Error 17792 Loading Rapidminer Server

m13_biker

Hi Guys, recently we had automated the installation of rapidminer server, but when we try to bring up the server via Windows Services the service fail to start, and if we run manually the standalone.bat the server starts but the output cmd window shows the following error and repeat it indefinitely: 

2019-12-11 16:27:05.006 ERROR 17792 --- [taskScheduler-4] c.r.e.jobagent.scheduled.SyncTasks       : Sync cannot be completed. 
Cause: Failed to retrieve health status. Reason: I/O error on GET request for "https://XXXXXXXXXXXXXXXX:443/executions/sync/healthcheck": 
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: 
unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: 
unable to find valid certification path to requested target

we change the URL for security reasons, but if I browse that URL the output is OK, here is the screenshot:



any idea why keeps showing that error and the Windows Server service does not start up normally?

Thanks in advance for any help.

Best Regards

Julian G.

sgenzer

cc @mmichel @ZSzatmari

Sharan_Gadi

Hi Julian,

Looking at the error in the log, you must have the jobagent.scheduled.SyncTasks enabled (which by default is true) in agent.properties file.

##
# Enable or disable the automatic synchronization of Job Agents.
#
# If enabled, the Job Agent will automatically fetch existing resources (extensions, JDBC drivers and libraries)
# from RapidMiner Server so that no manual synchronization is required.
#
jobagent.sync.enabled = true
jobagent.sync.extensions.enabled = true
jobagent.sync.jdbc.enabled = true
jobagent.sync.libs.enabled = true
jobagent.sync.license.enabled = true
jobagent.sync.executionContext.enabled = true

For now, you can disable this and see if the server comes up fine without any issue and set up the sync manually.

During the startup of RM server via windows service or through command line, the RM server tries to start the application as well as the default job agent. The job agent comes up quickly than the server and receives this error when trying to get the health check status. The PKIX path building failed is caused when there is a certificate issue, where the valid certificate is not present in the keystore.

I would recommend to open a support ticket at https://support.rapidminer.com/

and provide us with server.log and logs from the job-agent folder. We can help you with the certificate issue over a webex session if necessary.

Thank you.

Regards

RM Support.

m13_biker

Thanks Sharan

Well acctually digging a little bite more we found another error: 

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

and the workaround that we use is uncheck and then check again the Local Launch and Local Activation on the Component Services->Computers->My Computer->Properties-COM Security-> Launch and Activation Permission 



Then the Rapidminer Server service starts well in the services.msc console.

Weird but it works.

Best Regars

Julian G