cannot connect to knime server: HTTP 307 Temporary Redirect

Hello everyone,
i’m trying to connect to an AWS knime server. I can log into webportal with no problem, but not in AP.

Here is the log:
Login to ‘knime-server’ failed: HTTP 307 Temporary Redirect

Any hint?
Luca

Edit additional information:
the server is located in AWS with a load balancer. This one have changed to an static ip recently.
Before changing it to a static ip, i could connect to it, altought not constantly, due to a load balancer.

If i try so use an incorrect password, the system seems to respond:
image

but when i use the correct one, i got this for a few seconds:
image
and then this:
image

From the log file:

Hi @Luca_Italy

Thanks for posting. A few questions.What version of Server and Analytics Platform are you on? Are you able to login via the WebPortal?

By chance is there any LDAP/AD in use or a proxy/load balancer in front of the KNIME Server?

Regards,
Wali Khan

Hi,
we are on 4.13 (web) and 4.4.1 (executor).
I’m able to login on WebPortal.

yep, there is a load balancer, the server is hosted on AWS and i’m working as an external consultant (using a vpn).
Before switching the LB to a static IP it worked fine…

Hey Luca are you able to login to the Server directly if there is no LB? Could you also try making a REST Request to the billboard endpoints at /knime/rest/v4

Regards,
Wali Khan

Hi,
i’m using the Get request node on knime.
image

if i uncheck the “follow redirects” i obtain this:

if i keep it flagged, this:

Is it something to configure on Apache Tomcat?

Luca

Hi Luca,

This is likely something on the LB if you can call the services and login directly to the KNIME Server. The KNIME Server itself shouldn’t require any configuration changes to run behind a frontend server. I’d double check this guide to see if there is something not being passed to the KNIME Server KNIME Server Administration Guide

Regards,
Wali Khan

Hi @Luca_Italy , been following this thread for a while, and I just re-read carefully the info that you provided.

So, if I understand correctly, you are NO LONGER behind a LB, correct? Where is there a redirection? It sounds like you are still going through the LB. Are you using the LB IP instead of the static IP?

Are you using the same URL to connect via the webportal and to connect via AP? If they’re different URLs then the point of entry is not the same (even an http point of entry is different from an https point of entry).

Can you confirm for these info?

I’m still behind a LB.
Some days ago it was using a dynamic ip and the connection worked…
now that is switched to a static ip it doesn’t work anymore.

i am using the very same URL: on the webportal it works flawless, but on AP i got the http 307 redirect

Little update:
if i try to use an incorrect password, the server respond immediately, of course with an error:
image

Is Tomcat responsible of the auth login?

Luca

Hi Luca

Tomcat handles the login using a connector to an H2 database (packaged with the KNIME Server). Is your LB redirecting HTTP to HTTPS?

Regards,
Wali Khan