to one of the following reasons:

  • The docker bypasses the proxy settings.

  • Insufficient disk space during the upgrade process. The minimum free space required for upgrading the appliance is 4 GB.

Workaround: Perform one of the following:

Workaround 1: Perform the following steps:

  1. Execute the command /opt/aauth/start to start the Advanced Authentication services manually.

    If an error message ERROR: Get https://registry-1.docker.io/v2/: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers) is displayed, then proceed to step 3.

  2. Check the firewall settings. The Advanced Authentication server must be able to access docker.io through the port 443 (HTTPS).

    For more information about the firewall settings, see Configuring the Firewall.

  3. Ensure the proxy settings are configured in YaST.

    For more information about the proxy settings, see Configuring the Proxy Settings

  4. Navigate to the path /etc/systemd/system/docker.service.d.

  5. Create a file http-proxy.conf and specify the following parameters:

    • [Service]

    • Environment="HTTP_PROXY=<proxy_URL>"

    • Environment="NO_PROXY=<proxy_exception>"

    • Environment="PROXY_USER=<username>:<password>"

    For example,

    [Service]

    Environment="HTTP_PROXY=http://proxy.local:8080/"

    Environment="NO_PROXY=.local, .company.com"

    Environment="PROXY_USER=proxuser:password"

  6. Save the configuration file.

  7. Restart the server.

Workaround 2: Perform the following steps:

  1. Log in to the Linux console and run the following command to verify the available disk space:

    df -h /dev/sda1

    If the minimum free space of 4 GB is not available, then increase the disk space.

  2. Run the following command to re-initiate the upgrade process:

    zypper in -f web-aauth