Post SSL change: menu.do not functioning

when you run the pfserv config, there should be 3 lines you need to change. Did you change all 3 to use https? After the changes are made, you will need to restart the server or processflow.

3 Lines?

I changed the following lines, and it was only 2 lines, which one am I missing?
Please enter the IOS Host Name: lawson-test.popeyes.cvgs.net:443
Please enter ProcessFlow Web URL: https://lawson-test.popey...et:443/bpm/daservlet

You are missing the line:

Is IOS on secured Server? : set it to true

That was already set to true.

Did you run ssoconfig to set the SSOP service?

Option1: Use HTTP only,
Option2: Use HTTPS for login only or
Option3: Use HTTPS always

If you are using option 2: You will have to do http instead of https for menu.do

Option3 will make everything https.

Posted By Jimmy Chiu on 11/08/2010 11:09 AM
Did you run ssoconfig to set the SSOP service?

Option1: Use HTTP only,
Option2: Use HTTPS for login only or
Option3: Use HTTPS always

If you are using option 2: You will have to do http instead of https for menu.do

Option3 will make everything https.

Yes, I ran ssoconfig to set the SSOP service.  I am using option 3.

Can you login to portal first, then do the menu.do? Does that work?

Posted By Jimmy Chiu on 11/08/2010 01:24 PM
Can you login to portal first, then do the menu.do? Does that work?

Negative, same issue.  I even tried making it a link from my shortcuts.

Posted By Jimmy Chiu on 11/09/2010 12:10 PM
Do you have a customized home.htm?

That would be a negative.

Using ssoconfig -c, export your BPM service.
Look at the resulting .xml file, and you will probably see that < SERVICEURL > tag still has http instead of https.
If so, change it and reload it.

Using ssoconfig -c, export your BPM service.
Look at the resulting .xml file, and you will probably see that < SERVICEURL > tag still has http instead of https.
If so, change it and reload it.

Posted By John Henley on 11/09/2010 04:35 PM
Using ssoconfig -c, export your BPM service.
Look at the resulting .xml file, and you will probably see that < SERVICEURL > tag still has http instead of https.
If so, change it and reload it.

I think I have already tried this, here is a dump of my current BPM service config.

< ?xml version="1.0" encoding="ISO-8859-1"? >
< BATCH_LOAD FORMAT="" OVERRIDE="false" >
    < SERVICE >
        < HasCredential>TRUE< /HasCredential >
        < LoginProcedure>Form based< /LoginProcedure >
        < ID >BPM< /ID >
        < SvcEntryAttrList >user,password< /SvcEntryAttrList >
        < LOGINSCHEME NAME="Form" >
< REF_SERVICENAME > SSOP < /REF_SERVICENAME >
< SERVICEURL >https://lawson-test.popeyes.cvgs.net:443/bpm/< /SERVICEURL >
< /LOGINSCHEME >
        < IdentityAttrList >user< /IdentityAttrList >
        < CredentialAttrList >PASSWORD< /CredentialAttrList >
    < /SERVICE >
< /BATCH_LOAD >

Are you able to get in menu.do via http link (non-http)?

http://lawson-test.popeyes.cvgs.net:/bpm/menu.do

Posted By Jimmy Chiu on 11/12/2010 12:11 PM
Are you able to get in menu.do via http link (non-http)?

http://lawson-test.popeyes.cvgs.net: /bpm/menu.do

Using http://lawson-test.popeyes.cvgs.net/bpm/menu.do generates a 403 response.

* Edited to reflect correct address used.

can you post your %LAWDIR%\system\bpm.properties?

and the result from https://portalserver:port/bpm/daservlet

Posted By Jimmy Chiu on 11/16/2010 02:52 PM
can you post your %LAWDIR%\system\bpm.properties?

and the result from https://portalserver:port/bpm/daservlet

As per your request.  My apologies for the delay, was out sick for two days.

I had a similar issue when I upgraded to 9.0.1, I could not get to menu.do.  What version of Environment are you on?

Posted By John Cunningham on 11/23/2010 02:21 PM
I had a similar issue when I upgraded to 9.0.1, I could not get to menu.do.  What version of Environment are you on?

Environment 9.0.0.7.535

Did anyone ever resolve this "menu.do" issue.  I have a similar issue.  Everything looks good in the bpm.properties (pfserv config).
One odd thing is that the bpm.properties has https for the daservlet. But the "https:/server/bpm/daservelt" call returns "http" as the host.
>>> But, I get the same mixed response from the DEV env that does work.
Thanks.