Cannot launch JNLP

[brendan_kearney]

i am running Fedora 38 and OpenWebStart 1.12.0, and cannot get IPMI consoles to run. i don't know a lot about what is going on, but i did find that i had to lower/reduce the jdk.jar.disabledAlgorithms posture, to allow the older JNLP to run. i did this and still have problems. i tried to post my errors, but i am getting blocked by the hosting provider of this site, as the logs resemble an attack...

[Janak Mulani]

Can you please zip the OWS logs and post them on the forum?

[Janak Mulani]

Also can you please post what exact message you got when you got blocked by the site? This will help us investigate the issue.

[brendan_kearney]

the error message when trying to post is:

Code: Select all

403
Sorry, you have been blocked from viewing this page.

This website is using a security service to protect itself from online attacks. You performed an action that triggered the service and blocked your request.

Request ID: 1f5ecec2dba44a7ea31282d8c8f6fd74

attached are two console outputs, each from the same attempted session. not sure which is what, so both are attached.

[Janak Mulani]

You have copied and posted logs from the console. I was expecting OWS log files:(stage1 and stage 2 logs). See: https://openwebstart.com/docs/OWSGuide. ... g_to_files

However, I don't see any error in the console logs. The console1 log shows that the application was started successfully by OWS and the main method of the application was invoked..

However, please be aware that this is a public forum and every registered user can look at you logs and any sensitive information in it.

You can buy Developer of Basic Support to have a private channel on this forum. https://openwebstart.com/support/. You can share your sensitive files (Jnlp, logs) in your private channel and get guaranteed response to your posts.

> am running Fedora 38 and OpenWebStart 1.12.0, and cannot get IPMI consoles to run
What is "IPMI consoles" ? Is it a Java application that you are trying to launch with OWS? What does the Jnlp file look like. Contents of Jnlp can be logged as part of the logs (see the link above). Are you getting any error dialog? what happens after the application is launched by OWS?

[brendan_kearney]

i turned up all the debugging and logged to files. the stage1 and stage2 files are zipped and attached.

IPMI Consoles are the HP specific Intelligent Platform Management Interface, or Baseboard Management Controller. it's out-of-band management that gives you a console session over the network, as well as power on/off capabilities and other nifty stuff. Dell iDRAC and Cisco CIMC are similar products.

when i launch the JNLP, the consoles open, logs a bunch of stuff (previously attached logs) and the IPMI session starts, but i get an error saying "Connection failed." These are Java apps that I am trying to launch with OWS. I logged the contents of the JNLP to the log files, so you should see that in the new attachements. the only error is "Connection failed." dialog box. All I can do is click OK, and everything closes.

[brendan_kearney]

nothing on this...?

[Janak Mulani]

Code: Select all

[ITW-CORE][2025-07-15 15:02:12.040 EDT][INFO ][net.sourceforge.jnlp.Launcher] Invoking main() with args: [title=Virtual KVM Session - hypervisor-ipmi.bpk2.com, ip=hypervisor-ipmi.bpk2.com, platform=ast2050, vmprivilege=true, user=610515434, passwd=1585990364, kmport=2068, vport=2068, apcp=1, version=2]
[ITW-CORE][2025-07-15 15:02:12.066 EDT][DEBUG][net.sourceforge.jnlp.runtime.CachedJarFileCallback] Class-Path attribute cleared for Cached Jar /home/brendan/.cache/icedtea-web/cache/0/8/avctKVM.jar
[ITW-APP ][2025-07-15 15:02:12.153 EDT][INFO ][java.base/java.io.PrintStream.implWrite(PrintStream.java:643)] 07/15/2025 03:02:12:153: Starting client.
[ITW-APP ][2025-07-15 15:02:12.261 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] VideoQuality.initFromProperties()
[ITW-APP ][2025-07-15 15:02:12.261 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] * * * Property [CompressionMode] Old [null] New [0]
[ITW-APP ][2025-07-15 15:02:12.262 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] * * * Property [YTable] Old [null] New [0]
[ITW-APP ][2025-07-15 15:02:12.262 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] * * * Luminance Old [0] New [5]
[ITW-APP ][2025-07-15 15:02:12.262 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] VideoQuality.initFromProperties()
[ITW-APP ][2025-07-15 15:02:12.262 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] * * * Property [UVTable] Old [null] New [0]
[ITW-APP ][2025-07-15 15:02:12.262 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] * * * Luminance Old [0] New [5]
[ITW-APP ][2025-07-15 15:02:12.263 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] * * * Chrominance Old [0] New [5]
[ITW-APP ][2025-07-15 15:02:12.263 EDT][INFO ][java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:309)] VideoQuality.initFromProperties()
[ITW-CORE][2025-07-15 15:02:12.298 EDT][DEBUG][com.openwebstart.proxy.pac.PacFileEvaluator] PAC result for url 'socket://localhost:8192' -> 'DIRECT'
[ITW-CORE][2025-07-15 15:02:12.299 EDT][DEBUG][com.openwebstart.proxy.pac.PacBasedProxyProvider] PAC Proxies found for 'socket://localhost:8192' : [DIRECT]
[ITW-CORE][2025-07-15 15:02:12.338 EDT][DEBUG][com.openwebstart.proxy.pac.PacFileEvaluator] PAC result for url 'socket://hypervisor-ipmi.bpk2.com:2068' -> 'DIRECT'
[ITW-CORE][2025-07-15 15:02:12.338 EDT][DEBUG][com.openwebstart.proxy.pac.PacBasedProxyProvider] PAC Proxies found for 'socket://hypervisor-ipmi.bpk2.com:2068' : [DIRECT]
[ITW-CORE][2025-07-15 15:02:13.186 EDT][DEBUG][com.openwebstart.download.ApplicationDownloadIndicator] Closing DownloadServiceListener
[ITW-APP ][2025-07-15 15:02:13.304 EDT][INFO ][java.base/java.io.PrintStream.implWrite(PrintStream.java:643)] 07/15/2025 03:02:13:304:  Connection failed.

