SPC-OCA-10102: Error restarting the OneClick server: cannot set egid: Operation not permitted<br>SPC-OCA-10579

Products

• CA Spectrum

Issue/Introduction

The customer is seeing some unusual activity on the OC server after a restart. e.g.

SPC-OCA-10301: Unable to write web.xml changes is returned trying to save/commit the changes after the OneClick SSO Configuration was configured and authentication successfully tested.


 

Environment

Spectrum 10.2.3 on Linux Centos 7

Cause

The catalina.out file showed the following exception:
Sep 24, 2018 12:43:19.651 - Error writing changes to web.xmljava.lang.Exception: SPC-OCA-10102: Error restarting the OneClick server: cannot set egid: Operation not permitted<br>SPC-OCA-10579: The user may not have permissions to use the &#39;at&#39; command or to run the restart script. SPC-OCA-10594: <br>Please check the /etc/at.deny & /usr/Spectrum/tomcat/webapps/spectrum/configtomcat files.<br> 
at com.aprisma.spectrum.app.web.util.ServerXMLHelper.restartWebServer(ServerXMLHelper.java:269) 
at com.aprisma.spectrum.app.sso.web.struts.SSOConfigAction.restartTomcatService(SSOConfigAction.java:903) 
at com.aprisma.spectrum.app.sso.web.struts.SSOConfigAction.execute(SSOConfigAction.java:688) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) 
at java.lang.reflect.Method.invoke(Method.java:498) 
... 

Resolution

So the changes in web.xml was properly saved, but the user did not have permission to restart the OneClick server.
Customer rebooted the machine and verified that OC server was working properly, however due to other permission issues on that machine he rebuilt the server.
Note: some time after the OneClick installation OS updates were installed.  More likely the  the problem was with the underlying OS and not with OneClick.