Theme

Locked out of the SuperAdmin or Admin UI: repairing the Web/REST service ​

Bad things happen: you let the certificate expire, you configured the wrong binding, or you cut yourself out by applying the wrong security or CORS settings, and you can no longer reach the SuperAdmin or Admin UI. What now? Do you have to uninstall and reinstall everything?

No. The Web/REST executable has a repairhttp verb for exactly this situation.

On Windows, open a command prompt or PowerShell as Administrator, change directory to where Syncplify Server! is installed (C:\Program Files\Syncplify Server!) and run:

powershell
.\ss-webrest.exe repairhttp

On Linux, in a terminal, from /opt/Syncplify/Server/bin:

bash
sudo ./ss-webrest repairhttp

Then restart the Web/REST service (ss-webrest), log in to the SuperAdmin UI, and configure the Global Configuration again according to your needs.

What the command does ​

The command puts the Web/REST service back into a state that can be reached: it resets the Global Configuration to its defaults and makes sure at least one valid, self signed X.509 certificate is available for TLS (the browser may complain that it is untrusted, but you are in again, and you can change it). The defaults it restores include:

  • the binding: every IP address of the machine, port 6443, TLS 1.2 to 1.3 with the secure cipher suites;
  • the web security settings switched off, and CORS at its permissive defaults;
  • the session settings, rate limits, logging, default language and update policy;
  • the console's Shield rules and its safe list (the loopback addresses).

Because it rewrites the whole Global Configuration, the other sections of that page are reset as well: the email server, the single sign on providers, the trusted proxies, the metrics allow list, the custom headers and the Telegram bot. Note down what you had before you run it, or take a database backup first. Virtual sites, users, VFSs, certificates and licenses are not touched.

INFO

On v6 the executable is named ss6-webrest and lives in /opt/Syncplify/ServerV6/bin on Linux; on v7 and v8 it is ss-webrest. Up to v6.1.3 the command only disabled the advanced security settings and CORS; from v6.1.4 it also resets the binding and ensures a certificate exists.