>

OWS is sucessfully downloading application jars, starting the application and invoking the main method of your application. The error is coming from your application. Your applications starts and there are log messages from your application. It seems your you are using a PAC based proxy. Your application is trying to open a socket connections to URLs the log message from your application says "Connection Failed". Please find out to which URL your application is trying to open the connection and failing. Whether that URL can be connected through the PAC proxy you are using on your system.

[brendan_kearney]

I turned off the proxy settings and still have the same issue. the PAC file indicates the traffic should not use the proxy, hence the [DIRECT] indicator. with or without the proxy settings, the traffic does get to the IPMI card (firewall, networking not getting in the way). i did a packet capture and see traffic on the 2068 port, but cannot tell what is in the conversation.

i have a really old machine running a legacy version of fedora, and is using the retired icedtea-web JWS. this old machine can attach to the remote console, and does work as expected. would it help if i ran debug logging on it, and provided that?

[Janak Mulani]

What Proxy setting do you have for OpenWebStart? Is it System Proxy? And Is the System Proxy using the PAC proxy? For the URL, PAC doe return DIRECT : PAC Proxies found for 'socket://hypervisor-ipmi.bpk2.com:2068' : [DIRECT]

But your APP is logging "Connection Failed": [ITW-APP ][2025-07-15 15:02:13.304 EDT][INFO ][java.base/java.io.PrintStream.implWrite(PrintStream.java:643)] 07/15/2025 03:02:13:304: Connection failed.

You need to check on your end for which URL the connection is failing and why? Is it possible to run your app with enhanced logging level? Is it possible for you to trace this "Connection Failed" log statement in your application. I guess not as the App is provided by HP.

However, since you have the downloaded jar files (in the OWS cache at <UserHome>\.cache\.icedtea-web\cache dir) would it be possible to start the application directly using java from commandline something like the following:

> java -classpath avctKVM.jar; avctKVMIOWin32.jar com.avocent.kvm.client.Main <arguments that you have in the Jnlp file to pass to the app>

Code: Select all

/home/brendan/.cache/icedtea-web/jvm-cache/adoptium_21.0.5_x64/bin/java  -classpath avctKVM.jar:avctKVMIOWin32.jar --add-reads=java.base=ALL-UNNAMED,java.desktop --add-reads=java.desktop=ALL-UNNAMED,java.naming --add-reads=java.naming=ALL-UNNAMED,java.desktop --add-exports=java.desktop/sun.awt=ALL-UNNAMED,java.desktop --add-exports=java.desktop/javax.jnlp=ALL-UNNAMED,java.desktop --add-exports=java.base/com.sun.net.ssl.internal.ssl=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.net.www.protocol.jar=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.security.action=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.security.provider=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.security.util=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.security.validator=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.security.x509=ALL-UNNAMED,java.desktop --add-exports=java.base/jdk.internal.util.jar=ALL-UNNAMED,java.desktop --add-exports=java.base/sun.net.www.protocol.http=ALL-UNNAMED,java.desktop --add-exports=java.desktop/sun.awt.X11=ALL-UNNAMED,java.desktop --add-exports=java.desktop/sun.applet=ALL-UNNAMED,java.desktop,jdk.jsobject --add-exports=java.naming/com.sun.jndi.toolkit.url=ALL-UNNAMED,java.desktop -Djava.security.manager=allow com.avocent.kvm.client.Main <arguments that you have in the Jnlp file to pass to the app>

