Jaspersoft is not available from Clarity

[Nipun Radhakrishnan]

Hi All,

The Db password for the PPM_JASPERSOFT user expired recently. We have reset the previous password and Jaspersoft is working from the direct URL. However it is not working from Clarity and in NSA also it is showing as Unavailable. We have generated the keystore and restated the Tomcat service.
I have attached the Jasperserver logs for reference.
#CAPPM#cabijasperreports

Regards
Nipun ​​​​​​​​​

[Suman Pramanik]

Hi Nipun

Can you clarify what you meant by direct URL as we dont modify any Jaspersoft URL which is integrated in CSA, we use the same. Are you sure if you hit the Jaspersoft URL you are able to login using super user as in the logs provided I see lot of errors. 

Also if you try to connect the URL using command prompt from the clarity server do u get any error?

[Nipun Radhakrishnan]

Hi Suman,

Thanks for your prompt response. What I mean is, I can access the the Jaspersoft url configured in the NSA with super user credentials. However it is showing as Unavailable in NSA under the reporting tab and I could not access Advanced Reporting in Clarity. 
When we try to generate keystore from clarity Server using "admin content-jaspersoft csk -userName superuser -password superuser upgrade -force", I am getting the below error.

ERROR 07-07 17:27:37,610 - Login failed: httpclient.io.error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
ERROR 2021-07-07 17:27:37,610 [main] restAdapter.JasperRestAdapter Login failed: httpclient.io.error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2 [main] ERROR com.ca.jasper.restAdapter.JasperRestAdapter - Login failed: httpclient.io.error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Could not login to https://Jaspersoft-url/Jaspersoft/ with username superuser
Failed to process the jasper command. : null
Error occurred: java.lang.NullPointerException
Check admin.log or use -verbose for more information.

Regards
Nipun

[Suman Pramanik]

Thanks Nipun

The error points to certificate issue and you may need to import the certificate. Here you can read more http://www.littlebigextra.com/how-to-fix-pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception


ERROR 07-07 17:27:37,610 - Login failed: httpclient.io.error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
ERROR 2021-07-07 17:27:37,610 [main] restAdapter.JasperRestAdapter Login failed: httpclient.io.error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2 [main] ERROR com.ca.jasper.restAdapter.JasperRestAdapter - Login failed: httpclient.io.error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Could not login to https://Jaspersoft-url/Jaspersoft/ with username superuser
Failed to process the jasper command. : null
Error occurred: java.lang.NullPointerException
Check admin.log or use -verbose for more informatio

[Nipun Radhakrishnan]

HI Suman,

Do we need to import the certificate from the Clarity application server? or from the Jaspersoft server?
As i mentioned earlier that I can access Jaspersoft url from the browser with superuser credentials.

Regards
Nipun

[Suman Pramanik]

Sorry for delayed response

Do we need to import the certificate from the Clarity application server? or from the Jaspersoft server?
Since the PKIX error is coming when you are trying to access from clarity app server, you should import the certificate at Java in clarity server

As i mentioned earlier that I can access Jaspersoft url from the browser with superuser credentials.

You can do wget Jaspsersoft URL from clarity server and you will see its not able to connect, so it looks there is some network restriction in place from clarity server while accessing Jaspresoft from clarity server. 

Do you have reverse proxy sitting in between clarity and jaspersoft?