When I use iNotes I see 403 forbidden error

03/24/2013 05:20:06PM Loading element link with href=/iNotes/Forms9.nsf/iNotes/Proxy/?OpenDocument&Form=f_StyleSheet_STProxy&ui=dwa_form&l=en&gz&CR&MX&TS=20130308T172419,32Z&BS=G... (Key: LISTENER204)
03/24/2013 05:20:06PM Releasing Eyu LISTENER205 from EPM
03/24/2013 05:20:06PM Releasing Eyu undefined from ELG
03/24/2013 05:20:06PM Loading element script with src=https://mail.televera.com/iNotes/Forms9.nsf/iNotes/Proxy/?OpenDocument&Form=STProxyPlugins&l=en&gz&MX&TS=20130324T110116,04Z&UNH=qv0k3sjp1l0ltlrtmlta8decgog&charset=UTF-8&KIC... (Key: LISTENER200)
03/24/2013 05:20:06PM Releasing Eyu LISTENER201 from EPM
03/24/2013 05:20:06PM Releasing Eyu undefined from ELG
03/24/2013 05:20:06PM KG adata available from server... Evaluating data. (Key: LISTENER232)
03/24/2013 05:20:06PM Releasing Eyu LISTENER232 from EPM
03/24/2013 05:20:06PM Releasing Eyu undefined from ELG
03/24/2013 05:20:06PM Loading element script with src=/iNotes/Forms9.nsf/iNotes/Proxy/?OpenDocument&Form=l_StdPageOperations_Gecko&l=en&gz&CR&MX&TS=20130308T172419,32Z&charset=UTF-8&pt&PresetFields=s_OpenSocialEE;1,s_OpenSocialContainer;1,s_popupdlg;1... (Key: LISTENER228)
03/24/2013 05:20:06PM Releasing Eyu LISTENER229 from EPM
03/24/2013 05:20:06PM Releasing Eyu undefined from ELG
03/24/2013 05:20:06PM Widget e-tab-4DC7F60FDA04EAEFA7B0DD8520EDFE56-0:Ebu is being created.
03/24/2013 05:20:06PM Widget e-tab-4DC7F60FDA04EAEFA7B0DD8520EDFE56-0-activity:Eeu is being created.
03/24/2013 05:20:06PM Releasing Eyu LISTENER238 from ELG
03/24/2013 05:20:06PM Releasing Eyu LISTENER237 from ELG
03/24/2013 05:20:06PM Releasing Eyu LISTENER239 from ELG
03/24/2013 05:20:06PM Widget e-services-opensocialee:Hwd is being created.
03/24/2013 05:20:06PM Widget e-services-opensocialcontainer:Hnr is being created.
03/24/2013 05:20:06PM Start tracking Eyu ContainerBatchListener from HrA
03/24/2013 05:20:06PM Start tracking Eyu ContainerTokenListener0 from HrA
03/24/2013 05:20:06PM Session expiration date from server: 20130324T165006,35Z
03/24/2013 05:20:06PM Session timers being checked.
03/24/2013 05:20:06PM Session expiration date minus slack: 03/24/2013 05:49:23PM
03/24/2013 05:20:06PM Current date: 03/24/2013 05:20:06PM
03/24/2013 05:20:06PM Loading URL: https://mail.some.com/xsp/proxy/BasicProxy/http/fra01.televera.com/fiesta/container/stgen?u=https%3A%2F%2Fmail.televera.com%2Fmail%2Fuser.nsf%2FiNotes%2FProxy%2F&m=0&c=default&d=televera.com&i=https%3A%2F%2Fmail.televera.com%2Fmail%2Fuser.nsf%2FiNotes%2FProxy%2F... (Key: ContainerTokenListener0)
03/24/2013 05:20:06PM Start tracking Eyu ContainerXmlListener from HrA
03/24/2013 05:20:06PM Session expiration date from server: 20130324T165006,35Z
03/24/2013 05:20:06PM Session timers being checked.
03/24/2013 05:20:06PM Session expiration date minus slack: 03/24/2013 05:49:23PM
03/24/2013 05:20:06PM Current date: 03/24/2013 05:20:06PM
03/24/2013 05:20:06PM Loading URL: https://mail.some.com/xsp/proxy/BasicProxy/http/fra01.televera.com/fiesta/gadgets/js/container:selection:actions:open-views:embedded-experiences:gadgets.json.ext:rpc.js?c=1&container=default... (Key: ContainerXmlListener)
03/24/2013 05:20:06PM Releasing Eyu LISTENER241 from ELG
03/24/2013 05:20:06PM Releasing Eyu LISTENER228 from ELG
03/24/2013 05:20:06PM Releasing Eyu LISTENER242 from ELG
03/24/2013 05:20:06PM Releasing Eyu LISTENER243 from ELG
03/24/2013 05:20:06PM onDatasetComplete(undefined) (Sametime Listener)
03/24/2013 05:20:07PM onDatasetComplete(undefined) (Sametime Listener)
03/24/2013 05:20:07PM Releasing Eyu LISTENER138 from FUb
03/24/2013 05:20:07PM Session expiration date from server: 20130324T165006,35Z
03/24/2013 05:20:07PM Session timers being checked.
03/24/2013 05:20:07PM Session expiration date minus slack: 03/24/2013 05:49:23PM
03/24/2013 05:20:07PM Current date: 03/24/2013 05:20:07PM
03/24/2013 05:20:07PM Loading URL: /iNotes/Forms9.nsf/iNotes/Proxy/?OpenDocument&Form=l_StdPageOperations_Gecko&l=en&gz&CR&MX&TS=20130308T172419,32Z&charset=UTF-8&pt&PresetFields=s_LitePassToMailView;1... (Key: LISTENER245)
