topic Re: QIB NLU Configuration Failed in Integration, Extension & APIs

QIB NLU Configuration Failed

Imran_Arshad — Sat, 16 Nov 2024 04:20:30 GMT

Hi Qlik Community,

I am posting QIB-NLU inquiry here as no thread is found in the drop-down list.

I have tried to connect QIB-NLU with the certificates issued by my QlikSense Server & also tried with SSL-Certificate (issued by Certified Authority) but in both cases i am unable to connect both machines, please note that QIB & QS are installed on same machines.

Below are the logs taken from QIB-NLU-Configuration File:

}
2019-10-18 15:13:52.5062|INFO|Configuration|CreateAgent|Creating new agent for Qlik Insight Bot nlu
2019-10-18 15:13:52.5212|INFO|Configuration|SendRequest|Sending request with following parameter
2019-10-18 15:13:52.5322|INFO|Configuration|SendRequest|Method: Post
2019-10-18 15:13:53.4148|ERROR|Configuration|SendRequest|Error while sending request with following parameter
2019-10-18 15:13:53.4289|ERROR|Configuration|SendRequest|The remote server returned an error: (401) Unauthorized.
2019-10-18 15:13:53.4419|ERROR|Configuration|SendRequest|{
"status": "error",
"message": "NLU configuration failed."
}
2019-10-18 15:13:53.4549|ERROR|Configuration|CreateAgent|Error while creating agent
2019-10-18 15:13:53.4689|ERROR|Configuration|CreateAgent|{
"status": "error",
"message": "NLU configuration failed."
}
2019-10-18 15:13:53.4830|ERROR|Component Configuration|ConfigureNLU|{
"status": "error",
"message": "NLU configuration failed."
}

Re: QIB NLU Configuration Failed

treysmithdev — Sat, 19 Oct 2019 02:10:05 GMT

To troubleshoot ,I would try getting to the NLU from a browser on your QS/QIB Windows machine: https://your.nlu.domain.com:5000.

Check the certificate in the browser, what does it say?

Also, can you provide some detail on your certs in the NLU box. For example, which commands you used to create the cert files and the directory you placed them in.

Re: QIB NLU Configuration Failed

Imran_Arshad — Sat, 19 Oct 2019 17:56:55 GMT

@treysmithdev Thanks for the reply as per for instructions, i have already tried & checked opening NLU in windows machine through browser, its opening perfectly with not accepting the certificate.

My main question is that "Which certificates should i give to both machines to communicate:

1. SSL - Certificate (issued by Domain Service Provider)

2. QS & QIB - Both are installed on same machine (Machine Certificate generated through QMC) &

if i use the machine certificates then which should be used, "client.pfx" or "server.pfx" or "root.cer" ... ... ?

Certificates-folder is mapped in the yml-file

Re: QIB NLU Configuration Failed

treysmithdev — Sat, 19 Oct 2019 18:17:21 GMT

To be more specific, when you go to the status page check the certificate being used. Is it the one you are expecting? As far as which one to use, I would use the SSL provided by a trusted CA.

Re: QIB NLU Configuration Failed

Imran_Arshad — Mon, 21 Oct 2019 20:11:41 GMT

SSL Certificate is applied successfully & it working fine as per your shared snapshots.

Now in next step, i am getting the error as per screenshot, support is needed to resolve this issue.

Below message request is coming upon setting-up NLU-Configuration on NLU-Machine

Below are the log for the above activity:

}
2019-10-21 23:42:44.4833|INFO|Configuration|CreateAgent|Creating new agent for Qlik Insight Bot nlu
2019-10-21 23:42:44.4963|INFO|Configuration|SendRequest|Sending request with following parameter
2019-10-21 23:42:44.5073|INFO|Configuration|SendRequest|Method: Post
2019-10-21 23:42:45.4988|ERROR|Configuration|SendRequest|Error while sending request with following parameter
2019-10-21 23:42:45.5128|ERROR|Configuration|SendRequest|The remote server returned an error: (401) Unauthorized.
2019-10-21 23:42:45.5238|ERROR|Configuration|SendRequest|{
"status": "error",
"message": "NLU configuration failed."
}
2019-10-21 23:42:45.5358|ERROR|Configuration|CreateAgent|Error while creating agent
2019-10-21 23:42:45.5358|ERROR|Configuration|CreateAgent|{
"status": "error",
"message": "NLU configuration failed."
}
2019-10-21 23:42:45.5598|ERROR|Component Configuration|ConfigureNLU|{
"status": "error",
"message": "NLU configuration failed."
}

Re: QIB NLU Configuration Failed

marcos_herrera — Thu, 07 Nov 2019 19:53:21 GMT

Hi Friends

I ned a help, i have a valid certificate (CA) on PFX format, this certificate is wildcard *.mydomain.com and is usted on each site QlikSense, NLP and NLU, on NLU i splited on pem files (CRT and Key) with the following commands

openssl pkcs12 -in Cert.pfx -nocerts -out NluEnc.key
openssl rsa -in NluEnc.key -out nlu_key.pem
openssl pkcs12 -in Cert.pfx -clcerts -nokeys -out nlu_crt.pem

Then i stored the certificates on home/nlu/Certificates the path configured on docker-compose.yml is the default

environment:
POSTGRES_HOST: nlu_db
isHttps: "True"
CertificatePath: "/nlu/Certificates/"

When i tested the NLU URL opens well but without certificate

Re: QIB NLU Configuration Failed

Imran_Arshad — Fri, 08 Nov 2019 04:51:15 GMT

Install your certificate in Linux / NLU Machine by using following commands:

$ /usr/local/share/ca-certificate

$ sudo apt-get install ca-certificates -y

$ sudo dpkg-reconfigure ca-certificates

$ sudo update-ca-certificates

If the error still exists then install it manually from the list of certificates.