[brendan_kearney]

i have had multiple settings set for proxy, in an attempt so see if it made a difference. notably, there was no difference. the same error occurred. i set the proxy using <host>:<port>, specified the PAC file, used system settings, and no proxy. ultimately, the use or lack of using the proxy did not change anything.

i ran a packet capture while starting the app, and the traffic for the remote console is over tcp/2068. communication over port 2068 does occur, and there are no reset (RST) seen. the connection establishes fine (SYN,SYN/ACK,ACK), then some conversation and the session closes with FIN/ACK,FIN/ACK. there are no network level communication issues.

i ran this:

Code: Select all

#!/bin/bash

/home/brendan/.cache/icedtea-web/jvm-cache/adoptium_21.0.5_x64/bin/java \
        -Xbootclasspath/a:/opt/OpenWebStart/openwebstart.jar \
        -Dicedtea-web.bin.location=/opt/OpenWebStart/javaws \
        --add-reads=java.base=ALL-UNNAMED,java.desktop \
        --add-reads=java.desktop=ALL-UNNAMED,java.naming \
        --add-reads=java.naming=ALL-UNNAMED,java.desktop \
        --add-exports=java.desktop/sun.awt=ALL-UNNAMED,java.desktop \
        --add-exports=java.desktop/javax.jnlp=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/com.sun.net.ssl.internal.ssl=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.net.www.protocol.jar=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.security.action=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.security.provider=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.security.util=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.security.validator=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.security.x509=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/jdk.internal.util.jar=ALL-UNNAMED,java.desktop \
        --add-exports=java.base/sun.net.www.protocol.http=ALL-UNNAMED,java.desktop \
        --add-exports=java.desktop/sun.awt.X11=ALL-UNNAMED,java.desktop \
        --add-exports=java.desktop/sun.applet=ALL-UNNAMED,java.desktop,jdk.jsobject \
        --add-exports=java.naming/com.sun.jndi.toolkit.url=ALL-UNNAMED,java.desktop \
        -Djava.security.manager=allow net.sourceforge.jnlp.runtime.Boot \
        -Xnofork \
        /home/brendan/Downloads/viewer.jnlp\(hypervisor-ipmi.bpk2.com@0@1760038976436\)

i attempted to add the output, but was blocked as something resembles an attack. needless to say, the "connection failed" message occurred, even though both ends did speak to each other. The client i am using is the party that issued the first FIN/ACK, so the client "hung up the phone" in the conversation.

[Janak Mulani]

The command that you ran is the one used by OWS stage 2 to start the app. I would like you to try running your app directly with java using the command I posted in my previous post. This will take out OWS from the equation and test if your Java application is running on your machine within your environment.

[brendan_kearney]

running this:

Code: Select all

/usr/bin/java \
        -classpath  avctKVM.jar:avctKVMIOLinux.jar \
        com.avocent.kvm.client.Main \
        /home/brendan/Downloads/viewer.jnlp\(hypervisor-ipmi.bpk2.com@0@1760390065452\)

results in this:

Code: Select all

+ /usr/bin/java -classpath avctKVM.jar:avctKVMIOLinux.jar com.avocent.kvm.client.Main '/home/brendan/Downloads/viewer.jnlp(hypervisor-ipmi.bpk2.com@0@1760390065452)'
Error: Could not find or load main class com.avocent.kvm.client.Main
Caused by: java.lang.ClassNotFoundException: com.avocent.kvm.client.Main

please note, a lot of this is way past my capability. i am an infrastructure guy, so the code and syntax do not make a lot of sense to me. i hope i ran what you are looking for.

[Janak Mulani]

Basically I wanted you to run the app directly using java. The above mentioned jar files should be in the same directory from which you are running the command. You will find these jar files in sub-directories of <User Home>/.cache/icedtea-web/cache directory. You copy them to a directory from which you will run the above command. The arguments after the main class : com.avocent.kvm.client.Main should not be the Jnlp file, they should come from the arguments key value pairs specified in the Jnlp file in the under the <application> tag (see the Jnlp file that is logged in the log files).

I would recommend that you buy paid support https://openwebstart.com/support/ as a developer or as a company for further help.

OWS is starting the app. After that it has no control over the app. The app is crashing while making a URL connection.