Unable to sign into NFA Console after integration with CA Performance Management

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

When trying to log in to the NFA Console after integration with CA Performance Management I get the below 500 message below:

 

HTTP ERROR 500

Problem accessing /sso/sign-in-process.jsp. Reason:

    Server Error

Caused by:

javax.servlet.ServletException: org.apache.jasper.JasperException: An exception occurred processing JSP page /sign-in-process.jsp at line 146

143: else
144: {
145:     // Validate the user
146:     userId = authenticationUtility.authenticateUser(session, singleSignOnWSSoap, username, password);
147:     // Check the result
148:     if (userId <= 0)
149:     {


Stacktrace:
	at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:146)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132)
	at org.eclipse.jetty.rewrite.handler.RewriteHandler.handle(RewriteHandler.java:335)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132)
	at org.eclipse.jetty.server.Server.handle(Server.java:561)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:334)
	at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:251)
	at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:279)
	at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:104)
	at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:289)
	at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:149)
	at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:104)
	at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:124)
	at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:247)
	at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.produce(EatWhatYouKill.java:140)
	at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)
	at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:243)
	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:679)
	at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:597)
	at java.lang.Thread.run(Thread.java:748)
Caused by: org.apache.jasper.JasperException: An exception occurred processing JSP page /sign-in-process.jsp at line 146

143: else
144: {
145:     // Validate the user
146:     userId = authenticationUtility.authenticateUser(session, singleSignOnWSSoap, username, password);
147:     // Check the result
148:     if (userId <= 0)
149:     {

Cause

Local Override set in NFA for the "LDAP Connection Password" is not encrypted by the NFA SSO Configuration tool, however the NFA SSO Module expects the LDAP Password to be encrypted if you are linked to CAPC.  

This will only happen if NFA is linked to CAPC, and the LDAPConnectionPassword is set in NFA Directly with a Local Override in the SsoConfig tool.

Resolution

1. Make sure the CAPC SSO Settings have the LDAP Connection Password set with "Remote Override" so that the password will sync down to NFA.  If you make any changes make sure to resync the NFA Data Source.

 

2. Remove the "Local Override" in NFA for the "LDAP Connection Password" by running the query below on the NFA Console server:

          

          mysql -P3308 -D -unetqos -pnetqos reporter -t -e "delete from performance_center_properties where PropName = 'LdapConnectionPassword' and Priority = 2;"

 

3. Attempt to login to NFA again.