password reset for search server not working, during reset, securityadmin.sh script give ssl error

[Inderdeep Singh]

Hi,

We're using Bitbucket server version 7.21.10 and its search functionality seems to be broken.

Test button in server settings gives access denied error. We did the steps mentioned in this article - Test button in Search server for Bitbucket server results in the access denied  for resetting the search server password, but running securityadmin.sh script gives some SSL error while connecting to OpenSearch. Error log give below:

bash +x securityadmin.sh --port 7992 -f ../securityconfig/internal_users.yml -t internalusers -icl -nhnv -cacert /apps/bitbucket/data/shared/search/config/root-ca.pem -cert /apps/bitbucket/data/shared/search/config/bitbucket.pem -key /apps/bitbucket/data/shared/search/config/bitbucket-key.pem
WARNING: nor OPENSEARCH_JAVA_HOME nor JAVA_HOME is set, will use /usr/bin/java
Security Admin v7
WARNING: Seems you want connect to the OpenSearch HTTP port.
securityadmin connects on the transport port which is normally 9300.
Will connect to localhost:7992 ... done
00:57:05.585 [opensearch[_client_][transport_worker][T#1]] ERROR org.opensearch.security.ssl.transport.SecuritySSLNettyTransport - Exception during establishing a SSL connection: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record

OpenSearch certificates are all available in this folder - $bitbucket_home/shared/search/config including root-ca.pem, bitucket.pem and bitbucket-key.pem

[Luiz Elias]

Hi @Inderdeep Singh 

Welcome to the Atlassian Community!
Please use the HTTPS port: 7993, and check if your file "internal_users.yml" has "admin" in the backend_role section.

Best regards,

Luiz

[Inderdeep Singh]

Thanks !

That worked.