Unable to log into HAP

[CHiLL]

Since the weekend, we have suddenly been unable to log into HAP and I've been unable to figure out why. We see the login page, however when the user enters their credentials and presses 'Login', the web page then just does nothing. The only indication that I see from the browser is the whirling waiting/loading circle, however nothing happens.

 

Our HAP server is located on a virtual Server 2012 R2 machine, on ESXi 6.0. On Friday for load balancing, I took the HAP server offline to migrate the data stores and hardware resources to the other ESXi host. When this completed, I brought the server back up. I'm pretty sure I logged back into HAP afterwards, but I'm not 100% sure as it's been the weekend since!

 

HAP is not the only website this server is hosting. There is another website, which is working correctly and allowing users to log in. The difference is that this other website is not using AD authentication.

 

Things I have attempted:

• Rebooted the server
  
• Restored a copy of C:\inetpub\wwwroot\HAP from Thursday night's backup (Note: I attempted this before the VEEAM restore stated below)
  
• Ensured the 'Credential Manager' service is runnig on the server
  
• Used both Chrome and IE
  
• Attempted this on the server itself and three client machines
  
• Perofmed a complete server restore from VEEAM to Thursday night's backup.
  

 

None of the above worked.

 

Does anybody have any ideas?

 

Thanks.

Edited September 26, 2016 by CHiLL

[Stuajnht]

Hi,

 

Not sure if these'll help, but throwing them out there anyway.

 

• Is there anything logged in Event Viewer that looks like it's causing problems
  
• Does the page eventually load, or forever on the loading screen (web developer tools may help here)
  
• Can you access the setup.aspx page and fill in the AD credentials again (may need to give access to everyone again in the web.config file)
  
  • (Related to above) The account you use in the hapconfig.xml file - has the password expired?
    

   

  [*]Rejoin the server to the domain

[CHiLL]

Hi,

 

Not sure if these'll help, but throwing them out there anyway.

 

• Is there anything logged in Event Viewer that looks like it's causing problems - I can't see anything relating to HAP in the event log on the server.
  
• Does the page eventually load, or forever on the loading screen (web developer tools may help here) - It just does nothing, staying on the loading screen. As for the developer options, I've rarely used these, what am I looking for?
  
• Can you access the setup.aspx page and fill in the AD credentials again (may need to give access to everyone again in the web.config file) - No, it just redirects me back to the login page
  
  • (Related to above) The account you use in the hapconfig.xml file - has the password expired? - No, I've double checked in AD.
    

   

  [*]Rejoin the server to the domain - Tried this, but no avail.

Please see the above comments.

[Stuajnht]

Thanks for your comments.

 

For the web dev tools you'd want to go onto the network tab and see if the requests load, or if it just hangs on the first request. I think this may not be worth the effort at the moment though as you say it never loads.

 

Is it possible that you could set up HAP+ again on the same server, following the setup guide, but call it HAP2 (or similar)? Once you've created the server, copy all the files from your current HAP\App_Data to the HAP2\App_Data folder (just tried it myself as a test, as this should save you having to put in all of your settings again) and trying to log in with this new copy (i.e. https:///HAP2). If it works, then something went wrong with the original install. Otherwise, there's something else causing the problems.

[CHiLL]

Thanks for your comments.

 

For the web dev tools you'd want to go onto the network tab and see if the requests load, or if it just hangs on the first request. I think this may not be worth the effort at the moment though as you say it never loads.

 

Is it possible that you could set up HAP+ again on the same server, following the setup guide, but call it HAP2 (or similar)? Once you've created the server, copy all the files from your current HAP\App_Data to the HAP2\App_Data folder (just tried it myself as a test, as this should save you having to put in all of your settings again) and trying to log in with this new copy (i.e. https:///HAP2). If it works, then something went wrong with the original install. Otherwise, there's something else causing the problems.

I kept IIS the same, though removed HAP website and Application Pool. I then followed the installation instructions to create a new instance, however the same problem exists.

 

Update:

I have installed IIS on a separate server and installed a fresh version of HAP onto it. Once configured, we have the exact same problem. So my issue lies somewhere else...maybe the way that HAP is attempted to authenticate users from AD? Nothing that we know of has changed and I'm not sure where to look. I've attempted to user different AD domain admin accounts during the setup of HAP, all have the same problem.

 

Update2:

We may have inadvertently solved the issue. My colleage was investigating a separate problem with another service and found that a security group was a member of a bunch of other security groups...but that those other security groups were also a member of the single security group. I think this cycle of nested groups was causing issues with both services. Once it was rectified, both services started working again.

Edited September 27, 2016 by CHiLL