03/24/2013 05:20:07PM Begin parsing of xml for WidgetServices
03/24/2013 05:20:07PM Added palleteItem: sId: 1579367098, sIconUrl: http://conn.some.com/connections/resources/web/com.ibm.social.as/gadget/notes/NewsWhite16.png, sTitle: Updates, sUrl: http://conn.some.com/connections/resources/web/com.ibm.social.as/gadget/ActivityStreamNotes.xml, sProviderId: com.ibm.rcp.toolbox.opensocial.provider.internal.OpenSocialPalleteProvider, HrB: http://fra01.some.com/widgets.nsf/getWidgetXML?openAgent&UNID=F7F601E33B70B840C1257AF1005CD00A&extension.xml, sSidebarStartup: false
03/24/2013 05:20:07PM Added palleteItem: sId: 304904441, sIconUrl: , sTitle: Connections, sUrl: http://conn.some.com/connections/resources/web/com.ibm.social.ee/ConnectionsEE.xml, sProviderId: com.ibm.rcp.toolbox.opensocial.provider.internal.OpenSocialPalleteProvider, HrB: http://fra01.some.com/widgets.nsf/getWidgetXML?openAgent&UNID=EE2D383EB936F0E9C1257ADA006F1815&extension.xml, sSidebarStartup: false
03/24/2013 05:20:07PM End parsing of xml for WidgetServices
03/24/2013 05:20:07PM Session expiration date from server: 20130324T165006,35Z
03/24/2013 05:20:07PM Session timers being checked.
03/24/2013 05:20:07PM Session expiration date minus slack: 03/24/2013 05:49:23PM
03/24/2013 05:20:07PM Current date: 03/24/2013 05:20:07PM
03/24/2013 05:20:07PM Loading URL: ../../iNotes/Proxy/?OpenDocument&Form=s_GetDocumentField_JSON&PresetFields=s_DocumentUNID;B89E3844D5C0E9C3C1257AD4005E21DF,s_FieldName;policy_controlled_widget_urls... (Key: LISTENER248)
03/24/2013 05:20:07PM Releasing Eyu LISTENER183 from EPM
03/24/2013 05:20:07PM Releasing Eyu undefined from ELG
03/24/2013 05:20:07PM Releasing Eyu LISTENER246 from ELG
03/24/2013 05:20:07PM Releasing Eyu LISTENER249 from ELG
03/24/2013 05:20:07PM Loading element script with src=/iNotes/Forms9.nsf/iNotes/Proxy/?OpenDocument&Form=l_StdPageOperations_Gecko&l=en&gz&CR&MX&TS=20130308T172419,32Z&charset=UTF-8&pt&PresetFields=s_LitePassToMailView;1... (Key: LISTENER244)
03/24/2013 05:20:07PM Releasing Eyu LISTENER245 from EPM
03/24/2013 05:20:07PM Releasing Eyu undefined from ELG
03/24/2013 05:20:07PM KG adata available from server... Evaluating data. (Key: LISTENER248)
03/24/2013 05:20:07PM Releasing Eyu LISTENER247
03/24/2013 05:20:07PM Releasing Eyu LISTENER248 from EPM
03/24/2013 05:20:07PM Releasing Eyu undefined from ELG
03/24/2013 05:20:08PM Releasing Eyu LISTENER250 from ELG
03/24/2013 05:20:08PM Releasing Eyu LISTENER251 from ELG
03/24/2013 05:20:08PM Releasing Eyu LISTENER252 from ELG
03/24/2013 05:20:09PM OpenSocial Container failed to load: Bad HTTP status: 403 (Forbidden)
03/24/2013 05:20:09PM Releasing Eyu LISTENER255 from ELG
03/24/2013 05:20:09PM Releasing Eyu LISTENER254 from HNr
03/24/2013 05:20:09PM Bad HTTP status: 403 (Forbidden)
Error encountered retrieving data.  Click the browser's Refresh button to reload the page.
03/24/2013 05:20:09PM Releasing Eyu ContainerXmlListener from EPM
03/24/2013 05:20:09PM Releasing Eyu undefined from ELG
03/24/2013 05:20:09PM Releasing Eyu ContainerBatchListener
03/24/2013 05:20:09PM Status was not 2xx.
Error encountered retrieving data.  Click the browser's Refresh button to reload the page.
03/24/2013 05:20:09PM Releasing Eyu ContainerTokenListener0 from EPM
03/24/2013 05:20:09PM Releasing Eyu undefined from ELG
03/24/2013 05:20:09PM Releasing Eyu LISTENER253 from ELG
03/24/2013 05:20:09PM Action context:
EZN{[object Object]}
EIX{4DC7F60FDA04EAEFA7B0DD8520EDFE56}
asDueDateTime{}
DWf{($Inbox)}
FPI{$98|SametimeInfo}
HDX{false}
BkX{}
Euc{1}
FEN{4}
FOG{6}
sSortColumnPN{$70}
sForm{memo}
EDt{false}
Fxe{undefined}
oEventProxy{[object Object]}
03/24/2013 05:20:09PM Widget ACTION5:FPV is being created.
03/24/2013 05:20:09PM Releasing Eyu LISTENER257 from ELG
03/24/2013 05:20:09PM Action context:
EZN{[object Object]}
EIX{4DC7F60FDA04EAEFA7B0DD8520EDFE56}
asDueDateTime{}
DWf{($Inbox)}
FPI{$98|SametimeInfo}
HDX{false}
BkX{}
Euc{1}
FEN{4}
FOG{6}
sSortColumnPN{$70}
sForm{memo}
EDt{false}
Fxe{undefined}

