cookf
Posts:9
 |
| 2010-05-19 09:32 AM |
|
I've installed ccRIS on a test PC together with the image server. This should allow me to test it without an SSL certificate. The image server runs fine.
Next I installed ccWorkstation with the RIS option.
At the work station login prompt I provide the user name and password as provided during the ccRIS installation. The result is the application disappears (which I translate as crash).
If I provide the wrong password or another user name I get a pop up box: Access denied. The user name and/or password may be incorrect. This makes me think something is wrong with the ccRIS admin account.
Has anyone experienced this?
I've reinstalled ccRIS once.
Any help appreciated.
|
|
|
|
|
cookf
Posts:9
|
| 2010-05-19 10:06 AM |
|
Sorry I should have included some log entries: From the ccRIS log ', @p8 = 'b07e9eff-1075-49e6-81ba-9d7b00f4fd95' And from ccRis Workstation (Beta) 2010-05-19 14:51:59,421 [1] ERROR - Exception thrown
Service operation GetConfigurationDocument failed on endpoint net.tcp://localhost:8000/ClearCanvas.Enterprise.Common.Configuration.IConfigurationService with specified exception, attempting failover.
System.ServiceModel.Security.MessageSecurityException: An unsecured or incorrectly secured fault was received from the other party. See the inner FaultException for the fault code and detail. ---> System.ServiceModel.FaultException: The message with Action 'http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).
--- End of inner exception stack trace ---
Server stack trace:
at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.ProcessReply(Message reply, SecurityProtocolCorrelationState correlationState, TimeSpan timeout)
at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Security.SecuritySessionSecurityTokenProvider.DoOperation(SecuritySessionOperation operation, EndpointAddress target, Uri via, SecurityToken currentToken, TimeSpan timeout)
at System.ServiceModel.Security.SecuritySessionSecurityTokenProvider.GetTokenCore(TimeSpan timeout)
at System.IdentityModel.Selectors.SecurityTokenProvider.GetToken(TimeSpan timeout)
at System.ServiceModel.Security.SecuritySessionClientSettings`1.ClientSecuritySessionChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.CallOpenOnce.System.ServiceModel.Channels.ServiceChannel.ICallOnce.Call(ServiceChannel channel, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at ClearCanvas.Enterprise.Common.Configuration.IApplicationConfigurationReadService.GetConfigurationDocument(GetConfigurationDocumentRequest request)
at IConfigurationServiceProxy0fc50d56d6ed4bdf92280d18e6236689.InvocationGetConfigurationDocument_13.InvokeMethodOnTarget()
at Castle.DynamicProxy.AbstractInvocation.Proceed()
at ClearCanvas.Enterprise.Common.FailoverClientAdvice.Intercept(IInvocation invocation)
2010-05-19 14:51:59,437 [1] FATAL - Exception thrown
System.ServiceModel.CommunicationObjectFaultedException: The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it is in the Faulted state.