Restart your instance after the above configurations & run your containers after checking the status of Docker.

Cheers.

Re: QIB NLU Configuration Failed

marcos_herrera — Fri, 08 Nov 2019 12:28:05 GMT

Hi mranarshad81

Thanks for the answer, i tried to install the certificates following the steps, but not worked, also i researched and found the same commands but with a different path $ /usr/share/ca-certificate/extra i stored on this folder and execute the commands, the terminal console show me the following message

2 added, 0 removed; done.
Processing triggers for ca-certificates (20180409) ...
Updating certificates in /etc/ssl/certs...
2 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

I restarted the NLU server and then laucnh the NLU sudo docker-compose up but noy works, the problem is the same

Re: QIB NLU Configuration Failed

marcos_herrera — Fri, 08 Nov 2019 12:43:19 GMT

I forget say that the certificates was generated by GoDaddy and for the procedure made on $ /usr/share/ca-certificate/extra folder, i converted the PEM file to CRT file

Re: QIB NLU Configuration Failed

treysmithdev — Fri, 08 Nov 2019 13:51:27 GMT

What are your volume settings in your docker-compose.yml file?

Re: QIB NLU Configuration Failed

marcos_herrera — Fri, 08 Nov 2019 14:05:56 GMT

Hi Treysmithdev

Thanks for your answer, this is docker-compose.yml file

version: "3.6"
services:
db:
image: qlik-docker-insightbot.bintray.io/nlu_db:1.1.1
container_name: "nlu_db"
volumes:
- db-data:/var/lib/postgresql/data
networks: ['qib-network']
duckling:
image: qlik-docker-insightbot.bintray.io/nlu_duckling:1.1.1
container_name: "duckling"
networks: ['qib-network']
nlu:
image: qlik-docker-insightbot.bintray.io/nlu:1.1.1
restart: always
container_name: "qib_nlu"
networks: ['qib-network']
ports:
- "5000:5000"
volumes:
- nlu-data:/nlu/data/
- "/home/:/nlu/Certificates/"
- qib-license:/nlu/data/configuration_data/
environment:
POSTGRES_HOST: nlu_db
isHttps: "True"
CertificatePath: "/nlu/Certificates/"
depends_on:
- db
- duckling
volumes:
db-data:
nlu-data:
qib-license:
networks: {qib-network: {}}

Re: QIB NLU Configuration Failed

treysmithdev — Fri, 08 Nov 2019 14:14:23 GMT

Put your certificates in your "/home/"directory.

Reason being is your /home/ directory is being mounted to your container directory /nlu/Certificates/.

volumes:
- nlu-data:/nlu/data/
- "/home/:/nlu/Certificates/"
- qib-license:/nlu/data/configuration_data/

Re: QIB NLU Configuration Failed

marcos_herrera — Fri, 08 Nov 2019 15:43:12 GMT

Hi Treysmithdev

Thanks for the answer, i remove the docker images with command docker system prune -a because i have two versions 1.1.0 and 1.1.1,now i have the same docker-compose.yml file , before to re install the image, Do you have some recommendation or suggestion to modify the paths on docker-compose.yml file

Thanks

Re: QIB NLU Configuration Failed

treysmithdev — Fri, 08 Nov 2019 16:51:17 GMT

Did you try moving the certificates to the /home/ directory?

Re: QIB NLU Configuration Failed

marcos_herrera — Sat, 09 Nov 2019 18:47:30 GMT

Hi Friend

Yes i moved the certificates to home folder, now the problem is different when i tried to launch docker with sudo docker-compose up command theconsole cannot up nlu image

/usr/local/lib/python3.6/site-packages/tensorflow/python/framework/dtypes.py:528: FutureWarning: Passing (type, 1) or '1type' as a synonym of type is deprecated; in a future version of numpy, it will be understood as (type, (1,)) / '(1,)type'.

I upgrade numpy and tensorflo packages on Python 3.6 but not works

Re: QIB NLU Configuration Failed

marcos_herrera — Sat, 09 Nov 2019 23:19:08 GMT

Hi Treysmithdev

I re installed all (included UBUNTU) and now docker-compose up started well, i moved the certificates on homefolder, but the error persist, when i open NLU URl from browser still show insecure connection

Re: QIB NLU Configuration Failed

treysmithdev — Sat, 09 Nov 2019 23:24:40 GMT

That is not the /home/ directory. That is your user's home directory.

Open up a terminal and run the following cmd:

> cp ~/*.pem /home/

Re: QIB NLU Configuration Failed

marcos_herrera — Sat, 09 Nov 2019 23:43:07 GMT

Hi Treysmithdev

Thanks for help, I executed the suggested command and restart the NLU server, the error persist

Re: QIB NLU Configuration Failed

treysmithdev — Sat, 09 Nov 2019 23:50:07 GMT

What is the output of the following?

> cd /home/ > ls -all

Re: QIB NLU Configuration Failed

marcos_herrera — Sat, 09 Nov 2019 23:53:07 GMT