i've a quite similar error, embedded experience stil unstable..

i'll retry again afer connections 4.5 upgrade but i'm disapponted

i've a quite similar error, embedded experience stil unstable..

i'll retry again afer connections 4.5 upgrade but i'm disapponted

Hi Matteo,

I thought you managed to solve the issue? I am not sure 4.5 will help. The 403 problem is either missing SSO or something wrong with widget signing. I am going to recreate OpenSocial widgets in Domino 9 environment and we'll see if this helps.

Regards, Alexey

HI Stanton,

The problem is that nothing has been changed in the working environment and it apparently all stopped working after moving from beta to release. I will continue to debug but it is quite disappointing.

Regards, Alexey

I get two requests that are finished with error 403

[22:24:04.187] GET https://fra01.televera.com/xsp/proxy/BasicProxy/http/fra01.televera.com/fiesta/container/stgen?u=https%3A%2F%2Ffra01.televera.com%2Fmail%2Fazimarev.nsf%2FiNotes%2FProxy%2F&m=0&c=default&d=televera.com&i=https%3A%2F%2Ffra01.televera.com%2Fmail%2Fazimarev.nsf%2FiNotes%2FProxy%2F [HTTP/1.1 403 Forbidden 1235ms]

[22:24:04.190] GET https://fra01.televera.com/xsp/proxy/BasicProxy/http/fra01.televera.com/fiesta/gadgets/js/container:selection:actions:open-views:embedded-experiences:gadgets.json.ext:rpc.js?c=1&container=default [HTTP/1.1 403 Forbidden 1241ms]

In proxies policy nothing has been changed

/xsp/proxy/BasicProxy/=http://fra01.televera.com.com:80/fiesta;GET,POST;DomAuthSessId,LtpaToken,LtpaToken2;*;*

