Clarity: CA PPM Advance Reporting UI stuck with 'Please Wait' message

book

Article ID: 4562

calendar_today

Updated On:

Products

CLARITY PPM FOR ITG CLARITY PPM FEDERAL Clarity PPM SaaS Clarity PPM On Premise

Issue/Introduction

After a successful Jaspersoft patch upgrade/install (5.2.1.4 and higher on 6.2.1)  the CA PPM Advance Reporting UI stuck with 'Please Wait Loading...' message when you Navigate to Advanced Reporting page.

<Please see attached file for image>

1.jpg

 

Messages in the jasperserver log will be similar to below:

 

2017-10-25 12:02:49,040 ERROR CsrfGuard,http-bio-24081-exec-13:44 [jpmc|Q012532] - potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:169.88.161.56, method:POST, uri:/reportservice/flow.html, error:required token is missing from the request)
2017-10-25 12:02:52,446 ERROR CsrfGuard,http-bio-24081-exec-11:44 [jpmc|Q012532] - potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:169.88.161.56, method:POST, uri:/reportservice/flow.html, error:required token is missing from the request)
2017-10-25 12:03:54,039 ERROR CsrfGuard,http-bio-24081-exec-9:44 [jpmc|I631298] - potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:169.88.161.55, method:POST, uri:/reportservice/flow.html, error:required token is missing from the request)

 

 

 

 

Cause

CSRF Validation Failed in Jaspersoft, there have been few improvements added for securability purposes. To see if you are facing this issue, you can capture the browser network traffic using IE Developer tools and see if any redirection to ‘login.html’ is occurring.

 

           

Environment

CA PPM 14.3 and above, Jaspersoft 6.2.1 with patch 5.2.1.4 and higher

Resolution

The CA PPM entry URL configured in CSA is different from the URL entered in browser, used to connect. Most usually an IP address or server alias instead of loadbalancer URL. The Entry URL in the CSA/properties.xml should always match the URL you are using to connect to CA PPM. If you are using a loadbalancer, it is mandatory to enter it as Entry URL.

 

To resolve the issue:

1. Set the HTTP/HTTPS Entry URL for the app service(s) in the CSA / properties.xml to the URL used to connect to CA PPM, i.e. the loadbalancer

2. Repeat for all servers in CA PPM cluster

3. Restart the services

4. Now connect to the Jaspersoft Tomcat folder. Under Tomcat directory, you will have /temp and /work folders.

5. Empty/delete the contents of these two folders (without deleting the folders themselves)

6. Restart the Jaspersoft Tomcat service. Repeat for all Jaspersoft servers.

 

 

Additional Information

Make sure you don't have trailing ‘/’ in the report server URL configured in CSA if you do, go ahead and remove it, then restart the services.

Note: Do not manually turn off the CSRF properties in Jaspersoft, as this can make your system vulnerable to CSRF attacks

Attachments

1558690522119000004562_sktwi1f5rjvs16gao.png get_app
1558690519381000004562_sktwi1f5rjvs16gan.jpeg get_app