Server stack trace:
at System.ServiceModel.Channels.CommunicationObject.Close(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.System.IDisposable.Dispose()
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at System.IDisposable.Dispose()
at ClearCanvas.Enterprise.Common.RemoteServiceProviderBase.DisposableInterceptor.Intercept(IInvocation invocation)
at Castle.DynamicProxy.AbstractInvocation.Proceed()
at IConfigurationServiceProxy0fc50d56d6ed4bdf92280d18e6236689.Dispose()
at ClearCanvas.Enterprise.Common.EnterpriseSettingsStore.GetSettingsValues(SettingsGroupDescriptor group, String user, String instanceKey)
at ClearCanvas.Common.Configuration.SettingsStoreSettingsProvider.GetPropertyValues(SettingsContext context, SettingsPropertyCollection props)
at ClearCanvas.Common.Configuration.StandardSettingsProvider.GetPropertyValues(SettingsContext context, SettingsPropertyCollection props)
at System.Configuration.SettingsBase.GetPropertiesFromProvider(SettingsProvider provider)
at System.Configuration.SettingsBase.GetPropertyValueByName(String propertyName)
at System.Configuration.SettingsBase.get_Item(String propertyName)
at System.Configuration.ApplicationSettingsBase.GetPropertyValue(String propertyName)
at System.Configuration.ApplicationSettingsBase.get_Item(String propertyName)
at ClearCanvas.Desktop.ToolStripSettings.get_WrapLongToolstrips()
at ClearCanvas.Desktop.View.WinForms.DesktopForm.OnToolStripSettingsPropertyChanged(Object sender, PropertyChangedEventArgs e)
at ClearCanvas.Desktop.View.WinForms.DesktopForm..ctor()
at ClearCanvas.Desktop.View.WinForms.DesktopWindowView.CreateDesktopForm()
at ClearCanvas.Desktop.View.WinForms.DesktopWindowView..ctor(DesktopWindow window)
at ClearCanvas.Desktop.View.WinForms.ApplicationView.CreateDesktopWindowView(DesktopWindow window)
at ClearCanvas.Desktop.DesktopWindow.CreateView()
at ClearCanvas.Desktop.DesktopObject.Open()
at ClearCanvas.Desktop.DesktopObjectCollection`1.Open(T obj)
at ClearCanvas.Desktop.DesktopWindowCollection.AddNew(DesktopWindowCreationArgs args)
at ClearCanvas.Desktop.Application.Initialize(String[] args)
|
|
|
|
|
jchan
Senior Member
Posts:243
|
| 2010-05-19 10:44 AM |
|
Ooh, that's a juicy one. You don't see that exception too often, but it's related to a certificate security. Not that there is necessarily something wrong with the certificate, it looks more like the Workstation won't talk to the Server because it isn't satisfied with the degree of security the connection is providing.
It could be something like a mismatch in the address that the Workstation is trying to reach the Server at and the one the Server is actually using, or it could be that there is a problem with the certificate store itself that is preventing the localhost certificate from working. It's hard to say for sure, but if you put up the entire RIS Server log from startup, that would complete the picture. |
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|
fakriman
Advanced Member
Posts:44
|
| 2010-05-19 11:59 AM |
|
Hi @cookf, Did you put the certificate at trusted people folder?
If not, try it.. Thas where the AP try to get the info about sites...
Other case, I'll still looking for... |
|
|
|
|
cookf
Posts:9
|
| 2010-05-20 04:29 AM |
|
Hi thanks for looking into this.
This could be a misunderstanding on my behalf. There is no certificate. All is installed on a single server; Image Server, RIS Server and ccWorkStation. I thought I read somewhere that one wouldn't need a certificate for this configuration (localhost).
My plan is to test the ris server functionality. I was also under the impression that installing RIS would add user login requirement to the workstation? The image server is currently used as a storage for reference images. To deploy this server in our hospital, the user login requirement is a security demand.
Frank |
|
|
|
|
jchan
Senior Member
Posts:243
|
| 2010-05-20 09:33 AM |
|
There is always a certificate, it's a requirement of the RIS. Certificates are tricky things. To make things easier, the installer puts a certificate issued to localhost into the appropriate stores for you if you choose the localhost configuration. Looks like there is something that is preventing the cert from working properly.
I suggest you post the server side log from startup.
|
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|
stewart
Senior Member
Posts:2033
|
| 2010-05-20 09:34 AM |
|
Hi, even for a local installation, you still need a "localhost" certificate, which the CC installer is supposed to install for you if I'm not mistaken. John, please correct me if I'm wrong. |
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|
fakriman
Advanced Member
Posts:44
|
| 2010-05-20 10:03 AM |
|
yeah, you're right...
When you install local only you must select that option at install, and let as "localhost" and next to install workstation as localhost too... If you changed this could be the problem...
I should suggest reinstall AP, if you can... And take note this option... In fact we have installed as local only and there is not problem and no certificate needed...
I hope reinstall helps to you...