When I open any of those URLs in the browser, I don't get 403 error, instead I get this

{ "error": {"@code":"1001","param" : [ {"@name":"url","value" : "http://fra01.televera.com/fiesta/gadgets/js/container:selection:actions:open-views:embedded-experiences:gadgets.json.ext:rpc.js?c=1&container=default"} ],"details" : "!policy.error.1001!"}}

This is from trace on the server

Policy does not allow request for /xsp/proxy/BasicProxy/http/fra01.televera.com/fiesta/container/stgen
 

OK, I got some further,

I have force login via SSL on the same server where Shindig is running. When I am on SSL in iNotes and it goes to /fiesta via http - it doesn't work. How this can be fixed?

When I manually go back to http and open mail on the same server where Shindig is running, EE works ok in iNotes.

In Notes however I cannot get it working. I still see an empty page. I am using the same policy of course. I found these messages in Notes trace

CLPEE6503W: Javascript error from http://fra01.televera.com/fiesta/gadgets/js/notes-container.js?c=1&debug=1&container=default #12793
document.getElementById("loading") is null

CLPEE6503W: Javascript error from http://fra01.televera.com/fiesta/gadgets/js/notes-container.js?c=1&debug=1&container=default #13062
Container is not defined

Next thing - if I use another mail web server, not the one where Shindig is running on, I still get 403 forbidden error. SSO is configured and works fine, I have no idea what the issue is.

This is what I see on iNotes console in this case

03/25/2013 11:37:10PM Loading URL: http://mail.televera.com/xsp/proxy/BasicProxy/http/fra01.televera.com/fiesta/gadgets/js/container:selection:actions:open-views:embedded-experiences:gadgets.json.ext:rpc.js?c=1&container=default... (Key: ContainerXmlListener)
03/25/2013 11:37:10PM Releasing Eyu LISTENER294 from ELG
03/25/2013 11:37:10PM Releasing Eyu LISTENER286 from ELG
03/25/2013 11:37:10PM Releasing Eyu LISTENER295 from ELG
03/25/2013 11:37:10PM Releasing Eyu LISTENER296 from ELG
03/25/2013 11:37:10PM Status was not 2xx.
Error encountered retrieving data.  Click the browser's Refresh button to reload the page.
03/25/2013 11:37:10PM Releasing Eyu ContainerTokenListener0 from EPM
03/25/2013 11:37:10PM Releasing Eyu undefined from ELG
03/25/2013 11:37:10PM Releasing Eyu LISTENER297 from ELG
03/25/2013 11:37:10PM OpenSocial Container failed to load: Bad HTTP status: 403 (Forbidden)
03/25/2013 11:37:10PM Releasing Eyu LISTENER299 from ELG
03/25/2013 11:37:10PM Releasing Eyu LISTENER298 from HNr
03/25/2013 11:37:10PM Releasing Eyu ContainerBatchListener
03/25/2013 11:37:10PM Bad HTTP status: 403 (Forbidden)
Error encountered retrieving data.  Click the browser's Refresh button to reload the page.

Hi Alex,

What are your current settings in the "Proxies" tab of the security settings document that applies to the user with which you are logging into iNotes?  The 403 is definitely coming from the iNotes proxy blocking your two requests.  In the case where you are going to iNotes on the Shindig server, i.e., fra01.televera.com you are still going to proxy the requests because you are hitting the iNotes server via https and the shindig server is using just http, the traffic will still be proxied and will still need to be whitelisted.  The reason this works when you go to mail via http is because the traffic is no longer going through the proxy because the schemes now match.

If the "Proxies" tab is filled out properly, make sure that the policy documents are replicated to the mail server.  I believe that the mail server will reference the proxy documents as they exist in the server's own NAB for the current user who is proxying traffic. 

Best regards,

-Stanton

Stanton,

As per now on one of my machines I get EE and Updates. On another machine where everything worked with Beta I get empty screen. Nothing is found in the log/trace. I guess since I am the same user in both cases it should work the same way? So this is the issue number one.

On iNotes that goes over https, EE and Updates get 403 error. This is the issue number two.

When iNotes is run on the mail server and not on Shindig server, it gets 403 on both http and https. Policies are of course replicated since this is the same domain and both servers are even one cluster members. This is the issue number three.