Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-5201: Cloud connector unable to connect through web proxy via HTTPS

Centrify Identity Service, App Edition ,  

12 April,16 at 11:07 AM

Applies to: All versions of Centrify for SaaS & Centrify for Mobile

Problem:

After upgrading the Centrify Cloud Connector to versions 15.2 or higher, web proxies can no longer connect to the internet, or periodically become disconnected.


Cause:

In versions 15.1 and below, if the Cloud Connector was running behind a web proxy; use of HTTPS mode would result in an increasing number of unclosed TCP connections stuck in a CLOSE_WAIT state.

As the number of CLOSE_WAIT connections increased in some connector hosts, network connectivity problems would eventually arise causing the need for the connector service to be restarted in order to clear out the TCP connections.

To fix this issue and improve the stability of the product, version 15.2 of the cloud connector changed the default connection protocol to HTTP web sockets instead (as recommended by Microsoft).

However it was found that this change was 
incompatible with some environments using web proxies.


Workaround:
  1. Open the Config file from the following location in a text editor:
    • C:\Program Files\Centrify\Cloud Management Suite\Centrify.Cloud.Core.ProxyHost.exe.config
  2. Search for the following value:
    • <add key="Microsoft.ServiceBus.OverrideAutoDetectMode" value="HttpsWebSocket" />
  3. Change this to:
    • <add key="Microsoft.ServiceBus.OverrideAutoDetectMode" value="Https" />
  4. To make this change persist across Connector updates, search for the following line:
    • <enforceSettings />
  5. Change this to: (Optional: If this edit is not used, then the change in Step 3 will be overwritten back to default values at the next Connector update)
    • <enforceSettings>
    • <enforce XPath="/configuration/appSettings/add[@key='Microsoft.ServiceBus.OverrideAutoDetectMode']" />
    • </enforceSettings>
  6. If the <enforceSettings> change is NOT being used, open the Connector Configuration Panel and disable auto-updates to avoid the changes from being overwritten at the next update.
     
  7. Save the changes
     
  8. Restart the connector service to invoke the changes.
User-added image

Resolution:

This will be fixed in a future release of the Centrify Cloud Connector.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.