Other case I can keep trying posting ideas...
Is so weird the log...
Server stack trace:
at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.ProcessReply(Message reply, SecurityProtocolCorrelationState correlationState, TimeSpan timeout)
It looks like security (firewall) reason... But locally?
And Workstation, at the install moment requires for modality, ImageViewer only or Ris and Imageviewer... If you selected RIS and Image, you'll see login screen at start WS...
|
|
|
|
|
cookf
Posts:9
|
| 2010-05-20 10:26 AM |
|
Thanks, for your entries. The ccRIS log is rather long and it might be better to pick it up first thing in the morning. Tomorrow I'll reinstall ccRIS and the ccWorkStation (in that order) and keep an close eye on what info I provide during the setup. If still the same problem then I'll post the log and would appreciate your views. |
|
|
|
|
jchan
Senior Member
Posts:243
|
| 2010-05-20 10:47 AM |
|
try this easy procedure:
1. Open the Windows Services Console and stop the ClearCanvas RIS Server NT service.
2. Browse to the ClearCanvas RIS Server\Log directory and delete the log file.
3. Start the RIS Service.
4. Wait a few seconds for the output to stop and then post the log. It shouldn't be very long.
John |
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|
cookf
Posts:9
|
|
jchan
Senior Member
Posts:243
|
| 2010-05-20 02:05 PM |
|
Frank,
there's nothing wrong on the server end; the log is clean. My guess is that you either have multiple localhost certificates where the server is using one and the client is using another, or there is a security related configuration problem that is preventing the client from using the certificate.
You can try this, although it is a bit involved:
Use a windows certificates snap-in to remove all localhost certificates for all accounts, then reinstall the RIS server and then the client. Use the localhost configuration.
John |
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|
cookf
Posts:9
|
| 2010-05-21 11:04 AM |
|
Hi John,
I think I'm running into limitations of my windows system knowledge. I've managed to start MMC and via Add Snap In -> Service, I managed to find single entries for Clear Canvas Work Station, RIS and Images Server. But there are options for Current User, Local Computer and Service. I'm not sure what I am looking for.
The MMC help offers a section on Overview and Understanding. I need to read up in the weekend.
The underlying question is: will installation of ccRIS provide user authentication to the Image Server. This is after all why I am trying to test this. I can't deploy the Image Server without proper user authentication.
This would be a shame as, true to the statement on your website About Us, Philosophy, Clear Canvas offers a much better product for both end user and administrator than the rather expensive Commercial PACS system we purchased 2.5 years ago.
Frank
|
|
|
|
|
jchan
Senior Member
Posts:243
|
| 2010-05-21 11:30 AM |
|
The underlying question is: will installation of ccRIS provide user authentication to the Image Server. It will not provide user authentication to the ImageServer web page; that already exists. So I think what you mean to ask is if it will provide authentication to the Workstation. The short answer is yes, the presence of a RIS will force users to log into the Workstation when it launches. |
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|
cookf
Posts:9
|
| 2010-05-25 11:52 AM |
|
As it was announced that version 2 is out for both Workstation and RIS, I'll uninstall the current version (1.5) and see if things fare better with the later version. Gives me a chance to go through the set up procedure again.
Thanks for the help. |
|
|
|
|
cookf
Posts:9
|
| 2010-05-26 05:34 AM |
|
Problem resolved. Not sure what caused the conflict. I was running RIS 1.5 with Workstation 2.0 beta. I have now uninstalled both RIS and Workstation and reinstalled both with the lastest 2.0 versions. No problems logging in anymore.
Thanks for all your help. |
|
|
|
|
jchan
Senior Member
Posts:243
|
| 2010-05-26 10:19 AM |
|
I guess it's not that obvious that the RIS server and client need to be the same version, but yeah, if they're not, it won't work. I'll make sure there's a note in the guide somewhere in the next release. |
|
| Real-time support available to Clinical Edition and Team Edition customers |
|
|