CDR Tickets

Issue Number 3672
Summary Unable to open excel reports on PROD
Created 2013-10-18 17:53:20
Issue Type Bug
Submitted By Osei-Poku, William (NIH/NCI) [C]
Assigned To Kline, Bob (NIH/NCI) [C]
Status Closed
Resolved 2014-05-22 10:24:50
Resolution Fixed
Path /home/bkline/backups/jira/ocecdr/issue.114074
Description

The problem I reported in OCECDR-3663 has resurfaced again. We are currently using the workarounds which are working okay. But we'll be happy to see the reports working normally again.

Comment entered 2013-10-18 22:54:53 by Kline, Bob (NIH/NCI) [C]

I have reopened the CBIIT ticket for this problem (WEBTEAM-1237).

Comment entered 2013-10-21 14:42:47 by Kline, Bob (NIH/NCI) [C]

CBIIT responded:

"I ran the workaround #4 again. Can you test if it helped? In terms of rebooting, we'll have 2 maintenance in Nov, 11/2 and 11/16. The bastion host can be rebooted during the maintenance."

Comment entered 2013-10-21 18:32:54 by Osei-Poku, William (NIH/NCI) [C]

It is working again. Thanks!

Comment entered 2013-12-13 08:38:05 by Kline, Bob (NIH/NCI) [C]

The latest comment indicates this is resolved. Is that true?

Comment entered 2013-12-13 09:18:04 by Juthe, Robin (NIH/NCI) [E]

I am still having problems opening Excel reports in the Bastion host. I just received the attached error message.

Comment entered 2013-12-13 09:38:15 by Kline, Bob (NIH/NCI) [C]

Added a comment to https://tracker.nci.nih.gov/browse/WEBTEAM-1237 asking them why they have marked that ticket as "On Hold" and if there's anything they're waiting on us to do in order get it back in the active queue.

Comment entered 2014-05-01 14:14:50 by Kline, Bob (NIH/NCI) [C]

From comment on WEBTEAM issue:

Arranged with William Osei-Poku to shadow his remote desktop session so I could see what was happening.

Found two issues:

1) Target web site https://cdr.dev.cancer.gov/ was not in Trusted Sites zone, which was causing downloads to be forbidden
2) IE Browser settings on TS-DEV-OCE forbid the caching of SSL-protected content. Tools > Internet Options > Advanced > Security > Do not save encrypted pages to disk

To correct this issue, I added *.cancer.gov to the user's Trusted Sites zone, and added the following registry value:

Hive: HKEY_LOCAL_MACHINE
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Value: ByPassSSLNoCacheCheck
Type: DWORD
Data: 0x00000001

While it would have been possible to simply disable the "Do not save encrypted pages to disk" setting, this is not advisable, since it would apply to all cache files, rather than only the ones required to permit file downloads.

Since the fixes I applied are user-level settings, other users experiencing the same issue will need to implement these changes as well. This can be done by either importing the attached registry file or by executing the following commands in a command prompt on TS-DEV-OCE (Start > Command Prompt):

reg add "HKCU\Software\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v BypassSSLNoCacheCheck /t REG_DWORD /d 1
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\cancer.gov" /v https /t REG_DWORD /d 2

Comment entered 2014-05-01 14:16:55 by Kline, Bob (NIH/NCI) [C]

Users who experience this problem need to copy the attached .reg file to their desktop on the bastion host, then double-click on it. See previous comment for more details.

Comment entered 2014-05-22 10:24:50 by Osei-Poku, William (NIH/NCI) [C]

This problem has been fixed PROD, DEV and QA.

Comment entered 2014-05-22 10:25:12 by Osei-Poku, William (NIH/NCI) [C]

Verified on PROD, DEV and QA.

Attachments
File Name Posted User
CDR Admin IE Settings.reg 2014-05-01 14:14:50
Excel Error Message.doc 2013-12-13 09:18:04

Elapsed: 0:00:00.001283