Layer 7 - Invalid Policy Breaking API Calls and Policy Manager

Products

• CA API Gateway
• API SECURITY
• CA API Gateway Precision API Monitoring Module for API Gateway (Layer 7)
• CA API Gateway Enterprise Service Manager (Layer 7)
• STARTER PACK-7
• CA Microgateway

Issue/Introduction

A policy was somehow was saved in an invalid state.  According to XML validator, it appears to be valid.  However the gateway to be unable to execute it.

1. When the policy is attempted to execute after message-received, this error is encountered:
   WARNING 2 service is resolved but the corresponding policy is invalid for service GOID e001cfd0c1c1ffaa18e187b5e72fdd38 (auth/oauth/v2/token).  Exception caught! 

Policy Manager throws null pointer exception in these cases:

1. Opening the revision history on the policy to attempt to either diff the broken and previous/working versions or to set the active version.
2. In the policy editor window, hitting either "validate" or the up/down button to expand the whole policy.

Environment

This is due to the mismatch id between the gateway loaded service and the service in database. This is generally due to a migration issue.

Resolution

Nine times out of ten an "invalid service goid" should be due to the mismatch id between the gateway loaded service and the service in database. Restarting ssg (sometimes server reboot is needed) should reload the service from database and resolve this problem . 

You may need to completely remove the policy and install it again if the reboot does not work. 

The other time out of ten it may be due to an improperly configured XSL transformations, in the Apply XSL Transformation assertion, there is an xsi:schemaLocation attribute. The XSL processor in the gateway does not support it. After removing the attribute, the policy should process fine.

Additional Information

Internal Service Error: https://community.broadcom.com/communities/community-home/digestviewer/viewthread?MID=797859#bme37fb7c5-7d13-4325-81a3-c4088b2dd1fa

 

Service resolved, Goid Error: https://community.broadcom.com/communities/community-home/digestviewer/viewthread?MID=770649#bm5bc78dfe-9b67-41bc-9f96-ec9435c9a468

 

Apply XSL Transformation assertion: https://community.broadcom.com/communities/community-home/digestviewer/viewthread?MID=754705#bm649454e7-b542-4afc-8147-386a43d9814f