Container Private Cloud Authentication

Version

Application Scenarios

The project is deployed in the Docker container, so it cannot bind the machine instruction code or MAC address. In this case, local machine information authentication and private cloud authentication are not available.

The FineReport projects cannot connect to the external network, so public cloud authentication is not available.

You may need to authorize multiple report servers by one license server, so the local container authentication is not available.

Functions

You can use Private Cloud for authentication, which is suitable for containerized deployment projects.

You need to prepare two environments:

1. License server: used to upload the mirror image file for starting the private cloud in the Docker container.

2. Project server: the server where FineReport or Fine BI is located

Notes

1. The license server and the project server can share the same server or be deployed separately on two servers. Ensure that they can be connected through network.

2. The license server cannot keep closed for more than 24 hours.

• If the server has been closed for more than 24 hours, you need to authenticate again after restarting. You do not need to upload the mirror image files again, but need to scan the QR code and enter the verification code.

• If the server has been closed for more than 24 hours, the report server will prompt failure to register and reconnect to the license server within two hours. The registration will not expire.

3. The project server will send a request to the license server every two hours. The license server will give feedbacks to the report server after receiving the requests.

If the project server has not received feedbacks for 12 consecutive times (within 24 hours), or the license server has not received requests for 24 consecutive hours, the project server registration will fail, and you need to register again.

In FineReport 11.0.18 and later versions, the registration failure time and reasons will be displayed in a table in System Management > RegistrationManagement > Version Information > Registration Information to help you troubleshoot problems.

Note: In a cluster environment, the failure reasons may vary in different nodes, and the failure reasons for each node will be displayed.

Getting the License File

Use the email account required in the contract to send registration information to FineReport business team ( business@fanruan.com). The format of the email is as follows.

After confirmation, FanRuan will generate the fanruan_license_server.tar mirror image file of the license server and send it to you through email.

Note:

If there are any problems, describe them in the email.

Starting the License Server

1. Load the fanruan_license_server.tar mirror image file.

docker load < fanruan_license_server.tar

2. Check the loaded mirror image file.

There are arm64 and amd64 packages by default. You can select as needed. Take the amd64 package as an example.

docker images

3. Generate the container through Docker mirror and map the directory.

Take mapping /app/config to the D:\William\lic\config directory as an example.

docker run -v /D/William/lic/config:/app/config -P -d fanruan_license_server_amd64:1.0.0

Note: 

1. The directory for mapping cannot contain spaces or special characters, otherwise there may be errors.

2. When you start the mirror, it uses the https certificate of the container by default. Only localhost and 127.0.0.1 are supported. If you need other IP addresses and domain names, start the directory where the mapping certificate is located and use your certificate.

3. When -P is used, Docker will bind the container to a random port that has not been used from 49153 to 65353. The host port 49155 in the following text is one of them.

If you want to use one specific host port, modify -P to -p Host port:Container port in the start command.

4. The container directory description is shown in the following table. If you need to map multiple directories, add -v between different directories.

For example, to map /app/config to the D:\William\lic\config directory and /app/log to the D:\William\lic\log directory, the command is docker run -v /D/William/lic/config:/app/config -v /D/William/lic/log:/app/log -P -d fanruan_license_server_amd64:1.0.0.

4. List the information of the container that is running.

docker ps

Submitting the Authentication

The Docker container port 8081 is mapped to the host port 49155. For details, see the Starting the License Server section.

Access https://172.16.63.131:49155/license/qrcode to scan the QR code for authentication. You need to modify the IP address and port number as needed.

Scan the generated QR code with the browser of your phone, and you will get a six-digit verification code. Enter the verification code in the system, and click Submit. 

Note: 

1. The QR code will expire in five minutes. After five minutes, you need to refresh the QR code manually.

2. After getting the verification code by scanning the QR code, you are advised to register as soon as possible and not to restart the project before completing the registration.

3. To prevent brute force cracking and frequent port access, if you have entered incorrect verification codes more than five times, try again 15 minutes later.

Report Server Verifying the License

Log in to the decision-making platform as the admin, and choose System Management > Registration Management > Version Information > Register Now.

Select Private Cloud as AUTH Method. Enter the IP address and listening port of the license server in Server Address, for example, https://172.16.63.131:49155, and click Submit.

Note: Ensure that the report server can access the license server.

The successful authentication interface is shown in the following figure.

Note: 

1. Max Connections refers to the maximum number of projects that can apply to the license server for registration simultaneously.

2. If the authentication fails, check the firewall settings and open the corresponding port or disable the firewall.

In FineReport earlier than V 11.0.18, if the registration fails, there will be a pop-up window: Failed. Please authenticate again.

FineReport 11.0.18 and later versions optimized the registration failure prompt. If the registration fails, the pop-up window will prompt the specific failure reasons to help you troubleshoot problems.

Standalone Environment Registration Failure

If registration fails, there will be a pop-up window prompting the specific failure reasons. Click Details to view the specific reasons or troubleshooting solutions.

Click Back to return to the registration interface. Registration Failed and Failure Reason are provided in Registration Information. Click View Error Details to see specific reasons and troubleshooting solutions.

Cluster Environment Registration Failure

The reasons for registration failure may vary in different nodes. There will be a pop-up window prompting failure reasons of every node. Click Details to see specific reasons or troubleshooting solutions.

Click Back to return to the registration interface. Failure reasons of every node are listed in a table in Registration Information. Click View Error Details to see the failure reasons or toubleshooting solutions.

Failure Reason

Registration failure reasons are shown in the following table. You can troubleshoot according to the reasons and solutions.

Note:

1. Reasons other than the following ones will lead to the same error: The certificate content is incorrect.

2. When there are multiple reasons, only the first one will be displayed.

Follow the steps to migrate the license server of projects that have been authenticated with private cloud.

Destroying the Original Project License

Use the email address required in the contract to send an email to FineReport business team: business@fanruan.com.

The body of the email should contain the IP address of the license server to be migrated. For example, the IP address in the Report Server Verifying the License section.

FanRuan will destroy the section after confirmation and send an email to inform you.

Note:

Do not restart the license server to be migrated before receiving a clear response from FanRuan.

Copying the privateConfig File

1. Close the license server to be migrated.

2. Get the automatically generated privateConfig file in the /app/config directory of the container.

Getting New Authorization File

Use the email address required in the contract to send an email to FineReport business team: business@fanruan.com.

The format is the same as that in the Getting the License File section. Add the privateConfig file to the email.

After confirmation, FanRuan will generate the fanruan_license_server.tar mirror image file of the license server and send it to you through email.

You can start a new license server to register by following steps in the Registration Procedure section.