2 Replies Latest reply on Jun 30, 2016 7:25 AM by Tracy Mixa

    Tableau Server Sign In list changed after SSL Enabled

    Tracy Mixa

      We have recently enabled SSL on a couple of our Tableau servers.

       

      When one of our admins saved the configuration changes in our QUAL environment, he received an error:

       

      Here is what he captured from the tabadmin.log around the time of the error:

       

      2016-06-21 18:38:48.877
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Waiting for zookeeper to be available.

      2016-06-21 18:38:48.877 -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Waiting for Coordination Service to start up...

      2016-06-21 18:38:48.877
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Sending 'ruok' to localhost:12000...

      2016-06-21 18:38:49.877
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Error getting ZooKeeper state: Errno::ECONNREFUSED:Connection refused -
      Connection refused

      2016-06-21 18:38:59.881 -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Waiting for Coordination Service to start up...

      2016-06-21 18:38:59.881
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Sending 'ruok' to localhost:12000...

      2016-06-21 18:39:00.897
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Error getting ZooKeeper state: Errno::ECONNREFUSED:Connection refused -
      Connection refused

      2016-06-21 18:39:10.899
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Waiting for Coordination Service to start up...

      2016-06-21 18:39:10.899
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Sending 'ruok' to localhost:12000...

      2016-06-21 18:39:11.899 -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Error getting ZooKeeper state: Errno::ECONNREFUSED:Connection refused -
      Connection refused

      2016-06-21 18:39:21.901
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Waiting for Coordination Service to start up...

      2016-06-21 18:39:21.901
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Sending 'ruok' to localhost:12000...

      2016-06-21 18:39:22.901 -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Error getting ZooKeeper state: Errno::ECONNREFUSED:Connection refused -
      Connection refused

      2016-06-21 18:39:22.901
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Stopping all components

      2016-06-21 18:39:22.901
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Closing firewall for D:/Program Files (x86)/Tableau/Tableau
      Server/9.3/bin/zookeeper.exe

      2016-06-21 18:39:22.901 -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      running command: 'netsh firewall delete allowedprogram program =
      "D:\Program Files (x86)\Tableau\Tableau Server\9.3\bin\zookeeper.exe"
      profile = ALL' from D:/Program Files (x86)/Tableau/Tableau Server/9.3/bin

      2016-06-21 18:39:22.964
      -0500_DEBUG_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      'netsh' output:

       

      IMPORTANT: Command executed successfully.

      However, "netsh firewall" is deprecated;

      use "netsh advfirewall firewall" instead.

      For more information on using "netsh advfirewall
      firewall" commands

      instead of "netsh firewall", see KB
      article 947709

       

      at http://go.microsoft.com/fwlink/?linkid=121488

       

      Ok.

       

      2016-06-21 18:39:22.964 -0500_ERROR_10.65.120.3:dix-q-tabapp-01_:_pid=4828_0x3b1ed14b__user=__request=__
      Error: Coordination Service is not available

       

      He attempted to undo the changes he made to enable SSL and received the same error.  At that point, he restarted the server.  SSL appears to be enabled and working as it should.

       

      However, in Tableau Desktop there is now an addition server listed:

       

       

      A user who was attempting to publish a workbook out to the QUAL server received this error:

       

      It's almost like Tableau is treating the https://tableauqual.****.com as a totally separate server.

       

      One recent change to our QUAL server included installing the latest version of VizAlerts.  That is the only other thing that has changed on this server.  Does anyone have any ideas for what would be causing this to happen?