For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

wixxyl_98682's avatar
wixxyl_98682
Icon for Nimbostratus rankNimbostratus
Mar 03, 2013

Kronos Time clocks

So I could potentially be breaking a project this weekend if I don't get a resolution, but I know you guys won't let me down. We're upgrading our Kronos Time Clock servers with SSL Termination happening at the LTM. So that piece of it is working up to a point where you log in and run the Java application, then it comes back with an error saying : "workforce central the application could not get data from the server" Reading some other sites, I've found that error indicates this is the result of a GET from the app server to the DB server. It works fine from the individual server, but when you try to use the load balanced address, it returns this error. Any body else seen this error and resolved it successfully, I'm desperate here, I need some serious help, this would reflect very poorly on me if I can't get this going... Thanks all for taking a look.

 

config
design

8 Replies

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Mar 03, 2013

    how many Kronos Time Clock servers in pool do you have? if there is more than one, have you tried to use only one (i.e. disable the rest)?

     

     

    can you post the virtual server configuration?

     

    tmsh list ltm virtual (name)

     

    tmsh list ltm pool (name)

     

  • wixxyl_98682's avatar
    wixxyl_98682
    Icon for Nimbostratus rankNimbostratus
    Mar 03, 2013
    I actually found out the issue was a setting on the web servers that needed to be enabled to allow the traffic to be accessed from HTTP. The signs all pointed to the load balancer being the issue, but the software tech told us what we were looking for. It was kind of hairy there for a minute. If anybody else out there tries to load balance these app servers, take note, this setting must be enabled or the java enabled portion will fail all day long. One quick question though Nitass, on the tcp-lan-optimized/wan-optimized profile setting, should I match the client and server profile to be the same, or should I point one to wan, and one to lan? Or is there a better profile to use? I'm running an internet accessible web app for this, and would like to tweak it, but I'm not quite familiar enough with all of the settings to really know which ones to apply. Thanks for the earlier response BTW.
    • jybarra78_48551's avatar
      jybarra78_48551
      Icon for Nimbostratus rankNimbostratus
      Oct 20, 2014
      Hello. Any chance you can remember more on what "setting" needed to be changed on the web server. I have an eerily similar situation in a production deployment that didn't present this way in dev.
    • Jim_Raleigh's avatar
      Jim_Raleigh
      Icon for Nimbostratus rankNimbostratus
      Dec 04, 2014
      Hello, Can you provide the settings that were changed to allow Kronos to work through the LTMs?
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Mar 03, 2013
    on the tcp-lan-optimized/wan-optimized profile setting, should I match the client and server profile to be the same, or should I point one to wan, and one to lan? Or is there a better profile to use?it depends on where client and server are from. you can select same or different profile on client and server side. anyway, i think you should monitor after changing to see if there is any improvement.
  • wixxyl_98682's avatar
    wixxyl_98682
    Icon for Nimbostratus rankNimbostratus
    Mar 04, 2013
    Okay great! I will do that, thank you for all of the help, you guys always come through for me in a pinch.
  • rdessert_76127's avatar
    rdessert_76127
    Icon for Nimbostratus rankNimbostratus
    Apr 25, 2014

    Hey wixxyl... Do you have any specifics on what the setting was that needed to be changed? We are running into the exact same error in our test environment.